Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4d3eb862-5ab9-362b-bca6-66ffa1d5e67d.roa
File:                     4d3eb862-5ab9-362b-bca6-66ffa1d5e67d.roa (raw, json)
Hash identifier:          gyzq08F5Gi4obFHvhoqHHg7y0orY3iW45/aB/N1qrf8=
Subject key identifier:   E4:B7:E9:89:5B:75:2E:2C:9B:97:28:C8:FB:DC:78:D3:1A:A7:5C:90
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849FCAA808048D0A3E2E8773CC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4d3eb862-5ab9-362b-bca6-66ffa1d5e67d.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     40934
IP address blocks:        204.2.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:80:80:48:d0:a3:e2:e8:77:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=ca4d44a6-06a5-4641-99f1-9b7035cc6711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5d:cd:35:e9:e9:0d:43:30:18:16:4d:6f:10:
                    c5:a3:cf:3f:8c:3b:a8:f8:e0:44:a9:27:2d:3a:36:
                    24:39:ac:4e:65:20:54:88:e7:58:45:49:3c:32:2b:
                    82:b8:86:5c:5a:4e:88:b4:7e:48:e8:84:78:cf:d8:
                    3a:28:ad:32:0f:69:09:51:9a:e8:b9:74:92:15:e9:
                    76:9f:d5:73:a5:47:23:1c:eb:1d:2c:bb:20:99:50:
                    fe:57:5b:67:59:7e:1e:57:8e:22:14:f1:d6:ce:27:
                    ae:99:92:58:75:59:69:98:ee:0a:2e:72:c5:8b:81:
                    ca:78:c8:3e:67:40:a7:7d:a3:c5:3e:ce:3c:b8:34:
                    f8:94:d0:d4:45:a9:f5:87:a3:04:0f:d2:97:ea:bb:
                    87:ce:c1:3c:03:15:b4:91:a8:74:9c:ef:29:fe:97:
                    71:2a:df:e3:be:3c:3c:76:aa:33:ed:77:bc:fb:e5:
                    8e:f7:89:49:16:56:1e:e6:7f:73:7e:8f:36:05:23:
                    f3:40:cf:4f:2c:96:0e:4f:63:93:3d:29:12:a6:c7:
                    e7:57:87:be:28:a2:96:68:a5:02:4c:7b:61:36:f0:
                    4c:d9:dd:3d:7b:d5:53:a4:41:bd:75:d2:96:88:c4:
                    e4:f8:a8:d6:15:bc:e7:81:53:bc:70:b6:a0:fb:ec:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:E9:89:5B:75:2E:2C:9B:97:28:C8:FB:DC:78:D3:1A:A7:5C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4d3eb862-5ab9-362b-bca6-66ffa1d5e67d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:51:b2:c6:87:5f:5d:b2:84:3c:10:b5:ce:45:17:7c:99:
         1b:ef:97:cd:5d:7b:d9:bf:42:3d:70:f5:23:f3:d0:92:a3:29:
         2f:94:1f:40:6c:33:24:aa:8b:e9:55:54:f5:8b:14:cc:3f:4e:
         d2:60:27:43:78:37:43:7b:eb:4a:73:10:98:5a:2b:ac:24:24:
         ee:43:a0:6b:57:b4:f1:e7:05:7f:e8:af:81:a2:a0:01:60:ec:
         3d:ea:80:eb:9d:d5:ed:e0:c0:6c:6e:8d:e2:6e:e7:f5:e6:97:
         fc:9f:b8:69:f5:36:bb:10:42:ed:26:05:13:05:c5:21:08:4a:
         97:43:c1:ca:0e:64:1b:40:ca:f7:71:cd:8e:bf:bd:6f:8b:0d:
         eb:24:8a:e4:28:f8:bd:35:7e:19:79:6a:b2:ab:ae:69:a7:83:
         cd:ab:2b:26:8d:25:c0:5f:99:f6:b0:b9:80:5c:a2:69:8a:f0:
         94:0e:39:3c:5c:fd:38:2a:af:a7:42:5b:b7:98:8b:81:58:41:
         3d:31:99:8d:e3:5e:6d:38:b1:fe:b1:f8:28:fb:a0:ec:9a:fa:
         4e:95:54:b3:7e:5e:03:b0:fe:46:0c:f9:73:c6:85:e7:80:b3:
         4e:aa:ea:96:5e:4f:26:42:30:a3:1b:c4:88:2a:20:bf:9d:a9:
         8a:68:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:06:33 2025 by rpki-client