Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d8756e0b-19ed-369f-9928-8a09bc5b5fcb.roa
File:                     d8756e0b-19ed-369f-9928-8a09bc5b5fcb.roa (raw, json)
Hash identifier:          J3ZXTml+dwIRxgZltPt7nvebcRtm4BNWcIi3zbYka4s=
Subject key identifier:   9D:92:FC:30:F2:52:9E:31:41:CD:FF:65:DB:99:74:BF:A8:F3:06:E8
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584991FD0B622B983B5C3F493360
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d8756e0b-19ed-369f-9928-8a09bc5b5fcb.roa
Signing time:             Fri 18 Apr 2025 19:55:53 +0000
ROA not before:           Fri 18 Apr 2025 19:55:53 +0000
ROA not after:            Thu 17 Jul 2025 19:55:53 +0000
asID:                     174
IP address blocks:        198.145.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:fd:0b:62:2b:98:3b:5c:3f:49:33:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Apr 18 19:55:53 2025 GMT
            Not After : Jul 17 19:55:53 2025 GMT
        Subject: CN=58bc5d16-288f-420f-bfc7-e2664cb26fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:ca:45:49:7a:45:e9:55:9d:10:2b:20:81:
                    08:f8:d6:ba:00:65:ee:fa:45:1b:3b:07:82:a1:cd:
                    5d:57:8e:11:b1:5f:44:f0:c8:6c:61:55:20:d3:13:
                    94:e4:75:06:a3:bc:b7:84:5b:ff:09:e8:46:b9:64:
                    93:f8:8f:49:c2:ca:04:3e:a2:a7:ef:db:8f:86:97:
                    63:49:0b:bb:69:29:e3:39:9b:1d:ad:fb:88:fd:5f:
                    61:b4:66:14:71:24:f8:82:67:45:ac:4d:5b:ba:f6:
                    cf:cf:fd:0d:02:41:ce:57:c0:46:0b:47:8f:67:38:
                    69:a9:6d:17:bd:2a:71:79:97:e0:d8:cd:df:9b:3a:
                    64:b0:ac:6c:72:be:33:14:d8:59:9b:df:0f:b2:0f:
                    6f:10:d3:93:c3:d4:dd:7f:68:3f:70:8e:85:6f:28:
                    2c:31:9c:a7:e9:15:cd:ff:0b:a4:2f:48:46:31:5e:
                    62:24:22:4c:c9:b6:59:ed:75:78:59:b2:17:44:9a:
                    b3:b1:95:de:3c:d7:f8:59:42:fb:b7:01:02:e8:5e:
                    90:18:94:d4:42:9a:f1:05:21:2f:56:6d:9a:7c:01:
                    1a:6f:03:42:1a:e2:81:87:5d:0e:8a:9c:1e:3a:a6:
                    64:7c:97:d0:c6:5f:bb:a7:e7:53:56:a9:8c:4c:22:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:92:FC:30:F2:52:9E:31:41:CD:FF:65:DB:99:74:BF:A8:F3:06:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d8756e0b-19ed-369f-9928-8a09bc5b5fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a9:e0:a8:c9:1a:64:d2:10:2f:52:e7:df:e9:ed:93:a7:2a:
         5f:9d:be:06:5d:36:10:33:c7:6c:77:9f:a6:54:f1:cf:2e:2a:
         81:5f:37:9b:d7:ce:d5:48:9a:78:4e:8f:85:78:ef:01:64:12:
         88:e3:5e:23:15:28:b4:54:37:57:c6:fa:6a:db:c4:71:1d:7f:
         c0:8a:38:1c:94:ae:b5:96:b6:0c:0e:d9:ef:b0:86:34:ee:60:
         74:d1:4c:e0:e3:3d:9b:b8:b0:2b:a7:46:e7:de:1f:1e:5a:d4:
         06:57:9a:94:08:ff:42:71:be:9f:58:d1:45:8c:6c:29:30:64:
         c3:fe:f9:45:81:19:6d:b5:9d:d8:bb:d3:b8:31:b0:8e:ef:ac:
         87:4b:52:91:0e:52:9d:72:e7:64:d8:7d:ee:6a:9b:b3:66:29:
         9e:db:d0:8f:fb:02:0e:10:b1:80:ba:6f:f4:e9:43:16:41:f8:
         67:da:cd:e7:f3:c0:4d:b6:52:0b:3f:86:72:d3:fd:88:8d:82:
         23:6c:f6:f1:29:ea:8d:b0:06:ee:ac:77:01:f1:bd:f1:a0:47:
         6a:50:12:82:7c:87:90:4b:2a:d3:ca:e2:c2:36:00:f9:1a:66:
         c3:ea:c3:40:1b:61:75:ae:6e:e1:9a:3b:17:dd:a2:ae:a0:e1:
         49:18:46:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:30:09 2025 by rpki-client