Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d473a3a-6ed2-30cd-af1d-2b18e3c7538a.roa
File:                     5d473a3a-6ed2-30cd-af1d-2b18e3c7538a.roa (raw, json)
Hash identifier:          39TnqjuTaknkY8dYGp7ffntPlI2mwPtEbvRH2ZWlXEQ=
Subject key identifier:   78:30:64:E0:1F:45:3B:BA:17:93:84:33:8E:85:E2:F2:A9:41:28:84
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A34632126BFE9D0CDA4F6C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d473a3a-6ed2-30cd-af1d-2b18e3c7538a.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3360
IP address blocks:        192.85.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:63:21:26:bf:e9:d0:cd:a4:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=bbfa4a91-6662-4f19-bcd4-8d3274be3788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:ac:01:8d:3a:4d:aa:cf:15:f4:84:eb:52:
                    56:90:de:90:cc:d5:0b:d5:d3:f8:1d:72:ef:ce:02:
                    43:b9:bf:14:2e:45:eb:08:af:2b:d6:45:9f:17:df:
                    3a:cf:e6:5d:c5:2c:71:c9:10:8f:2b:f6:75:fa:a4:
                    43:f4:2d:9f:08:15:eb:5d:8d:49:c1:36:af:b1:d0:
                    db:f0:6c:a5:58:1e:49:f6:73:72:a9:a4:c7:50:a4:
                    28:ec:7f:d5:21:2e:73:a4:dd:ad:54:de:79:8e:9b:
                    86:6c:ed:dc:3c:5a:5b:b0:5f:7f:5d:15:7a:49:8a:
                    7f:c4:e6:28:1f:0e:be:1f:10:81:26:68:c3:37:ea:
                    8e:00:2e:e8:23:82:e2:bd:38:7f:27:32:77:68:4f:
                    b7:16:eb:90:fc:01:47:9a:55:16:39:e1:36:e2:64:
                    8d:1a:ba:47:60:d4:31:a1:de:8d:9e:ee:c6:e3:05:
                    e7:83:03:98:09:65:b8:57:8e:13:87:ad:14:29:41:
                    51:22:d6:7f:db:39:73:50:6f:45:b4:0d:8b:4b:03:
                    1f:65:94:e6:e9:60:e2:db:21:4b:78:90:1f:8c:de:
                    45:f4:3a:c5:9a:dd:06:f8:0b:5b:4c:ce:fb:66:86:
                    d7:92:9e:11:43:3f:44:e2:76:03:02:13:5c:99:36:
                    95:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:30:64:E0:1F:45:3B:BA:17:93:84:33:8E:85:E2:F2:A9:41:28:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d473a3a-6ed2-30cd-af1d-2b18e3c7538a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ba:28:e0:06:3d:23:d3:2f:cb:a3:31:7f:4d:8b:57:90:b7:
         fa:34:6e:00:7f:c7:06:06:2e:ad:b3:af:d7:a0:a2:1c:fa:cf:
         5f:24:8d:15:49:00:fc:8a:dc:53:f6:ef:6f:20:0f:ae:49:f4:
         21:64:fc:47:c8:57:77:36:e5:60:c7:b2:9e:d4:97:f2:53:6b:
         a3:e5:bd:08:fd:df:37:84:99:ca:dd:4c:32:68:a6:85:2d:2d:
         dd:fc:e0:d2:cd:e8:df:a4:eb:2a:8b:58:ed:70:37:e7:97:4b:
         16:43:a9:df:74:f1:92:2a:0d:e4:7d:04:cd:1f:fc:1d:23:96:
         31:1a:61:01:60:10:45:7b:50:4b:9b:77:18:06:65:41:96:65:
         dd:43:2f:f5:bb:3c:24:8c:16:c3:03:3b:27:20:60:6d:07:06:
         a9:b6:d4:b9:01:3e:17:48:00:61:4d:5b:54:24:fb:ab:78:6f:
         9d:4f:87:fd:ff:25:14:c8:31:40:7c:d3:5a:08:52:e2:ce:5a:
         69:7e:ab:ba:cb:8b:b4:35:8a:82:cf:92:30:ff:25:c1:b6:0f:
         40:55:e5:4b:28:20:29:84:2e:9f:00:4e:87:39:4d:f6:e4:2d:
         14:8e:2c:1e:94:a1:8e:0d:da:08:b3:0c:1b:fa:71:b7:e5:4c:
         43:b4:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:03 2025 by rpki-client