Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/19dc9fe9-74bd-3e63-bf37-9481ed32dc2e.roa
File:                     19dc9fe9-74bd-3e63-bf37-9481ed32dc2e.roa (raw, json)
Hash identifier:          5m/n6c+hVbqssHnV5PXiMDemX3nlXvEV9GOliwia4ZA=
Subject key identifier:   56:38:80:04:DD:09:38:2C:77:03:78:40:4C:9D:E6:5C:DE:39:17:BA
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F432858499486543C492B7199E6511980
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/19dc9fe9-74bd-3e63-bf37-9481ed32dc2e.roa
Signing time:             Sat 19 Apr 2025 17:44:07 +0000
ROA not before:           Sat 19 Apr 2025 17:44:07 +0000
ROA not after:            Fri 18 Jul 2025 17:44:07 +0000
asID:                     11404
IP address blocks:        199.102.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:94:86:54:3c:49:2b:71:99:e6:51:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Apr 19 17:44:07 2025 GMT
            Not After : Jul 18 17:44:07 2025 GMT
        Subject: CN=7cb92426-c2b9-4698-94d7-486fc2785444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:56:62:86:9d:3e:cd:a6:33:ef:9a:2c:1e:
                    47:6e:56:27:f5:d3:22:a1:80:23:a3:48:92:07:71:
                    ee:3c:5a:a8:f5:64:21:8d:dc:ac:ba:1d:13:a7:87:
                    81:e9:e3:d3:23:29:9c:6c:ba:b2:f6:e0:c1:3d:3d:
                    db:ff:33:10:ae:2d:a3:ae:f9:ae:5b:13:56:66:9f:
                    be:ba:db:93:3f:eb:68:b9:37:bc:42:59:08:53:a5:
                    41:d4:1b:65:7e:d0:aa:0e:47:19:f7:3c:af:d5:2d:
                    d0:19:fe:95:c5:d5:30:26:63:fb:89:0d:85:b7:85:
                    c1:32:c2:71:e8:af:ce:91:52:67:44:bd:6d:e5:99:
                    69:a4:f7:0a:5f:e8:2e:3e:37:94:08:4c:0a:13:99:
                    6d:c2:cf:d7:36:87:f6:ec:a0:35:13:1f:7f:49:4b:
                    ee:98:e7:a7:cf:9f:37:47:4c:12:11:69:a3:87:30:
                    15:bc:1b:5a:99:51:ca:10:c9:b6:95:d3:79:29:bb:
                    37:bb:2a:49:d2:b3:6b:ec:db:f0:6a:e7:cd:cd:2d:
                    59:b7:07:d6:bb:70:e6:bd:55:ac:34:39:a7:36:30:
                    5f:c6:e6:b8:b0:f3:ec:50:7d:88:0f:d9:b6:5e:79:
                    70:04:18:55:b4:14:57:51:3f:e7:39:67:15:f7:e9:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:80:04:DD:09:38:2C:77:03:78:40:4C:9D:E6:5C:DE:39:17:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/19dc9fe9-74bd-3e63-bf37-9481ed32dc2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:a8:bc:ae:5d:9c:a1:a3:ed:17:61:72:1a:2d:e6:c8:75:
         ce:15:3a:90:ab:69:7f:b6:70:f3:0d:9f:b0:78:ca:86:22:59:
         88:43:09:67:88:c9:40:f0:29:db:5e:9f:11:57:d4:1b:d4:bb:
         97:76:f3:74:39:41:d7:6e:7e:07:3c:03:b0:d4:95:82:13:a6:
         93:0f:c4:17:81:8f:88:a0:63:89:f1:e0:cb:d4:c7:93:6a:37:
         83:bc:78:2f:7b:ae:de:cc:3e:96:7f:77:de:b5:d0:68:19:c8:
         d8:e5:57:e6:61:f0:0c:1c:63:b8:32:f8:26:11:c9:d7:92:fa:
         02:61:0a:68:aa:cb:23:1a:3e:b9:a3:34:8d:07:07:31:d1:2f:
         11:c9:d1:bc:fc:47:6b:29:d2:d5:c9:df:7d:53:ca:47:18:f4:
         3d:83:fa:37:1d:6e:83:2b:d2:80:ee:c4:1f:9e:10:21:13:e8:
         b0:8b:bd:64:90:9d:2e:a0:97:f6:74:ec:cf:14:0c:9e:dd:8e:
         6f:85:dd:e2:ef:23:82:fc:88:44:9d:46:ba:9c:c0:7a:4e:6a:
         58:c9:eb:e6:d1:f2:a6:ae:f2:81:a2:3d:76:ad:d7:4f:8e:04:
         6d:68:f2:b4:26:aa:c0:b5:67:22:04:51:b1:7b:b4:06:2e:41:
         d6:4b:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:14 2025 by rpki-client