Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98713fdd-0c24-3fa2-b255-b21e05e2af92.roa
File:                     98713fdd-0c24-3fa2-b255-b21e05e2af92.roa (raw, json)
Hash identifier:          WhpLzCAFswf6eZRam5zdz9Vaa8bS04dBWociNr/m7W8=
Subject key identifier:   2B:A0:06:3D:D2:EA:FA:C9:56:96:0B:F1:F3:AB:59:D6:95:AD:C3:4B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F26E59CBA3029B786C0AB600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98713fdd-0c24-3fa2-b255-b21e05e2af92.roa
Signing time:             Fri 23 May 2025 09:01:47 +0000
ROA not before:           Fri 23 May 2025 09:01:47 +0000
ROA not after:            Thu 21 Aug 2025 09:01:47 +0000
asID:                     214238
IP address blocks:        192.177.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:6e:59:cb:a3:02:9b:78:6c:0a:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 23 09:01:47 2025 GMT
            Not After : Aug 21 09:01:47 2025 GMT
        Subject: CN=d7fcdbf5-b166-42d3-b88b-281202f5b6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:c7:5b:da:ab:88:e0:a2:50:ac:aa:9b:6c:
                    4e:b2:21:2d:34:bf:19:54:37:0e:d7:4a:39:84:94:
                    55:4f:b0:6c:de:7e:ea:2d:f9:39:ff:e2:e0:c1:c2:
                    d0:5b:8c:8e:21:ac:2a:b5:ec:e3:cc:7a:cf:e3:fc:
                    8e:71:09:88:48:33:a7:f7:53:63:d5:8f:ae:c8:56:
                    a1:14:14:d8:27:60:eb:99:c7:5e:6f:3f:38:51:74:
                    2c:ca:f1:b4:bb:72:4d:8f:06:4a:33:f6:a3:46:52:
                    9a:58:13:ff:b7:9b:ca:78:1d:d6:7f:0f:69:b8:4d:
                    8f:79:ed:3a:fc:35:e2:ac:21:ba:c5:18:87:68:71:
                    51:c5:9b:3a:4e:fd:a1:18:cf:20:fe:51:fb:2d:b3:
                    a3:d7:b3:2f:a7:00:61:d5:c7:5d:c9:4c:a0:98:72:
                    e2:17:da:8b:7e:90:57:ff:e3:b8:cc:b4:bd:9d:cd:
                    c7:1b:00:ba:2f:1c:a5:43:50:37:5b:94:50:17:fe:
                    5c:81:5a:36:c1:ee:72:96:53:7b:ac:fb:fe:8d:cf:
                    5c:46:fa:54:f8:5a:ee:b2:e0:92:f8:0a:2a:b0:ae:
                    7c:24:e0:f7:5b:65:94:cc:69:47:99:d4:e0:c6:8f:
                    76:b9:e2:17:fe:fd:7a:02:c8:e0:06:44:81:b0:27:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:06:3D:D2:EA:FA:C9:56:96:0B:F1:F3:AB:59:D6:95:AD:C3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98713fdd-0c24-3fa2-b255-b21e05e2af92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:94:a2:5f:82:bf:39:ff:ac:57:5b:f7:99:7b:8f:21:f2:
         63:a3:a9:39:32:43:05:7a:60:c6:6c:5c:1b:eb:60:65:82:38:
         e1:66:7b:87:63:02:6d:48:15:aa:c5:7c:4e:da:81:f4:5a:84:
         5b:d6:7a:6f:3a:fb:ba:05:81:02:68:37:74:2c:aa:74:7a:ac:
         60:71:94:43:2a:fa:43:78:dc:76:c0:75:44:fe:c9:19:44:3b:
         c6:2f:44:08:5a:5d:b1:1a:8b:59:86:cd:04:b7:3e:c9:bb:ad:
         b1:ef:4c:7a:c4:bb:89:54:78:c5:6b:d5:4e:16:66:14:f5:fd:
         10:bb:8a:1d:bf:3b:09:b3:aa:38:c2:03:0a:9d:3a:cf:02:59:
         7f:94:07:ea:bb:41:08:e2:3d:20:f1:c8:82:70:54:3e:65:34:
         88:69:c5:5a:cf:07:33:51:88:ff:7b:65:15:83:be:9c:80:68:
         15:47:26:20:dd:30:ce:11:78:cd:41:e0:f2:21:2b:5f:ad:9e:
         b5:57:0e:64:33:22:4c:5d:ab:a4:ab:29:8a:e3:a7:dc:d4:9d:
         c0:13:19:af:06:11:51:c5:86:1a:27:08:0d:23:70:df:ed:0e:
         3f:83:75:9c:8f:a3:d9:f8:10:d3:a3:91:b1:a8:d7:be:93:e0:
         61:e3:dc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:49:31 2025 by rpki-client