Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/324c7f4c-aebe-386a-a996-64b273f056fa.roa
File:                     324c7f4c-aebe-386a-a996-64b273f056fa.roa (raw, json)
Hash identifier:          gdQxVoLz4OrWcmtaIblYFCTDMzXhr5EcgEP8EyhYZOg=
Subject key identifier:   0D:57:98:01:5F:56:5A:74:69:3E:E4:00:2D:A6:7C:A2:83:76:87:D0
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849D594DB2AEDF3FA6E7C3716C0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/324c7f4c-aebe-386a-a996-64b273f056fa.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     30133
IP address blocks:        192.228.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:db:2a:ed:f3:fa:6e:7c:37:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=0c8973fa-cf08-4b4e-92c2-5005b5d099ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:b5:72:7c:7b:15:d0:24:c1:6f:4d:04:ab:
                    99:18:97:39:72:d6:3e:b4:41:17:c5:c2:a2:f4:2d:
                    8a:93:4e:aa:1e:34:55:e8:09:79:0c:56:02:12:49:
                    5e:08:96:a4:cf:b9:3a:98:e6:64:44:5a:e5:82:c9:
                    11:80:19:bb:48:6e:ed:56:4e:21:d7:1b:0e:9e:df:
                    4d:4c:2c:57:ac:6a:27:79:02:88:05:33:d5:24:39:
                    8c:01:a7:3b:29:0f:a7:27:ac:02:c1:e2:36:d9:16:
                    4e:c7:43:d6:a4:ed:e2:33:98:9b:d7:33:0e:24:1a:
                    d0:57:d0:d8:d9:13:37:9b:9b:a7:45:c9:27:4a:ce:
                    24:77:3c:57:fd:de:8b:32:26:a8:7c:ff:16:c6:e4:
                    89:3b:c5:4a:7b:2f:97:db:7e:bc:c3:c7:cf:f3:2f:
                    1e:89:52:8d:0f:76:0d:41:97:e6:54:22:9f:86:24:
                    58:05:a1:c1:bd:32:0a:77:79:20:61:fb:f5:1b:fc:
                    7c:10:12:96:c5:fc:48:f0:8f:57:5c:19:d8:45:66:
                    1f:b5:dc:db:53:0d:65:ff:ad:8b:b1:98:a1:4b:2a:
                    4a:af:5c:90:75:d5:1b:6e:03:bb:ce:ff:a4:4b:b8:
                    21:9b:00:e3:b7:99:0a:28:6b:17:96:9b:15:84:5d:
                    fc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:98:01:5F:56:5A:74:69:3E:E4:00:2D:A6:7C:A2:83:76:87:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/324c7f4c-aebe-386a-a996-64b273f056fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:92:10:a1:91:28:d8:fa:0a:ae:ff:45:f7:68:a5:9b:b0:3c:
         e9:25:c2:93:8c:43:c3:d9:c1:a5:f2:3e:5b:23:96:97:10:ff:
         6e:a8:44:30:06:3b:4c:4b:87:4c:90:af:ea:e7:70:16:56:55:
         c7:e1:47:b7:16:0c:9b:3a:2f:bd:b4:27:75:77:fb:e2:fd:fc:
         fd:69:83:c9:7f:e0:b0:61:cb:5e:5c:9f:f9:d4:80:b6:2f:a8:
         b9:cf:7b:4e:fc:90:5c:03:c8:b9:84:39:85:56:ff:d6:cb:33:
         8a:30:c2:1c:f9:77:ca:42:2c:5e:ab:12:f5:00:09:37:3b:91:
         5f:8d:05:32:9e:97:c6:fb:e4:10:59:19:7f:7c:58:60:2d:a5:
         aa:d3:97:18:da:54:e3:11:2c:6d:8e:b8:92:c0:87:47:3c:22:
         fb:06:57:07:48:5e:72:56:fb:ca:3f:95:d6:ba:f5:b0:ae:dd:
         49:86:61:fa:52:96:d6:ce:c7:54:ed:b9:5f:4f:85:49:f1:db:
         72:f0:52:db:60:fd:8b:87:be:87:ed:d4:31:3a:3c:c7:c4:ff:
         b0:33:53:db:d0:1d:26:f8:08:31:e7:a5:2a:ea:ab:cc:58:13:
         40:9e:9a:39:1b:3a:1b:41:40:41:fc:72:53:c2:ca:48:fb:14:
         d2:1c:31:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:11:41 2025 by rpki-client