Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/151bc360-93b7-3bff-a30a-3f895e9106ca.roa
File:                     151bc360-93b7-3bff-a30a-3f895e9106ca.roa (raw, json)
Hash identifier:          6mEN0BhBgqMGu+gEPiZ7wRIn/+KWMAGoe4stt2Zs/6k=
Subject key identifier:   C9:31:C9:EB:D7:65:2A:33:1C:CE:A2:6B:89:B0:07:14:53:93:5F:AC
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584988CF1EE56E40DEEDAC53C940
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/151bc360-93b7-3bff-a30a-3f895e9106ca.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     46606
IP address blocks:        192.185.224.0/21 maxlen: 21
                          192.185.232.0/21 maxlen: 21
                          192.185.240.0/21 maxlen: 21
                          192.232.216.0/22 maxlen: 22
                          192.232.220.0/22 maxlen: 22
                          192.232.248.0/22 maxlen: 22
                          192.254.180.0/22 maxlen: 22
                          192.254.184.0/22 maxlen: 22
                          192.254.224.0/21 maxlen: 21
                          192.254.232.0/21 maxlen: 21
                          192.254.249.0/24 maxlen: 24
                          192.254.250.0/24 maxlen: 24
                          192.254.251.0/24 maxlen: 24
                          192.254.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:1e:e5:6e:40:de:ed:ac:53:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=46a5adab-0de0-42f6-b0c5-9bcf98d81417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:5d:ff:84:f2:9d:e9:9e:53:51:c2:f9:dd:
                    ff:a4:cc:1d:7d:c8:bd:c1:97:42:9f:28:e4:b0:2d:
                    ad:01:17:55:f8:9b:23:cd:2e:2c:f4:6b:ef:3e:c6:
                    ed:c2:a4:ec:25:d9:55:93:19:89:9d:f3:2b:9f:a0:
                    fc:03:02:19:50:10:d4:fa:a6:aa:4c:43:67:a0:e2:
                    6e:eb:0c:18:5a:1e:11:6f:69:7a:6a:d5:72:4c:4f:
                    3a:08:55:8e:1a:b7:19:05:21:0f:c1:d2:cf:6f:58:
                    3b:33:86:2a:38:34:11:b6:86:e1:f0:1c:36:68:fd:
                    4f:6b:de:70:e3:3a:46:a3:ee:65:0c:03:18:7a:2e:
                    fa:c8:14:55:c6:f9:30:c4:b8:2b:d3:b1:cb:d4:d1:
                    01:c3:8d:bb:e5:18:51:94:29:18:3e:6d:55:cc:9c:
                    48:62:00:96:bc:72:dd:28:9f:ba:c3:6a:0f:33:94:
                    a6:88:da:83:78:b5:7f:9c:19:db:c0:7a:ef:9e:45:
                    22:94:82:d7:dd:dc:98:ec:3f:e8:16:8e:f5:43:d9:
                    c2:11:7d:f5:5c:97:69:fd:ce:34:e9:f2:2d:dc:c7:
                    6b:0c:df:b8:85:66:d9:f0:5d:87:b9:3d:bd:48:d9:
                    15:dc:06:94:64:e5:0a:bf:42:47:e6:5a:97:4d:d0:
                    a9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:31:C9:EB:D7:65:2A:33:1C:CE:A2:6B:89:B0:07:14:53:93:5F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/151bc360-93b7-3bff-a30a-3f895e9106ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.185.224.0-192.185.247.255
                  192.232.216.0/21
                  192.232.248.0/22
                  192.254.180.0-192.254.187.255
                  192.254.224.0/20
                  192.254.249.0-192.254.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:13:45:9d:ab:98:f6:da:42:72:fd:f8:6b:4a:62:f1:e2:da:
         76:91:c9:87:e2:7c:c9:c3:0b:cb:ff:ad:32:75:8b:8b:d2:96:
         a9:b2:9d:62:60:ba:d3:12:d9:a8:a8:29:13:7d:80:b0:f9:d2:
         ca:c8:9c:b3:8e:11:61:17:d1:f9:94:5a:95:c3:50:ce:b4:e1:
         80:85:bb:ba:4d:49:9b:21:28:9b:0d:e7:5d:d8:50:52:b2:3e:
         0b:5d:e8:3e:28:02:6f:59:ca:ae:80:a7:0b:ba:16:f3:76:35:
         a8:89:26:95:87:11:5e:31:7c:86:56:48:7f:71:05:fe:dd:ac:
         32:fe:95:09:8c:22:2b:f9:c7:39:48:e7:1c:78:38:82:90:9f:
         b2:b2:8d:41:37:66:a0:13:bf:0d:b1:94:3c:19:85:8c:40:31:
         a1:22:7d:11:ea:0a:15:75:ed:18:ce:92:63:86:73:44:27:21:
         a9:41:8d:65:2c:0d:b8:06:61:75:6a:69:17:2b:ac:44:12:4c:
         e2:fd:4e:aa:1e:de:ed:e2:c8:3a:92:08:f5:6b:0a:61:a2:ec:
         fd:d9:72:49:e8:09:05:ca:96:1b:54:26:a2:a5:7e:e3:4f:c5:
         bb:66:6a:51:92:74:8e:1f:92:ad:c5:63:f0:f9:8a:06:eb:a6:
         ca:70:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:42:51 2025 by rpki-client