Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2974c5e5-553d-3ebe-b6c5-92554a70bb6e.roa
File:                     2974c5e5-553d-3ebe-b6c5-92554a70bb6e.roa (raw, json)
Hash identifier:          AGUdyVNbE7/hrgkK3CnyOYA/yxNacDVB2W5dfwC+D/k=
Subject key identifier:   E9:BC:64:17:7B:13:E1:1D:8D:F1:DD:57:27:6C:E7:C6:1F:6D:00:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EA798D2802391D617014CF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2974c5e5-553d-3ebe-b6c5-92554a70bb6e.roa
Signing time:             Tue 20 May 2025 12:37:53 +0000
ROA not before:           Tue 20 May 2025 12:37:53 +0000
ROA not after:            Mon 18 Aug 2025 12:37:53 +0000
asID:                     396577
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:79:8d:28:02:39:1d:61:70:14:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 12:37:53 2025 GMT
            Not After : Aug 18 12:37:53 2025 GMT
        Subject: CN=027531bc-0ecc-4a5c-8db8-292868c1a8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ea:88:54:27:58:91:10:89:17:07:a1:e9:fb:
                    9c:66:34:65:84:cd:32:b0:49:53:aa:61:25:ba:2a:
                    b0:03:1b:56:d5:b6:f8:43:78:bc:76:d8:b4:e2:e6:
                    3d:21:97:65:94:31:38:36:6b:b3:cf:5a:3a:2a:bb:
                    31:db:84:46:33:5b:bf:89:ed:6a:15:1a:fc:b8:a4:
                    3c:23:41:ce:5c:63:1f:b0:a3:59:51:b7:46:73:46:
                    67:3f:3c:a1:ae:62:ef:ea:44:11:4f:c1:69:88:4e:
                    8b:fb:4c:79:fe:cc:0f:52:de:89:81:7b:a3:dc:74:
                    d2:90:ff:77:aa:9a:79:bc:86:c2:a1:fb:56:fc:b5:
                    8b:b3:0f:c6:92:87:c8:b9:97:50:43:f4:f2:a1:93:
                    be:2d:16:d8:bf:f8:ad:8a:5c:12:51:98:57:64:29:
                    2f:76:32:d0:08:09:87:95:a6:87:77:ad:26:d0:eb:
                    c9:e4:9f:67:c8:31:11:4a:98:95:1a:4e:1f:ea:d1:
                    7f:21:07:5d:99:1d:01:1b:6b:22:0f:99:32:72:75:
                    15:06:fd:00:04:53:e5:69:b0:6d:4e:ee:61:5e:2e:
                    c1:b4:ed:cd:92:35:37:0b:f0:ff:d7:26:c3:bb:93:
                    e2:02:44:ce:15:06:5b:53:7d:72:60:81:7d:23:1c:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BC:64:17:7B:13:E1:1D:8D:F1:DD:57:27:6C:E7:C6:1F:6D:00:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2974c5e5-553d-3ebe-b6c5-92554a70bb6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f3:ea:7e:27:4e:dc:dc:00:48:d8:d2:8b:e8:16:9d:5f:d0:
         fb:63:b9:11:e5:88:29:29:5f:fa:63:77:54:2a:2e:38:a5:1a:
         a8:c8:71:95:60:bd:5e:1d:f2:c7:f5:5d:d1:2c:7f:7c:0f:f4:
         d4:45:03:56:ed:1b:13:d1:0d:be:a0:02:f0:87:70:c7:52:23:
         9e:c5:38:d1:0e:64:a7:13:ed:16:6b:5e:f0:5b:fa:09:93:15:
         f9:ae:e6:4e:7d:d6:23:26:4c:83:60:d7:92:ca:ae:be:65:17:
         46:1e:2b:1b:ed:fe:1f:e2:1b:0a:7a:43:33:05:3e:c8:de:a5:
         32:78:7d:5b:29:8f:0a:83:46:32:34:6b:3e:bf:df:9c:45:84:
         4f:2f:19:cf:b3:ac:09:36:f5:9d:20:da:29:40:67:e2:c2:99:
         13:99:ea:02:f5:a0:9c:d3:d2:54:d2:d3:13:b3:35:96:eb:3d:
         97:13:13:fb:98:53:cf:b5:d2:07:25:0c:2f:e8:60:75:77:94:
         96:53:c8:a5:cb:66:5c:5a:b6:b9:56:5a:5e:f3:f0:79:cd:ec:
         31:7b:6d:a7:ec:7b:ea:79:9a:4b:f8:70:fb:bc:ea:4d:5b:bd:
         9e:78:2d:a7:49:56:66:d0:c4:04:2b:11:81:ad:6f:9f:e3:af:
         ed:19:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:41:59 2025 by rpki-client