Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa
File:                     e23c22d9-927c-3a62-b4be-b1550143609d.roa (raw, json)
Hash identifier:          pM/CtSJGs1GrQ2BnjQM/XZD27NN7ihddA5PBbhcfjKo=
Subject key identifier:   AC:6F:E1:16:32:EB:A0:54:E2:2D:B0:59:A1:3F:A6:63:AB:C2:75:2B
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A331AF8E9A582A2D592AB6010
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     0
IP address blocks:        192.42.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f8:e9:a5:82:a2:d5:92:ab:60:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=927f7d98-1a1a-4258-b1eb-13a45ac49309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:b5:e0:43:1e:7b:b6:3b:21:e4:39:ba:66:
                    e2:bf:34:87:86:7e:5a:24:1d:16:1e:a6:ad:ee:58:
                    30:b8:47:23:f1:7e:44:95:16:0f:8a:82:f4:7d:21:
                    20:dc:85:48:49:b8:15:cb:6c:8d:ce:4e:dc:70:37:
                    c9:ac:d3:af:dd:59:21:03:fd:29:63:42:fc:72:11:
                    43:c5:01:f3:15:77:ac:c7:da:ab:e5:c5:13:b8:19:
                    b4:34:d7:c9:7e:83:d1:1c:43:47:4c:e0:e1:9a:64:
                    1a:13:62:07:93:14:89:64:1e:5c:12:f9:f8:26:e2:
                    c2:4b:e0:0b:a3:f3:8d:9f:b4:64:fa:59:82:50:af:
                    bb:b5:01:b4:a1:1b:7d:02:29:67:bb:4a:92:60:93:
                    81:fe:36:17:99:e7:19:88:a3:12:4e:3c:50:7c:fe:
                    4e:d3:4d:a2:b6:8b:f8:e5:77:8c:bd:8b:5f:5f:40:
                    ae:f7:5a:43:15:e4:e1:3f:19:5a:0f:91:11:82:41:
                    a2:c5:5c:c7:92:8e:3a:44:c4:64:ae:ec:f1:c5:cc:
                    45:08:fd:ee:a6:1d:31:d4:52:b7:d4:cf:13:f1:e3:
                    b5:4c:b1:5f:14:c3:2b:f2:c7:dd:51:b1:9f:86:e8:
                    31:c9:ef:05:ac:07:e9:87:c1:0c:78:79:1c:2d:89:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6F:E1:16:32:EB:A0:54:E2:2D:B0:59:A1:3F:A6:63:AB:C2:75:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:fa:92:b9:b3:a4:05:72:36:a6:03:c0:6a:29:c9:83:56:8c:
         6e:b5:54:dc:09:4f:3d:fc:b3:e7:c2:b5:41:51:68:a7:27:d5:
         18:16:01:5e:25:0a:d3:18:7b:82:b0:24:45:4b:35:a2:50:79:
         68:67:6e:df:a2:5b:42:fd:89:7a:2e:50:63:53:4b:4b:7c:45:
         9d:5f:8e:7b:3e:b8:f0:3e:62:89:63:f3:d1:cb:b7:be:68:4e:
         26:16:c1:99:23:9f:4f:72:c6:5a:e7:0d:20:33:34:f2:71:a2:
         c8:25:dc:84:7e:92:b0:58:17:bc:f0:03:58:44:1c:04:dc:e1:
         eb:6d:ff:bf:73:30:b1:46:9f:92:f4:b5:ca:e4:59:87:9a:9b:
         de:e5:87:b7:ac:93:f2:14:67:c7:c6:6f:12:84:18:79:b5:c9:
         e6:f3:f2:0a:61:3a:f1:2e:35:10:77:57:3f:cd:61:4b:67:a0:
         39:af:10:9c:57:a7:fd:49:8d:8d:1e:9d:79:71:bf:44:e0:10:
         70:21:ba:03:fe:cb:27:f0:c2:a4:86:70:50:d1:2b:28:93:1d:
         2c:fb:42:29:69:10:9a:96:92:c0:79:9a:22:da:cc:3c:43:27:
         3d:0c:18:b6:c8:e8:f7:e2:7a:bb:1e:76:53:3f:9c:8f:0f:75:
         34:a1:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:23:30 2025 by rpki-client