Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/b1a52e16-9db5-3a34-9bb1-3649b401126a.roa
File:                     b1a52e16-9db5-3a34-9bb1-3649b401126a.roa (raw, json)
Hash identifier:          T2IK6epyVebNuw9IQBiBUH5XF1Hx0kqmyi2R6iGfILM=
Subject key identifier:   F7:9C:AF:ED:A7:9F:E8:02:B4:C7:87:D8:B2:B4:C9:C6:54:01:7A:C2
Certificate issuer:       /CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Certificate serial:       010D0C9F4328584A2ABAEA3F7677DC51CD001480
Authority key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/b1a52e16-9db5-3a34-9bb1-3649b401126a.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     199563
IP address blocks:        132.190.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ea:3f:76:77:dc:51:cd:00:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=edaf0916-968a-49dc-bffd-5a4fc85964c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:f0:30:b7:90:ef:c5:cb:75:63:47:27:b9:
                    43:35:3e:e5:51:d8:f1:52:72:6d:71:6e:e4:7a:c9:
                    0c:e9:11:b2:c4:bc:76:11:21:39:37:bf:13:a2:d3:
                    cd:e3:69:19:1c:c8:4d:be:d5:49:08:0f:91:7e:c1:
                    d5:b9:a6:d4:a0:b6:e0:42:66:76:da:80:9c:3e:41:
                    fd:62:4c:55:4d:79:c3:1c:c5:f1:85:73:7c:fa:20:
                    9c:06:62:37:99:a1:78:9a:a5:2d:47:b6:5e:52:dd:
                    b8:c2:4c:25:27:92:68:c5:7f:81:2f:f4:64:b5:5c:
                    2e:0b:26:29:1c:c0:42:f1:a4:f1:b5:3c:67:a9:bb:
                    a6:92:40:70:ff:2a:18:b2:c0:3d:c4:e4:c5:09:44:
                    01:df:f9:62:0f:af:b3:19:14:97:cd:c4:85:64:07:
                    c5:53:a3:26:20:2a:f2:ee:2d:ae:f9:a1:95:67:17:
                    2c:e6:30:5a:d0:de:bf:0b:5d:c8:ed:4c:fa:f9:5d:
                    39:6c:ee:8c:51:1f:ca:b1:fe:da:0a:83:ab:d1:41:
                    9b:31:59:a5:fe:86:76:6c:b9:ba:a4:90:6f:c1:07:
                    ab:fa:f1:22:9b:51:1e:36:e3:93:50:f8:51:f9:4d:
                    03:e6:5d:7d:78:1f:12:c3:a9:e9:d5:9f:a8:5b:30:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9C:AF:ED:A7:9F:E8:02:B4:C7:87:D8:B2:B4:C9:C6:54:01:7A:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/b1a52e16-9db5-3a34-9bb1-3649b401126a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl

            X509v3 Authority Key Identifier:
                keyid:03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.190.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:8f:1f:52:ea:3e:51:81:e4:7d:f7:28:e6:88:fd:92:85:
         9c:7d:c8:02:72:da:46:f5:67:b4:8b:2d:06:63:4e:3c:37:4c:
         61:3b:69:24:d6:c5:f4:cf:ba:de:67:46:36:5f:1a:90:54:9f:
         1d:5a:ac:0b:aa:8c:7c:63:40:9f:75:96:0a:21:00:e9:35:c9:
         ac:0b:f0:c9:7d:56:a6:e7:72:54:63:ed:8f:6d:db:07:04:b1:
         82:f4:be:b3:63:61:06:0d:1d:8e:e1:14:18:99:d1:9e:e0:ea:
         3f:bc:be:27:c1:83:94:8b:b2:51:50:6f:22:30:0d:0d:6d:bb:
         64:5b:e3:25:22:20:05:d9:7b:d4:4c:18:36:a3:38:43:c5:e7:
         6b:6a:62:5e:bc:92:f2:88:77:96:0d:8f:0e:6e:54:ed:43:f0:
         c8:75:16:9c:3b:16:90:18:b2:cf:88:45:22:f6:6a:df:e1:be:
         1e:c1:35:a7:b9:4a:af:35:4e:46:7e:6d:ef:dd:48:21:cf:08:
         61:42:78:14:e9:0c:19:8a:10:13:35:91:d7:81:f1:1e:b0:85:
         a8:ce:5c:6d:76:58:83:04:0b:9e:82:7b:4b:e9:26:09:01:83:
         e4:70:33:a3:0c:d6:e2:83:3e:93:cb:70:62:6c:4b:32:e7:a3:
         59:75:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:03 2025 by rpki-client