Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
File:                     bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa (raw, json)
Hash identifier:          P33R1Ag4CsVawpf1LJDc+x8VT8MC12OlTymw/brseiA=
Subject key identifier:   AD:A7:A8:A9:C7:AF:DB:1A:72:EA:D7:55:BB:D8:CB:A1:1D:A2:67:4B
Certificate issuer:       /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial:       010D0C9F43285849F17FBDF1D1097440E1032080
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     11978
IP address blocks:        192.5.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:bd:f1:d1:09:74:40:e1:03:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=423b3f4c-1713-4449-91d4-d68a6559ba4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:02:ad:d1:6e:fd:84:b2:bc:df:09:47:8d:
                    25:b0:c2:59:1d:2d:3c:71:3f:f2:e7:26:ef:0e:bd:
                    0a:a1:b9:8a:a9:ee:2f:5f:a8:43:08:8c:91:5a:c6:
                    dd:c2:fc:b3:84:f7:33:13:f0:ca:8d:46:c1:85:8c:
                    c9:fb:80:50:28:8d:b7:a2:3a:46:18:b4:f2:71:ba:
                    7f:17:aa:25:e4:78:26:e2:63:bc:19:2c:5e:2f:77:
                    59:15:91:bd:92:d5:98:4c:e0:67:6a:d2:c8:5d:01:
                    65:e8:c6:b5:fe:e9:a6:87:ed:e5:90:57:22:ce:5d:
                    cb:7d:02:67:2e:a6:da:76:e4:85:de:62:67:a3:e6:
                    b5:04:2b:50:f3:9e:c5:66:ed:11:e7:54:4c:11:19:
                    da:57:2b:91:e6:c9:a9:c3:d1:d1:c3:73:97:14:3f:
                    d6:c8:9c:68:6e:7a:37:38:2b:7e:4d:b1:cd:b6:c5:
                    1b:d3:2d:4d:16:a6:2f:e3:8d:1a:34:3d:6d:9c:ca:
                    88:aa:6f:de:29:3c:04:5c:59:fd:57:51:6d:38:93:
                    56:ce:40:9f:9b:72:be:8e:53:ef:e1:a6:c0:e5:71:
                    29:7f:05:06:4c:cc:7f:41:f7:5b:42:92:a6:50:be:
                    8b:e5:29:05:e7:19:37:fd:09:67:7e:b8:63:ef:94:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A7:A8:A9:C7:AF:DB:1A:72:EA:D7:55:BB:D8:CB:A1:1D:A2:67:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl

            X509v3 Authority Key Identifier:
                keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6a:5d:c8:59:91:5d:4e:2a:4e:a7:dd:39:2a:a5:d1:d3:75:
         ff:05:28:59:19:bf:49:0c:e7:85:fc:ce:c5:2e:e5:9e:14:b9:
         b6:57:06:e9:3d:93:5f:e4:b1:24:b3:57:7c:ed:b0:b7:57:39:
         59:9d:d8:b5:37:a8:58:3b:70:94:0d:e0:37:b4:06:bf:ed:a7:
         94:9f:99:da:8f:dc:b9:4c:64:bb:ae:4c:bc:e6:e6:7f:49:cd:
         71:52:eb:ae:3b:95:81:45:e2:ef:79:3e:e5:94:f4:c3:ba:78:
         20:58:d6:49:3e:56:73:13:d4:22:fc:f2:fe:05:75:b9:f2:d0:
         f3:d8:c9:15:91:7d:66:79:35:d2:95:d2:7d:a3:dd:98:c7:f0:
         5e:75:e5:f1:4d:86:5e:33:e0:0f:57:15:35:be:fd:93:13:85:
         55:5e:64:12:c7:69:61:eb:de:b8:b0:61:d3:b2:16:07:04:3c:
         c6:73:73:db:6c:1a:7f:ea:ef:30:67:9b:fd:b6:d4:c6:fe:95:
         61:c6:eb:9e:fa:62:7e:02:52:b2:6d:92:93:f3:40:76:b2:19:
         72:4a:3a:e5:7c:0f:c9:75:cd:36:f2:0b:e6:d4:ba:9c:d5:18:
         75:de:3a:dc:6f:de:f2:d8:cc:9c:c2:a6:36:32:25:cc:fa:bd:
         d1:b7:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:26 2025 by rpki-client