Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa
File:                     ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa (raw, json)
Hash identifier:          vRUzpa+jLQDwIFvGtcavlsEr87WV6zcK+HcHGo+YFZA=
Subject key identifier:   F1:50:87:EC:59:F4:27:86:E0:58:E0:8A:B8:E3:D2:7D:F1:F8:5B:8C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DF5A5864E922D56D0E0DC4C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     30036
IP address blocks:        192.119.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:58:64:e9:22:d5:6d:0e:0d:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=fce24c4a-5eb9-4dbf-b4c2-f705774f79b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:68:3e:a4:11:c2:10:fd:26:1e:27:30:1e:
                    a6:6f:51:2b:1b:74:16:64:8a:1e:71:e6:76:df:b7:
                    11:18:d8:bb:b1:76:8a:b7:a7:f2:48:2d:ef:51:5f:
                    85:4b:09:4e:f5:df:53:ec:c7:b5:17:26:b0:56:fb:
                    91:71:98:c5:53:81:14:20:6e:8d:69:f6:b2:0d:11:
                    fb:2d:fb:5a:20:dc:d8:e7:f0:26:fe:f1:7e:e4:8b:
                    6d:e0:45:31:44:60:f5:35:57:90:92:0d:53:31:f0:
                    e7:64:7e:3b:8a:a0:7e:1c:10:38:d6:e9:58:7a:3d:
                    a4:75:2c:7d:c3:67:13:ef:14:c0:b0:43:08:8f:0a:
                    5a:fd:be:94:a6:b8:20:0a:5f:e7:2b:64:5d:71:67:
                    7a:f7:0d:51:5f:e6:1c:80:ce:09:ba:a1:9a:3d:33:
                    b5:d9:01:7b:35:3d:84:2b:15:03:01:c7:37:2c:95:
                    ce:9f:16:1b:0b:ff:f9:dc:46:83:56:b1:c8:78:f7:
                    0c:e0:e0:8b:62:a1:ff:47:8a:15:fe:df:f6:f0:4b:
                    66:47:7d:92:f6:dd:87:a8:04:d9:70:41:d1:4f:f5:
                    b2:1c:59:1f:a5:e7:7a:9e:91:a4:2c:06:81:c5:da:
                    03:dc:f0:71:91:a2:72:7d:b5:d6:d8:c5:3e:2c:b3:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:50:87:EC:59:F4:27:86:E0:58:E0:8A:B8:E3:D2:7D:F1:F8:5B:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f2:7d:e9:be:fa:41:ba:62:67:0a:aa:72:0d:72:5b:83:27:
         a7:4e:c6:ae:c2:69:b0:d0:30:d7:06:27:91:ef:f4:d3:57:39:
         ba:7e:39:74:38:d4:83:d3:2b:7d:b4:ab:db:64:ad:72:34:4d:
         1b:b8:b5:b9:02:1c:05:b7:e5:13:ab:75:83:67:e5:f0:42:03:
         08:a1:ed:99:19:e7:54:fd:14:2e:bf:7a:bc:f9:bd:f6:f8:07:
         1e:8d:0c:5f:7f:f7:ee:f8:5c:ae:e6:b7:a5:cd:9b:cf:c9:67:
         b8:50:cb:03:19:4a:15:7a:25:b0:8a:ef:90:5e:3c:88:c8:e1:
         50:0e:ff:9b:9a:f6:2f:70:92:dc:d4:f5:8c:61:1a:62:8c:ce:
         b0:f6:ff:a2:e5:8e:93:9b:31:88:53:04:d2:aa:64:05:46:64:
         39:ed:b5:ec:87:8d:e7:22:ee:9d:a3:05:e3:93:4c:44:21:83:
         c8:70:13:65:d4:98:80:75:ff:5b:c4:0d:ab:12:66:12:a2:15:
         9b:dc:34:99:53:13:1c:ca:c6:49:24:c3:12:8e:91:b4:d9:ea:
         9d:9a:aa:a2:d2:79:ae:8b:3d:14:0d:62:26:6d:18:74:92:d5:
         43:f7:75:46:fb:06:74:f9:0f:ef:e4:73:3a:64:13:d2:42:76:
         df:ce:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:31:54 2025 by rpki-client