Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a2fcbcc8-e36b-34fe-8f5c-4f4d19664f48.roa
File:                     a2fcbcc8-e36b-34fe-8f5c-4f4d19664f48.roa (raw, json)
Hash identifier:          ewQj2SIDvk+WIAc4TlAndogmFewEZJQQzE7vKS4V1Fk=
Subject key identifier:   A3:7D:AB:65:FB:FE:41:25:B0:6C:E5:BF:24:E1:F8:32:E0:62:22:34
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849D594D485D292397B0888BF00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a2fcbcc8-e36b-34fe-8f5c-4f4d19664f48.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     30133
IP address blocks:        192.228.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d4:85:d2:92:39:7b:08:88:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=3662ea85-efd2-4e1f-aa21-931010517ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:fc:7f:65:a6:ea:63:d4:86:0f:1d:a7:c9:
                    2e:6e:95:72:2f:28:67:09:ac:e4:d2:8e:55:36:12:
                    81:b0:66:53:d4:21:d2:0b:22:ba:7c:8a:9b:85:16:
                    5c:3c:76:f2:65:14:76:4d:dc:91:78:c1:97:16:41:
                    9f:f3:b9:40:ae:d8:30:7f:a2:e1:44:37:9e:2c:f8:
                    fa:79:43:d6:d4:ea:44:9e:16:af:e2:8b:1d:2b:77:
                    d7:8a:3a:7c:8f:8d:43:d3:8f:8c:15:73:86:b6:91:
                    c4:07:85:a3:26:05:3a:3e:35:7b:76:c0:cb:ca:8d:
                    62:51:59:fd:5c:71:2e:31:15:c4:a5:c2:d7:aa:ed:
                    24:2b:eb:ef:f1:2a:b7:e9:25:1f:85:ab:8b:ef:11:
                    38:87:c0:45:49:12:48:fb:6c:aa:72:0f:b0:cd:69:
                    5f:6f:2e:84:1b:31:b7:0c:a3:df:98:88:5b:bb:37:
                    20:10:91:f6:e2:94:23:a4:b1:60:74:a1:01:4c:79:
                    43:04:f8:39:82:d3:4d:de:fd:bb:1e:01:51:c6:c9:
                    6a:8b:33:e4:30:39:0b:14:81:8d:cb:f1:26:67:7a:
                    15:80:86:65:90:aa:a4:53:19:cd:11:ff:1a:04:ef:
                    26:0e:54:85:49:80:16:b9:ae:63:4c:52:e1:1a:29:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:AB:65:FB:FE:41:25:B0:6C:E5:BF:24:E1:F8:32:E0:62:22:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a2fcbcc8-e36b-34fe-8f5c-4f4d19664f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b9:3e:e5:bc:0c:d0:ad:87:ee:99:fe:cc:3b:d4:56:c9:48:
         42:7c:03:6c:f5:d3:78:dd:17:99:ff:d1:16:7a:72:68:b3:9f:
         11:30:c9:4b:ce:15:5c:48:0b:62:6b:10:7a:6d:c6:cb:f5:61:
         a9:5b:8c:4f:3b:5b:8c:6e:07:70:8a:ff:68:51:b7:7b:61:a9:
         73:9b:cd:84:1d:d6:3e:d2:4a:25:e8:6e:5b:ba:3c:67:d6:eb:
         27:52:a1:81:bc:a4:18:48:1b:6f:94:44:2b:57:bf:7d:e6:4a:
         c7:7b:48:87:36:5f:ad:c4:d1:3b:aa:8a:9d:0f:f7:45:87:90:
         83:bf:d2:67:77:68:84:ba:71:83:d1:cf:34:e1:be:a8:88:5e:
         8b:4e:af:68:77:a8:4a:5e:7d:d0:99:24:5d:33:a8:8f:25:6f:
         a4:a6:07:ce:5f:ce:6e:be:ad:8f:c9:4f:8e:bc:35:78:13:00:
         9a:16:cb:68:58:dd:55:b6:e5:0c:dd:36:a0:48:b2:ef:05:21:
         cd:8e:0e:28:7f:7b:da:d9:6c:1c:35:50:67:5e:30:b0:c1:01:
         11:80:19:3b:15:18:08:2b:b6:f9:cc:30:ee:cc:d1:ba:b2:2d:
         61:bc:de:58:89:4c:67:50:21:9d:0e:21:e3:24:f3:77:bb:85:
         a4:4e:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:02:58 2025 by rpki-client