Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ec912a2c-ef89-31ab-8ffd-60360a102815.roa
File:                     ec912a2c-ef89-31ab-8ffd-60360a102815.roa (raw, json)
Hash identifier:          oq2ToDVDBRXTgJApEKmOaf5HO9PmNcXAzhXPyc32Ayk=
Subject key identifier:   D7:36:17:41:70:4B:1E:16:98:E9:7C:E4:5B:BF:9B:28:1A:78:75:0A
Certificate issuer:       /CN=a32f8632-bd41-4783-afca-fc93bcb85260
Certificate serial:       010D0C9F43285849ED4FD3BC83B950DAD42DE680
Authority key identifier: 4E:76:F5:2D:CF:B4:A8:64:5D:50:9F:3E:9A:C1:31:4D:4D:87:F3:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ec912a2c-ef89-31ab-8ffd-60360a102815.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     398850
IP address blocks:        192.234.172.0/24 maxlen: 24
                          204.235.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:d3:bc:83:b9:50:da:d4:2d:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32f8632-bd41-4783-afca-fc93bcb85260
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=9b407b9c-c41b-4122-a54c-4d0e41502d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:98:cf:42:1a:85:1c:84:a1:be:d9:ea:9f:
                    b6:32:c8:7e:72:76:f5:84:41:c8:5b:5b:bf:e8:82:
                    76:f3:5f:11:35:f6:3b:63:6b:c2:c1:73:9d:36:2e:
                    15:29:91:c7:d0:38:f9:da:23:95:f1:24:97:f3:de:
                    44:37:2e:89:3c:36:e1:27:35:be:87:31:e8:27:9f:
                    8b:22:fd:7c:88:a5:a4:27:85:2b:a4:7b:e1:6b:74:
                    40:8d:81:45:85:71:f5:30:53:82:f1:f5:78:dc:2f:
                    56:5e:4f:5f:1f:ce:78:56:fd:ff:1f:bf:49:fd:21:
                    80:62:5f:b8:9b:b5:a2:e1:02:66:67:25:e1:52:fc:
                    52:a5:63:7d:d7:11:00:6a:bb:15:c2:e6:42:3c:ea:
                    8e:b1:95:dd:1f:5b:96:0f:ed:93:a4:ea:81:58:84:
                    ee:e6:33:c8:b2:4c:1e:f7:c7:30:b1:11:3f:ce:01:
                    fd:16:94:dc:f8:fe:64:46:54:b6:7b:19:ef:00:cb:
                    cf:70:c5:e8:e9:cc:f1:a4:8d:fd:40:95:a6:79:8b:
                    91:7e:3d:57:e1:7c:2c:28:95:07:73:9d:b1:3c:cf:
                    59:cd:36:11:e0:3b:3b:ab:c8:d2:05:f1:27:74:97:
                    71:31:9b:3e:b3:00:c5:9f:6d:6e:c9:a0:d1:f4:f0:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:36:17:41:70:4B:1E:16:98:E9:7C:E4:5B:BF:9B:28:1A:78:75:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ec912a2c-ef89-31ab-8ffd-60360a102815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.crl

            X509v3 Authority Key Identifier:
                keyid:4E:76:F5:2D:CF:B4:A8:64:5D:50:9F:3E:9A:C1:31:4D:4D:87:F3:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.172.0/24
                  204.235.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:06:a5:7d:6c:63:af:a8:4a:d9:fd:ea:f8:6b:48:10:58:a5:
         31:33:5d:88:ca:e3:21:e8:b5:c2:65:89:d6:f5:7b:9b:65:d6:
         77:27:ab:01:2f:52:3e:6f:87:60:8f:b2:cd:24:8e:49:43:8a:
         ee:cb:7f:17:17:1a:d8:66:4f:1b:35:a0:de:26:f5:12:dd:81:
         eb:6a:a9:c4:1d:17:20:7f:dc:08:5c:2f:1e:f4:b8:32:d5:18:
         df:da:f6:26:37:a0:83:60:fc:93:8f:3f:d2:c0:c9:cd:c3:53:
         fb:c4:a9:75:94:69:e6:c0:53:27:e3:35:a9:2a:5a:ac:5f:ed:
         aa:b3:84:b6:f0:3c:4f:8b:38:c5:a8:7a:09:31:1a:dd:5f:1d:
         06:9b:6c:ed:28:14:36:e2:d7:59:7c:6b:cd:fb:1a:31:a9:60:
         e5:55:1a:2a:32:20:25:c2:99:44:ff:3f:37:ae:30:5a:44:6e:
         1b:5b:88:91:d5:0b:a0:47:36:ea:6e:77:65:42:28:32:60:de:
         d6:af:bd:fd:fe:ac:c0:2a:cd:82:7b:37:74:18:01:f5:3d:0e:
         f5:7d:a1:39:3c:2d:81:2d:ca:5a:26:10:fd:9b:79:90:4b:bf:
         4e:61:dc:3d:2c:79:e3:6d:9d:6b:63:e4:9d:d8:44:ef:0d:14:
         dc:10:b0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:09 2025 by rpki-client