Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa
File:                     63906606-7983-3c12-8d4a-5461f3222ca9.roa (raw, json)
Hash identifier:          Tl/1JnttY7C5Gc2bCIcTLj8+V+ze8+B3yzYk7lgNwxk=
Subject key identifier:   FD:1D:DD:EB:F7:D9:5E:06:F4:C5:13:26:81:1B:48:A1:0B:62:44:17
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F43285849C79F60A0D9E5CE196A35C200
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     55178
IP address blocks:        192.230.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:60:a0:d9:e5:ce:19:6a:35:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=36ed317e-37dd-46b4-b575-72a0c98d7366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:8e:5b:7f:6a:3a:36:bc:7f:ce:95:0d:e6:
                    18:e0:f0:fa:c7:ac:20:81:71:5b:8f:c4:77:4d:21:
                    dc:5a:2f:6c:82:7a:e0:f1:d1:38:a3:60:2c:ee:d0:
                    98:9d:48:de:a9:14:c8:4e:a2:f2:2c:96:37:4f:5d:
                    22:da:d5:2c:c2:1d:c0:9c:b0:8c:1d:28:e1:8c:6c:
                    99:a8:11:7e:36:13:8f:e9:58:12:ea:b4:53:df:64:
                    3b:65:3d:65:c2:be:56:cb:8e:4b:3d:69:49:a8:26:
                    23:00:6f:e6:cb:3d:22:0f:eb:ac:f8:67:e7:32:d7:
                    70:2e:87:d5:eb:80:43:e6:51:6c:da:c1:2e:88:f9:
                    86:4d:11:f2:24:6e:62:6e:31:2e:98:15:0c:64:0a:
                    a8:9d:7f:30:a3:56:28:1a:83:8c:a8:a2:95:6e:c8:
                    75:41:20:ab:c1:45:1a:76:00:5d:f9:e1:59:d2:5d:
                    1f:94:d5:55:30:6c:fc:92:a8:49:c5:c0:01:75:af:
                    d4:ab:f0:a5:99:11:a4:ce:01:4d:1c:3b:16:fb:b1:
                    e0:00:b7:7b:a4:e3:33:8c:30:7f:61:7f:d6:a1:7e:
                    04:b0:e9:d4:fa:76:6c:4f:6a:0c:f4:f7:dc:bf:16:
                    fb:00:12:76:3f:2b:88:fe:71:54:0a:60:11:01:61:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1D:DD:EB:F7:D9:5E:06:F4:C5:13:26:81:1B:48:A1:0B:62:44:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:95:6c:90:3c:cf:e4:db:d0:25:a6:64:ae:80:f3:65:9b:dc:
         1c:30:84:3f:95:c4:9c:d9:14:04:2d:53:7a:cd:e6:4e:f7:4f:
         11:e7:e1:fc:86:eb:97:ee:b5:0b:83:7a:c2:a1:9f:77:e8:02:
         1b:73:14:60:bc:1b:9d:44:fe:d1:cb:d2:f7:b4:e4:c2:c3:2e:
         9c:8a:96:1d:25:ee:6a:6b:ec:9c:3f:dc:f6:32:72:83:df:6e:
         7a:11:9b:6a:8d:3f:6c:8e:73:65:21:37:62:2a:f4:09:ce:24:
         a8:4d:e7:b6:05:6d:0b:e3:72:d2:ec:cf:42:49:37:59:5a:c3:
         3e:46:03:ca:26:24:e8:e0:ba:f7:05:83:bf:f9:1a:66:25:48:
         ad:ee:ac:6f:a9:db:e5:b6:c2:5b:43:f1:b0:14:05:72:8b:25:
         f4:b2:92:e1:5c:45:e5:8a:cb:4a:61:dc:ec:95:f8:a5:d3:37:
         f4:eb:74:cb:1d:c3:87:55:0a:35:27:b6:90:b3:c5:b5:db:9f:
         48:e7:a1:e3:dc:82:25:a4:ec:26:cb:24:c0:15:b1:ef:6a:3b:
         9b:19:90:50:13:46:f3:a5:f4:c7:ab:51:87:d3:96:70:a6:cd:
         65:41:7a:e1:7a:58:da:1d:c8:80:db:8f:19:26:d6:16:84:4b:
         8a:53:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:30:33 2025 by rpki-client