Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/92be3b32-a429-341e-bd0b-5554855be122.roa
File:                     92be3b32-a429-341e-bd0b-5554855be122.roa (raw, json)
Hash identifier:          vBHt1i6f9gOR/qQ57Aq/9W4m4a2NJkqjwIlxT7gG04k=
Subject key identifier:   3D:B0:2A:E4:1E:8D:91:EA:5A:60:9E:23:E7:F1:E4:28:BD:C5:9C:3C
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584A03A5577D6A2FC3BCBBB9D15C
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/92be3b32-a429-341e-bd0b-5554855be122.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     19076
IP address blocks:        204.133.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:57:7d:6a:2f:c3:bc:bb:b9:d1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=5a038d78-80f9-4f6e-834c-fa4d32054ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:2f:c8:e7:28:a7:81:6a:2a:77:3c:63:e5:
                    c8:61:8e:ed:58:e7:b2:ea:af:7a:d8:32:30:b7:94:
                    0b:fd:f8:22:58:1b:6d:a5:b8:d7:45:c6:66:20:4e:
                    cd:84:42:bc:09:4b:79:30:28:8e:5c:ae:12:ce:88:
                    b6:e7:97:d6:53:87:f6:c3:9f:1c:54:ba:a2:5e:da:
                    2d:39:bf:26:0a:29:d2:cd:90:9a:a1:b4:1c:83:6f:
                    fb:2a:28:37:b6:8e:f2:c7:33:67:b7:fb:1d:3a:32:
                    98:cb:49:4e:0c:14:54:88:04:76:f6:70:b7:ef:17:
                    d1:a3:b8:f8:da:33:39:ae:f3:a7:2d:aa:c6:14:ae:
                    a4:17:1c:00:44:9e:74:f0:68:81:48:9a:0f:26:88:
                    41:8b:46:2c:c1:1b:23:a4:35:0f:4f:b9:68:56:3d:
                    99:aa:e2:99:2c:2b:fd:10:10:5e:9d:80:39:9a:a4:
                    33:f9:71:b9:77:24:1d:4e:3b:20:bc:3a:73:13:64:
                    99:89:3d:7d:2b:f9:cb:e1:c2:95:50:a5:b2:fb:03:
                    b4:57:36:8d:e2:7d:cf:e0:3d:ca:9c:87:9d:73:40:
                    9f:9b:75:4f:5c:e8:9c:a4:4b:bf:32:fc:2e:d3:e5:
                    34:0f:a9:a8:f4:07:14:90:c5:03:96:96:45:a0:96:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B0:2A:E4:1E:8D:91:EA:5A:60:9E:23:E7:F1:E4:28:BD:C5:9C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/92be3b32-a429-341e-bd0b-5554855be122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.133.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:65:8f:ce:01:71:4f:58:e0:1a:18:c9:b2:cf:d7:62:d9:e0:
         5a:9f:ea:a8:3f:a3:6d:c4:a5:74:eb:aa:d1:52:c0:5c:37:50:
         45:ea:55:d5:87:77:27:db:e5:83:7a:46:92:14:9f:d7:99:36:
         57:3b:c9:09:e2:38:9e:60:bf:ac:c4:58:99:d6:c1:f8:e9:54:
         81:19:fc:2f:cb:7b:f9:57:56:fe:50:c3:14:b9:2a:10:e3:e5:
         b6:b8:42:1f:2b:7d:40:65:0d:d8:44:38:35:cc:85:a4:f1:0e:
         54:61:b0:be:3b:ec:9a:24:8e:74:a9:60:1c:d3:31:66:4a:13:
         17:64:82:f6:98:3f:ec:40:ba:71:0b:30:42:78:97:e0:69:bb:
         90:a6:6d:1f:4a:e2:b8:7b:b8:67:c1:d7:80:29:0b:e2:4b:0c:
         86:a7:e6:00:e7:ad:8f:0b:8f:5f:77:ad:53:18:d6:b7:8c:e5:
         8b:4f:85:5a:95:bc:23:14:c8:5f:f9:11:d1:44:02:be:f1:e2:
         32:ca:a5:e2:f9:67:62:81:15:3f:32:c2:c1:bc:ea:5b:9d:94:
         72:48:8a:46:48:dc:55:43:ef:00:de:51:ad:21:29:26:3e:bd:
         a7:e8:8e:ac:fb:5f:cc:ab:13:ab:8b:db:13:0c:45:99:7c:62:
         90:1f:0c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:07:33 2025 by rpki-client