Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/b0885942-65d8-3e4b-8ea0-8671ef52bfb8.roa
File:                     b0885942-65d8-3e4b-8ea0-8671ef52bfb8.roa (raw, json)
Hash identifier:          yoHbWPqAt6W4GEDSdH4zyVj94inOELS/a2p83Vrqzmc=
Subject key identifier:   45:D2:6A:D1:C2:D3:9B:BF:2F:69:D4:CE:86:71:E0:A7:18:77:8E:BE
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F4328584A30502EC83A0D94439F4C1A40
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/b0885942-65d8-3e4b-8ea0-8671ef52bfb8.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     23167
IP address blocks:        149.234.192.0/19 maxlen: 19
                          192.122.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:2e:c8:3a:0d:94:43:9f:4c:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=504bec5e-9104-44a2-bfdd-969ab2cefb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f8:c4:1e:49:25:b5:97:ab:84:50:dd:7f:0b:
                    f2:d7:dc:f8:9c:1f:20:0e:ae:11:5d:68:de:e0:ac:
                    a7:af:5d:94:3c:7f:e0:46:33:f6:3f:bc:8f:6b:0c:
                    35:27:ee:6e:91:67:1c:1b:84:96:25:59:38:01:e1:
                    ce:32:e1:2f:03:43:df:a0:13:d1:93:c3:30:e9:5f:
                    d7:bb:63:d3:15:dc:0d:e2:c5:01:68:f6:cf:69:5b:
                    40:67:0f:75:c9:27:2a:35:a7:6a:9b:49:57:50:11:
                    18:bf:d2:0b:3b:56:14:6a:3a:cf:1d:ce:a6:03:34:
                    85:78:a8:d1:01:0f:40:b5:1e:3a:a1:15:a8:27:6a:
                    56:ab:ed:01:af:9e:49:03:27:ca:d2:c4:70:df:7e:
                    c4:5b:8e:aa:d5:4c:07:86:dc:14:ee:20:00:96:10:
                    ed:78:e0:78:07:bf:19:8d:0e:a9:bb:73:ef:91:4f:
                    cb:2c:5d:63:95:c2:08:a0:01:b7:ba:f3:d1:0b:4d:
                    85:29:23:4f:de:af:b6:ae:95:60:79:a7:b9:e9:00:
                    88:2a:15:57:cd:25:30:a4:70:ab:6f:a0:c4:63:f6:
                    64:e2:d4:d1:22:a8:d7:54:2d:2a:5d:d7:5a:d3:86:
                    91:91:d8:f0:ec:f5:c6:b4:13:3e:0c:9c:da:e3:8f:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D2:6A:D1:C2:D3:9B:BF:2F:69:D4:CE:86:71:E0:A7:18:77:8E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/b0885942-65d8-3e4b-8ea0-8671ef52bfb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.192.0/19
                  192.122.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:49:18:5a:5a:92:bd:28:87:c7:db:e1:a2:de:34:3f:ce:81:
         3d:f8:01:85:df:be:18:a6:fa:e9:b2:42:b3:c5:81:0f:f3:3c:
         a0:75:bc:37:86:18:d4:24:d9:9a:86:3f:60:6e:c9:90:2e:59:
         49:3c:05:bf:f0:6b:26:f4:e9:f7:67:2d:81:90:53:e1:58:38:
         35:1f:01:99:3d:7b:8a:b3:87:f2:f6:e8:b4:fb:0e:39:68:f2:
         95:d0:2f:1c:1d:ad:ae:bc:f5:6a:f2:99:32:0f:51:03:2d:d5:
         eb:cd:ed:bf:64:23:8d:e8:dc:30:6a:30:65:e9:4d:58:1b:24:
         93:3f:3f:e6:14:19:b0:24:13:db:c3:bf:4e:f2:72:bc:e0:fb:
         87:fd:91:aa:80:cf:55:75:f4:59:88:15:ec:0b:fb:14:4d:92:
         14:eb:39:27:6d:84:1d:63:0b:eb:86:e9:e4:cb:52:6b:ac:3d:
         76:4f:da:bc:50:f1:d3:9b:1f:84:0d:d8:72:fc:8d:8c:1e:b4:
         1c:a2:93:46:24:97:af:53:bd:2e:35:21:e2:fa:31:14:d8:86:
         dc:4a:ad:d1:45:0b:cd:35:cc:84:c3:8a:27:b8:03:0e:47:7b:
         ac:f4:c1:5f:d8:cd:18:fc:68:3c:a7:55:e1:28:a8:6c:df:97:
         d6:9e:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:15 2025 by rpki-client