Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/196d5b07-ad65-3b4c-b38f-c89a7951591e.roa
File:                     196d5b07-ad65-3b4c-b38f-c89a7951591e.roa (raw, json)
Hash identifier:          6LuiPQrnBbUD/uZJCTR4KNw4o1j0XSAp/DD0dLHlUG8=
Subject key identifier:   33:73:DE:3F:B3:82:AB:FD:16:1F:E3:3B:AD:4C:50:E8:51:38:A1:85
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A34666F5BAA6073948EB400
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/196d5b07-ad65-3b4c-b38f-c89a7951591e.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     203
IP address blocks:        192.85.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:66:6f:5b:aa:60:73:94:8e:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=22d20d3a-5e07-41f1-acfb-f57c0b2f576c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:24:03:16:40:b6:fd:5e:20:63:6b:0b:d5:
                    93:84:18:51:11:55:d3:f8:bc:a1:0d:16:49:86:48:
                    29:a2:1d:eb:6c:bb:d0:e3:46:f7:1d:14:1f:68:82:
                    81:10:8d:10:f2:49:ef:d3:84:47:71:d4:65:b1:0c:
                    c8:58:a5:d4:fd:9e:7c:cf:0c:19:a3:b2:e8:d5:99:
                    c6:01:35:1f:d2:22:99:53:46:e4:ea:f5:4d:30:1f:
                    7e:e6:95:66:77:e9:bc:52:f9:ab:97:e9:7c:d5:3b:
                    b8:a3:f7:ef:30:aa:79:d9:9d:fb:a4:75:04:7d:cb:
                    72:56:33:4a:bf:9e:8c:3f:b6:6c:ee:84:1a:d7:9c:
                    58:0a:dc:47:19:b3:d3:f8:04:45:6c:cf:be:0c:0b:
                    9c:58:8d:bc:d4:81:4b:c0:ee:a8:15:ee:2b:a8:62:
                    42:02:d2:fd:00:3c:33:8b:8c:4d:b7:d2:ea:62:a3:
                    a9:c9:c6:a6:84:10:1c:0f:e1:27:80:20:84:8a:8f:
                    80:6a:fc:66:6b:e2:10:67:b6:9c:0d:5b:eb:0f:96:
                    6f:b9:d9:3f:00:cc:e8:be:50:3e:2d:69:2d:8c:43:
                    f7:3c:65:46:de:4c:21:43:ac:a5:65:de:0b:64:b3:
                    25:e5:73:8f:7b:43:a0:b2:81:a1:34:b9:06:fc:d3:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:73:DE:3F:B3:82:AB:FD:16:1F:E3:3B:AD:4C:50:E8:51:38:A1:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/196d5b07-ad65-3b4c-b38f-c89a7951591e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:3e:4e:26:ea:70:91:9a:ed:f5:e3:6d:8f:ee:88:06:40:8b:
         a5:fc:89:49:4d:f0:68:d2:a7:af:6d:fa:90:82:49:8c:15:a3:
         65:03:41:6d:0d:cb:7c:75:cd:9c:62:9e:8d:38:b4:02:d4:6d:
         6d:89:45:0d:97:f3:9f:ee:56:90:2d:26:75:4f:54:0a:6a:41:
         66:87:8f:94:97:09:2c:b3:01:70:53:3f:00:b1:73:73:0c:0b:
         0f:43:49:e1:81:8d:4e:ce:fb:9e:97:54:f6:27:4d:eb:2b:d1:
         ce:8e:81:fb:6e:48:b9:29:d6:aa:dd:2b:00:47:57:ca:6c:1c:
         bf:4f:4f:87:72:7f:3d:62:2b:9e:f0:e2:ca:f1:8c:3c:ed:f5:
         d0:a1:01:55:18:45:b1:ee:e3:ec:ab:d8:ca:9c:c8:28:96:d7:
         1b:1d:90:c9:10:45:eb:b6:15:f7:58:16:01:d0:ea:be:06:4d:
         ae:fa:4b:2e:d9:7c:cd:5f:74:b6:d0:a7:a3:d3:4d:c0:70:cb:
         a7:c5:71:33:3d:07:90:c0:92:77:7a:4b:10:61:0f:ad:ba:f2:
         96:79:5b:91:dc:9b:01:2a:75:5a:ae:da:7c:57:b6:1d:bf:3e:
         85:d1:f7:78:00:96:4d:a1:d4:2b:19:30:60:7f:cc:ca:dc:a2:
         77:16:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:52 2025 by rpki-client