Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a6d89966-8ce5-3e5b-83c8-f1a003b5e9bb.roa
File:                     a6d89966-8ce5-3e5b-83c8-f1a003b5e9bb.roa (raw, json)
Hash identifier:          OnDETYZVxKPc6j/6N+O/eTPfzWiVM6wKY0YJEy3BlbA=
Subject key identifier:   C8:06:69:12:CC:89:27:16:96:A0:34:A4:A2:EF:78:C5:E9:72:99:F1
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F43285849C0A4DAE98C5C46CB86BDD400
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a6d89966-8ce5-3e5b-83c8-f1a003b5e9bb.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     393755
IP address blocks:        192.102.255.0/24 maxlen: 24
                          2607:3380::/40 maxlen: 40
                          2607:3380:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:da:e9:8c:5c:46:cb:86:bd:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=f740e8f1-b0b5-4e3b-89e4-6d1f4462298a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ae:1c:08:d8:ae:f1:c9:88:ca:59:9b:18:b5:
                    dc:dd:2a:22:d9:29:ec:aa:89:84:46:bf:95:d3:a3:
                    51:4d:86:9c:aa:e0:a0:a3:01:1a:9c:57:5a:be:49:
                    c3:2f:c1:1e:bb:56:49:b9:d0:ac:0f:b5:63:f1:ba:
                    86:d0:7d:f3:33:6f:a5:f8:43:54:c3:e7:e9:43:d3:
                    a8:4d:4a:83:0d:c6:d0:95:4a:07:93:f2:79:27:fb:
                    c2:14:5a:e5:1d:6a:8e:75:07:45:e0:e1:64:91:de:
                    72:81:97:54:83:80:f4:98:35:a0:22:c2:ab:dd:38:
                    cd:6e:25:45:2a:07:b7:91:e8:6c:06:ba:4f:31:b7:
                    f7:b9:97:5e:49:be:d2:c6:64:08:41:a9:d0:0c:f4:
                    e0:c4:57:b0:ea:f4:7e:73:c6:73:f9:cb:e6:51:cb:
                    ed:8f:be:63:f3:80:8d:64:70:c2:7e:62:7d:e3:35:
                    7e:2e:c4:11:8c:3c:2d:a6:b6:a5:34:a2:e0:9c:29:
                    d4:31:b3:74:2f:02:83:81:c2:f8:e4:da:25:21:49:
                    68:15:f3:be:ba:0d:48:00:c4:5e:8d:30:c2:68:f1:
                    f6:e8:a3:b4:88:6c:e3:fd:0d:a2:37:93:df:80:4b:
                    a4:23:04:48:66:ce:85:62:c3:b5:9d:a8:30:b2:f2:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:06:69:12:CC:89:27:16:96:A0:34:A4:A2:EF:78:C5:E9:72:99:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a6d89966-8ce5-3e5b-83c8-f1a003b5e9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.255.0/24
                IPv6:
                  2607:3380::/40
                  2607:3380:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:6f:7d:0a:be:04:cb:48:a5:47:c6:42:d0:96:50:38:75:36:
         86:d0:f1:be:66:0e:a5:33:6a:9e:97:a8:cc:24:2b:2d:c2:39:
         20:6d:c1:a7:15:18:87:36:e2:62:4c:b1:38:29:a7:42:5c:93:
         7b:dd:37:b1:59:8d:c0:1a:f8:a4:77:37:18:cb:c8:89:30:9e:
         f8:fc:b5:84:5e:6a:72:9c:95:a8:9a:c8:5a:68:d9:f7:41:5b:
         53:2c:bb:7d:5c:4f:9f:09:fd:0f:b0:4f:e0:76:02:f8:28:db:
         5b:72:38:a1:0b:01:a0:08:22:30:da:94:6d:99:5f:d5:bb:85:
         c1:e2:fd:f7:38:ae:5e:c7:9c:90:6c:48:3d:91:a8:20:99:80:
         1b:aa:b6:30:58:cc:69:f9:1f:3d:7b:65:30:21:e5:57:ff:b5:
         bf:c2:2d:12:c8:b2:b0:a9:20:95:b3:a4:db:28:29:a5:f9:e6:
         4f:13:d9:f5:2d:4c:ec:15:f3:ab:81:09:08:54:43:bf:16:d1:
         09:60:a4:5e:0f:95:46:1b:58:df:bc:f1:c9:29:b5:4a:00:98:
         51:fa:e7:fa:44:a9:03:c5:71:c5:41:34:79:09:03:52:bd:17:
         7f:a4:2d:a9:81:16:15:8b:9e:2c:8e:e2:b3:80:2e:b9:81:63:
         d8:20:19:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 6 19:58:41 2025 by rpki-client