Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/cce538a1-d9ec-339a-9ae0-ed814da96b5d.roa
File:                     cce538a1-d9ec-339a-9ae0-ed814da96b5d.roa (raw, json)
Hash identifier:          P6fbO8FfnamedGhiitSa2C/rmMQdjtS8TJFXmUmZ9HU=
Subject key identifier:   49:45:31:13:58:5C:9C:E4:B3:AB:A7:B3:BF:39:20:65:A7:69:48:15
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F432858499F249BEB9E636F6DD0EF7900
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/cce538a1-d9ec-339a-9ae0-ed814da96b5d.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     19442
IP address blocks:        192.25.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:9b:eb:9e:63:6f:6d:d0:ef:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=20b16a27-4afe-40ba-8ec3-e34ef60d987c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:03:72:81:c0:36:86:8e:d0:83:39:2a:f0:
                    9d:94:03:e3:11:33:2d:c0:4c:f7:28:4f:73:a6:86:
                    bf:f0:4e:7c:ae:05:6c:d5:cf:5b:a3:5c:7f:e8:ce:
                    84:a3:45:dc:e9:3c:f4:66:13:5a:26:de:c5:d6:f7:
                    c5:d3:47:5e:0c:9f:15:b4:b0:d6:2b:99:64:b1:85:
                    1a:b8:ff:2f:99:8e:cd:09:c7:22:82:22:47:60:72:
                    ab:52:dd:f6:dc:dc:56:43:74:e9:ed:59:14:e5:3e:
                    0d:61:96:51:4b:6f:d3:b1:9d:1d:14:d7:16:ba:38:
                    7e:d8:85:86:cc:94:18:d9:be:92:aa:d8:57:72:4d:
                    0d:e5:e1:a6:a1:2a:f3:c0:c9:1e:00:cb:fa:95:44:
                    a0:17:03:54:cf:f1:4e:88:2d:84:e3:46:63:85:d5:
                    6a:ad:2a:a8:ae:db:f7:7d:ad:3c:18:b9:70:7b:0e:
                    fd:74:60:eb:fe:30:88:f6:0b:df:13:45:13:0d:e2:
                    e4:14:06:9a:5f:e8:2f:66:a6:5a:38:5c:3f:d9:f9:
                    6e:f5:e3:ae:f7:70:d5:bd:59:7b:3b:be:a1:15:69:
                    6e:77:b9:ed:58:33:11:67:9d:05:0d:c0:c6:b0:bf:
                    44:b9:65:c8:ab:0c:4a:63:81:95:aa:9b:4f:40:66:
                    63:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:45:31:13:58:5C:9C:E4:B3:AB:A7:B3:BF:39:20:65:A7:69:48:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/cce538a1-d9ec-339a-9ae0-ed814da96b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:36:5f:bc:d3:91:99:fe:57:a2:7e:22:a7:15:49:22:61:0c:
         ad:3d:b9:4b:89:21:7d:23:5b:81:6a:6d:c3:22:dd:76:31:81:
         c2:c8:56:89:81:cd:24:2f:99:69:7a:fe:c6:d6:f9:05:44:c3:
         53:a0:0d:28:d7:b7:ae:39:b0:62:12:5e:bb:f4:a9:13:b4:7e:
         31:d8:f6:7d:f4:f3:be:c8:2d:14:16:db:11:ff:9f:15:06:39:
         ca:0a:67:4c:06:6d:7e:23:81:f6:34:3e:f0:9c:26:92:76:27:
         01:f8:7c:a1:24:c7:cd:b9:12:ca:16:b2:f4:94:77:15:b0:2f:
         aa:33:33:f6:e2:46:a8:f2:0a:d6:71:7d:3e:e6:5b:d3:ba:f3:
         b5:78:52:dd:55:10:41:49:b7:a8:bb:03:ef:4c:34:17:6a:d9:
         9b:4b:fc:86:e1:46:75:68:2c:64:d9:f4:70:c6:fe:90:6c:d2:
         a4:72:b5:5f:84:8e:41:ad:0b:14:24:c5:c5:9b:81:77:42:99:
         4e:30:a2:cd:7c:70:7f:85:d2:dc:b3:b9:8f:3d:10:74:6b:09:
         43:be:49:00:66:fe:ef:a5:a2:9f:12:3b:5e:b9:c9:5e:bd:26:
         12:6c:83:31:39:f1:e4:32:60:3a:39:6f:90:55:5b:6b:50:a4:
         e0:05:22:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJvrnmNvbdDveQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg0ZjQ1YmMtNjFiMy00M2RkLWI4NTgtMGViMWE2YTdi
NzJlMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
MjBiMTZhMjctNGFmZS00MGJhLThlYzMtZTM0ZWY2MGQ5ODdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEEDcoHANoaO0IM5KvCdlAPjETMtwEz3KE9z
poa/8E58rgVs1c9bo1x/6M6Eo0Xc6Tz0ZhNaJt7F1vfF00deDJ8VtLDWK5lksYUa
uP8vmY7NCccigiJHYHKrUt323NxWQ3Tp7VkU5T4NYZZRS2/TsZ0dFNcWujh+2IWG
zJQY2b6SqthXck0N5eGmoSrzwMkeAMv6lUSgFwNUz/FOiC2E40ZjhdVqrSqortv3
fa08GLlwew79dGDr/jCI9gvfE0UTDeLkFAaaX+gvZqZaOFw/2flu9eOu93DVvVl7
O76hFWlud7ntWDMRZ50FDcDGsL9EuWXIqwxKY4GVqptPQGZjewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFElFMRNYXJzks6uns785IGWnaUgVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRm
NDViYy02MWIzLTQzZGQtYjg1OC0wZWIxYTZhN2I3MmUvY2NlNTM4YTEtZDllYy0z
MzlhLTlhZTAtZWQ4MTRkYTk2YjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTg0ZjQ1YmMtNjFiMy00M2RkLWI4
NTgtMGViMWE2YTdiNzJlLzE4NGY0NWJjLTYxYjMtNDNkZC1iODU4LTBlYjFhNmE3
YjcyZS5jcmwwHwYDVR0jBBgwFoAU1su1+FzryDHOMvoxQFhDa7e70sswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRmNDViYy02MWIzLTQzZGQtYjg1OC0wZWIx
YTZhN2I3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBmOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMU2X7zTkZn+V6J+IqcVSSJhDK09uUuJIX0jW4FqbcMi3XYxgcLIVomB
zSQvmWl6/sbW+QVEw1OgDSjXt645sGISXrv0qRO0fjHY9n30877ILRQW2xH/nxUG
OcoKZ0wGbX4jgfY0PvCcJpJ2JwH4fKEkx825EsoWsvSUdxWwL6ozM/biRqjyCtZx
fT7mW9O687V4Ut1VEEFJt6i7A+9MNBdq2ZtL/IbhRnVoLGTZ9HDG/pBs0qRytV+E
jkGtCxQkxcWbgXdCmU4wos18cH+F0tyzuY89EHRrCUO+SQBm/u+lop8SO165yV69
JhJsgzE58eQyYDo5b5BVW2tQpOAFIh8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:34:21 2025 by rpki-client