Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/9d26ea2e-931e-3a3f-8dbf-784d0e3a72c1.roa
File:                     9d26ea2e-931e-3a3f-8dbf-784d0e3a72c1.roa (raw, json)
Hash identifier:          uCHi7gSwEk9FWxPYWU2plLsGYguXlhqX6fbfJD7qx3o=
Subject key identifier:   7A:74:9D:6D:C7:79:30:B9:6C:41:FE:B6:92:59:C9:87:D3:9E:37:12
Certificate issuer:       /CN=45b8fbfe-2e8c-4cd8-ab63-10254221356e
Certificate serial:       010D0C9F43285849CC6EB47F9F1F455D2FF1C040
Authority key identifier: 41:EE:BD:C1:99:0F:E8:FA:C2:55:8B:D8:A8:36:EA:5A:60:04:26:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/9d26ea2e-931e-3a3f-8dbf-784d0e3a72c1.roa
Signing time:             Fri 09 May 2025 18:21:47 +0000
ROA not before:           Fri 09 May 2025 18:21:47 +0000
ROA not after:            Thu 07 Aug 2025 18:21:47 +0000
asID:                     396480
IP address blocks:        192.84.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/45b8fbfe-2e8c-4cd8-ab63-10254221356e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/45b8fbfe-2e8c-4cd8-ab63-10254221356e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cc:6e:b4:7f:9f:1f:45:5d:2f:f1:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b8fbfe-2e8c-4cd8-ab63-10254221356e
        Validity
            Not Before: May  9 18:21:47 2025 GMT
            Not After : Aug  7 18:21:47 2025 GMT
        Subject: CN=f92f19c8-ba45-4e99-8770-194f1535dbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:75:70:63:df:b4:70:48:e1:77:21:93:ac:
                    da:77:58:0f:83:1f:22:5a:ef:fc:d4:8b:aa:7e:cd:
                    1f:1b:66:b9:b7:15:91:a3:d1:e9:c4:ac:8c:aa:f8:
                    5a:db:b1:8a:f6:e0:22:85:34:69:38:89:cf:72:cf:
                    c6:f9:92:41:86:24:13:e9:32:91:56:45:82:6d:ea:
                    1f:81:9d:a7:9d:44:2d:5a:a9:1a:1a:11:cb:6d:a9:
                    e3:bf:be:fe:02:d7:0b:9c:f9:b0:8c:3c:ca:f4:fe:
                    1c:7f:fc:63:94:aa:a4:1c:e5:44:ea:13:08:a3:86:
                    44:2b:9d:16:6d:3c:1a:26:56:61:c3:0c:7d:64:77:
                    5a:f7:66:f5:23:1c:87:17:78:81:18:8f:96:0f:7e:
                    f7:ae:90:94:38:97:29:77:9e:7a:ad:a8:5c:59:04:
                    fd:20:1e:b5:09:d5:d6:25:e4:b8:f8:6b:5a:fd:fa:
                    91:1b:72:1d:cb:40:73:f9:14:2d:18:95:cb:3a:d5:
                    b0:fd:5a:d0:8a:94:3f:03:dd:94:15:b9:cd:0a:9b:
                    0b:f4:51:f7:95:bd:cf:bc:7e:0a:31:90:a3:89:7f:
                    d5:71:a7:10:fa:04:5f:34:9a:79:73:1e:07:e9:c4:
                    d9:09:3d:72:24:a8:44:b4:a6:e7:21:55:52:c0:70:
                    9e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:9D:6D:C7:79:30:B9:6C:41:FE:B6:92:59:C9:87:D3:9E:37:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/9d26ea2e-931e-3a3f-8dbf-784d0e3a72c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/45b8fbfe-2e8c-4cd8-ab63-10254221356e.crl

            X509v3 Authority Key Identifier:
                keyid:41:EE:BD:C1:99:0F:E8:FA:C2:55:8B:D8:A8:36:EA:5A:60:04:26:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:8a:78:19:a5:07:a0:e3:af:b2:07:8d:d2:2c:67:9a:98:
         83:ec:c8:a5:44:9e:05:f7:ad:c1:67:b9:04:39:87:db:5c:ec:
         08:6d:f2:d3:d6:57:f3:10:3f:ee:b9:cb:34:fd:cd:2c:ea:b3:
         e4:d3:3b:04:c7:7a:97:fa:40:dc:f8:06:2d:6c:19:55:d1:20:
         7d:75:2d:1e:e7:9a:d9:86:30:af:df:a7:09:ca:29:56:6b:97:
         3b:bd:01:f6:c4:3a:29:66:d6:f2:ab:ba:0a:e4:66:6a:13:f0:
         93:3c:db:b1:ad:0b:7f:b4:93:b2:94:99:8b:31:0e:ca:06:05:
         eb:43:c5:a5:7f:ed:a0:ee:68:52:b9:d3:e6:d2:0b:6c:99:5e:
         14:71:55:f2:b0:f7:6b:54:e7:9b:c2:0f:bc:e8:68:9a:30:a5:
         35:50:c1:ad:a3:4d:06:71:d3:3e:49:04:f2:8b:94:c3:48:32:
         f9:f8:c2:04:0c:1b:16:0a:ad:eb:a2:39:59:62:8e:a5:84:fb:
         ee:a5:10:48:a3:be:da:56:14:02:20:a9:f2:92:85:70:0b:63:
         30:96:3f:e4:bb:05:d5:ab:1b:ec:3e:b2:a7:1c:2e:19:59:24:
         76:96:e0:01:ef:2f:45:c9:28:0a:17:78:e5:42:4a:7e:ad:79:
         16:91:c5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:00:44 2025 by rpki-client