Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa
File:                     e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa (raw, json)
Hash identifier:          qSUiL141fEDi57TBiuGWBfLIqtzu4cG/nIWYzn4O5Sw=
Subject key identifier:   19:2D:A0:AC:BD:5C:7D:6F:57:7E:F9:81:2A:6A:49:BD:82:33:60:25
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F43285849912F2FD6F4DB49CC466B2900
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     8075
IP address blocks:        192.243.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:2f:d6:f4:db:49:cc:46:6b:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=97b86127-1552-456a-80ef-057b44e31a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ae:5c:40:bc:0f:8e:fc:4a:be:16:cc:10:e5:
                    76:f0:1d:66:72:59:e4:18:c7:c0:f2:4f:d7:df:db:
                    be:fc:46:ed:80:44:78:84:1d:18:8d:13:7e:33:4a:
                    3e:7a:4d:e6:20:c1:bb:38:b1:01:7a:11:ce:24:86:
                    2d:68:f1:7c:a3:b6:ee:7c:24:da:d1:13:30:de:65:
                    e9:7e:62:44:04:2e:b8:d5:e7:8a:38:d5:1d:ea:2d:
                    7d:dc:8d:bc:01:a7:e1:84:20:b0:a9:c0:e8:cd:1f:
                    7a:d1:b2:24:6e:f6:3e:bc:a2:c4:59:bd:62:e9:fe:
                    44:5f:fd:f3:d1:81:b5:6a:36:91:73:07:2d:6b:66:
                    f5:5d:79:2e:50:3f:2a:2e:f7:21:40:3d:3e:28:09:
                    56:9e:49:f9:eb:95:9d:4d:c3:3f:cf:42:67:4c:c4:
                    b7:ce:0b:13:4b:15:74:d0:e8:de:87:60:90:3b:a1:
                    74:0d:99:40:87:fc:ce:94:2a:e4:e3:84:36:bc:d8:
                    5a:85:5e:22:79:43:86:c4:aa:6e:85:91:8d:9b:cd:
                    89:fd:0f:8e:16:53:a1:36:9d:ac:e5:32:fd:1a:b4:
                    41:80:9b:61:29:39:b6:bf:d5:25:de:da:44:be:2d:
                    86:4e:98:46:68:85:83:02:04:b9:e2:85:23:4d:ef:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2D:A0:AC:BD:5C:7D:6F:57:7E:F9:81:2A:6A:49:BD:82:33:60:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:95:e9:fe:17:c6:ca:be:7b:c5:a5:f2:50:98:e9:97:03:
         37:63:12:3b:d3:92:06:37:21:7a:c5:3d:03:2a:6c:7f:7d:a3:
         33:5b:8d:a8:1b:46:e8:d7:18:73:1a:36:6e:eb:87:ec:48:52:
         ed:79:50:22:10:da:aa:de:da:72:24:81:be:90:bc:61:36:96:
         6c:ed:39:7c:b4:07:43:a2:9b:2c:b3:25:ab:88:a0:29:fb:61:
         97:f7:8a:89:5d:7c:73:00:95:03:9d:e3:af:34:18:a0:89:80:
         c8:50:f9:97:a6:90:22:ca:a7:94:43:aa:b0:8c:8d:80:3d:c2:
         73:27:55:06:25:ae:a5:2a:8e:7c:94:d4:0f:25:e2:1b:8b:1d:
         83:8b:3f:43:8e:2e:44:74:4c:e0:39:ea:48:ed:c3:1c:b6:1f:
         89:3f:5d:28:a1:f9:89:08:ab:8b:74:a3:cf:b9:ea:4f:90:48:
         34:a6:2a:35:44:02:bd:7e:ab:7c:47:c2:cf:f6:e7:e9:18:7d:
         cd:a7:87:b1:cf:80:c8:0b:1c:c1:91:f8:89:bc:0c:39:d5:15:
         6e:79:77:3c:63:ed:7b:c2:70:2a:4f:0f:c8:69:1f:3f:07:87:
         65:b1:a7:a7:6a:1a:31:1b:7d:86:6c:16:85:d6:8c:33:3a:dd:
         1e:70:e8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:17:43 2025 by rpki-client