Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/e70b0f5e-3f70-3796-bd5e-b12d1014e69c.roa
File:                     e70b0f5e-3f70-3796-bd5e-b12d1014e69c.roa (raw, json)
Hash identifier:          l6YJZI8D23c27ttPQMJfNz7R5wwjtljjsXgoiAEW/FA=
Subject key identifier:   75:99:5D:0D:7A:01:29:DA:95:51:4F:53:3E:F5:09:8F:1E:E1:95:FD
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F43285849D594E931D2BD7F952242F800
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/e70b0f5e-3f70-3796-bd5e-b12d1014e69c.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        199.19.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e9:31:d2:bd:7f:95:22:42:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=d1cede1f-b0a3-4ac7-b83a-fe80a0898448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:ea:17:0c:56:d2:a4:63:6f:b8:74:78:44:
                    9a:2f:40:1b:17:17:18:3b:bf:12:ca:73:51:7e:5a:
                    12:72:bf:5b:e4:45:48:51:73:d4:2e:68:43:67:98:
                    df:16:a7:40:35:99:c6:25:f3:67:37:85:42:c7:ba:
                    8f:32:f8:b1:f2:ae:db:7a:73:b1:d2:40:9e:16:59:
                    8e:fb:5d:93:ea:45:4a:cf:48:b2:1c:ad:51:59:6b:
                    e6:e2:9b:a2:1f:95:e5:38:64:8a:6a:61:15:e6:08:
                    2c:20:c9:c1:44:46:ba:e2:af:6e:3b:df:f4:88:65:
                    27:53:bb:c7:94:ec:c5:4c:69:1d:f3:c1:28:dc:fa:
                    50:a7:ce:22:ad:dc:08:ec:f6:d6:28:16:e6:50:17:
                    0f:77:54:4e:15:cd:31:7f:cc:5d:a1:4e:6b:ae:fc:
                    62:6e:ea:29:90:ed:32:28:6f:a4:79:eb:a6:1f:c5:
                    47:6d:00:5d:d6:24:e0:e3:18:f0:6c:25:bf:4d:fe:
                    46:e8:a0:41:b4:6b:64:b6:cb:69:65:db:61:ca:48:
                    29:ba:a1:2d:c0:e5:40:d1:e1:8a:3e:53:09:74:25:
                    a0:8d:8e:b2:23:53:7f:f8:f3:97:b2:90:d8:4f:6e:
                    a4:67:1d:70:fa:22:1f:39:9d:d7:75:82:39:9a:10:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:5D:0D:7A:01:29:DA:95:51:4F:53:3E:F5:09:8F:1E:E1:95:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/e70b0f5e-3f70-3796-bd5e-b12d1014e69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6e:f4:31:03:11:2e:25:ff:f5:cd:49:be:a8:be:be:ce:1f:
         7e:2a:1b:81:64:f8:3d:13:e8:39:bb:b2:6f:b2:16:b6:1d:9a:
         46:dc:9d:2c:48:f5:81:75:de:89:dd:9c:da:8d:40:ac:9f:0d:
         ec:98:c2:00:21:e6:7d:1c:6b:4e:32:de:e6:35:95:f1:47:65:
         45:ef:cf:00:9e:f4:65:47:30:e3:e6:76:5b:fb:2d:98:8d:f6:
         d9:66:6a:62:38:6d:5a:bb:15:04:8d:5a:83:82:56:27:e1:98:
         b1:0f:f7:03:a7:2c:04:1b:40:7b:04:f4:ea:27:2b:d5:7e:51:
         a5:a3:e3:ae:a6:c6:77:44:14:65:90:e9:e7:14:68:f9:21:38:
         ed:f2:7c:2a:7e:da:ca:05:72:d3:9e:eb:81:f2:dd:27:ae:7f:
         62:cc:61:54:b7:e5:1f:5e:83:3f:83:28:00:c0:48:5e:92:c1:
         ea:b0:8d:57:48:d2:20:42:68:3d:b4:e9:9a:53:56:92:18:5e:
         44:c0:39:c7:58:9e:f7:75:7e:d6:39:34:e9:a6:0d:b7:b0:b6:
         39:e7:7a:50:5a:96:99:b3:0b:89:93:3b:af:0e:c9:2d:00:10:
         79:be:0d:ed:b2:3b:82:88:96:e7:d0:85:80:1d:58:fc:0c:6a:
         21:71:95:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:39:34 2025 by rpki-client