Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa
File:                     8eb6de6b-8c71-3506-8c2b-efa177569f89.roa (raw, json)
Hash identifier:          7ZlRaWq8p4RqdSGVjk2QZvGeenwPM7AwP0I0M3040Aw=
Subject key identifier:   CD:86:32:F6:7F:0E:14:27:EB:41:08:1D:79:EC:3F:04:EE:EF:71:1A
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584988CF27CAD17825526D61F280
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     20237
IP address blocks:        192.103.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:27:ca:d1:78:25:52:6d:61:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=bdce77ce-382c-483a-addd-b1273a5dbb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:9b:41:76:0e:b0:94:07:c9:b9:c7:da:7a:
                    f4:3f:44:c7:56:c9:e7:e1:62:44:1d:bd:66:6e:ba:
                    5a:89:a8:7a:7b:f8:41:1b:e0:d7:43:df:1d:e9:bb:
                    87:15:fb:d5:7f:2c:06:55:63:8a:38:e1:97:5f:4d:
                    57:2f:68:85:44:a4:ae:80:af:95:c2:32:2a:51:af:
                    68:5b:99:a8:32:e3:41:17:df:7e:90:ae:db:b6:13:
                    34:53:23:f3:f7:f7:39:d2:dd:2f:98:95:9d:a5:a9:
                    be:f9:75:c1:d3:c7:fc:64:29:23:20:56:95:24:da:
                    0a:00:62:b9:2e:6f:94:9f:d2:6e:f7:7e:05:72:1b:
                    cf:94:a8:b1:3b:3d:34:85:7a:f1:7e:73:35:eb:f8:
                    fa:0a:b8:c1:8c:84:b9:19:23:c7:ae:14:8c:61:b8:
                    08:12:6b:99:ae:79:05:38:50:b3:2a:9e:bc:07:af:
                    14:9d:06:1f:a0:eb:6e:57:d4:e5:a0:ae:a4:7a:63:
                    7b:b8:3d:84:54:7d:d3:0e:74:d5:23:4d:95:a9:fb:
                    07:1f:d5:6b:be:95:28:b4:42:1c:97:fd:26:98:a3:
                    ae:a6:bb:f6:d8:c6:48:c4:c4:02:18:55:b0:e5:55:
                    97:c7:ea:c6:05:ab:ea:a3:b8:01:a2:e8:e7:f1:5b:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:86:32:F6:7F:0E:14:27:EB:41:08:1D:79:EC:3F:04:EE:EF:71:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:e4:c3:1a:73:3b:7c:97:79:fe:91:20:a1:61:6a:2e:16:
         67:98:ed:53:6b:a0:c2:bf:17:f8:9f:53:35:0f:97:ab:d4:7c:
         b8:77:c9:16:55:a6:bf:a3:43:ef:1c:ff:ae:fb:80:0f:c1:90:
         e0:61:0a:24:44:79:a1:8e:36:c8:34:dd:67:31:f0:48:12:66:
         06:af:82:e6:77:7c:19:8f:3a:ab:77:c4:93:5f:2f:e6:07:9e:
         4b:0e:3f:ed:a2:c5:b0:b5:5a:81:da:78:5c:43:b8:cc:1f:f9:
         61:74:d8:75:69:c8:e8:72:0c:a6:b5:70:60:2e:12:9c:9c:fd:
         e2:73:f2:66:9f:91:8e:35:07:72:86:b1:0b:30:3f:8f:ac:44:
         16:22:dd:45:0d:31:4e:94:44:d9:ca:20:7f:f8:59:8b:49:b1:
         af:21:52:96:6f:3d:36:ec:cb:59:ef:ba:14:c5:fa:e3:6c:72:
         0a:1b:76:69:86:95:c2:e2:2c:28:fb:68:f4:cf:55:e4:46:0f:
         39:a5:09:5f:d8:6d:93:55:3d:b9:b1:00:23:0b:14:45:4d:3d:
         31:42:7b:08:82:8e:cc:75:04:42:c6:fd:c3:e9:4d:fc:a6:f8:
         0f:39:c4:44:eb:94:b3:73:34:67:90:d8:c9:0b:ed:44:ec:ae:
         f3:37:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:08:03 2025 by rpki-client