Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/3d949512-7b04-3f33-90eb-ef865d41a75f.roa
File:                     3d949512-7b04-3f33-90eb-ef865d41a75f.roa (raw, json)
Hash identifier:          ViVDwxs1LJM87ouhrhdh8SLNILQDp/dbS3DdUrln8MY=
Subject key identifier:   07:C8:8A:96:26:7B:15:36:40:3D:40:4B:8D:6F:09:C0:4C:ED:19:18
Certificate issuer:       /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
Certificate serial:       010D0C9F4328584967F6D2A0A27925E32D5D7038
Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/3d949512-7b04-3f33-90eb-ef865d41a75f.roa
Signing time:             Thu 03 Apr 2025 18:39:24 +0000
ROA not before:           Thu 03 Apr 2025 18:39:24 +0000
ROA not after:            Wed 02 Jul 2025 18:39:24 +0000
asID:                     46539
IP address blocks:        192.187.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:f6:d2:a0:a2:79:25:e3:2d:5d:70:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Validity
            Not Before: Apr  3 18:39:24 2025 GMT
            Not After : Jul  2 18:39:24 2025 GMT
        Subject: CN=677eecc2-c83d-437b-aa5c-8fa8805258d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4f:a8:a1:04:27:33:78:93:0f:03:fe:41:53:
                    ce:9f:1c:77:7b:2c:dd:54:b9:c1:bb:4b:b3:ee:46:
                    5a:fe:b2:45:2a:c3:a7:27:44:15:51:fb:3b:0c:bb:
                    6a:43:6c:97:3e:a3:63:12:7d:07:1b:a3:38:ba:df:
                    93:c5:a1:10:d8:7a:0a:c6:57:1c:0e:78:0d:bd:2e:
                    e2:85:b9:90:fb:7b:31:a2:82:ea:5f:ed:ef:98:af:
                    54:ce:0f:d8:54:7b:fe:ce:01:ec:05:1a:53:45:50:
                    9a:d5:be:bd:f3:eb:02:8f:07:f9:b8:69:ba:1c:02:
                    bd:77:ff:42:33:de:44:bd:6b:fa:7b:a5:38:05:5b:
                    93:ba:98:78:dc:0e:16:11:09:aa:3b:8e:e7:6d:fd:
                    9f:41:de:ad:8d:fe:8e:bd:4d:98:ff:c1:ed:b7:7a:
                    03:ec:a6:9b:a1:53:a6:55:1c:da:4a:21:e4:5b:16:
                    ad:aa:ca:8d:2b:bb:c7:47:cc:2c:c4:ee:23:71:d4:
                    0b:e8:93:fd:05:29:e6:82:50:b5:2c:02:c0:32:13:
                    af:44:2e:7f:cc:f8:09:0b:68:8b:06:81:3b:87:90:
                    16:b9:c2:e4:cd:bc:97:08:7c:dd:9f:62:79:32:6d:
                    8b:36:c0:10:2f:e6:53:a4:e3:c6:df:e1:68:68:bc:
                    73:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C8:8A:96:26:7B:15:36:40:3D:40:4B:8D:6F:09:C0:4C:ED:19:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/3d949512-7b04-3f33-90eb-ef865d41a75f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl

            X509v3 Authority Key Identifier:
                keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.187.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fd:9e:c7:52:da:82:ad:56:89:75:f9:16:76:b8:2e:81:5f:
         3b:34:10:de:33:0e:a0:e8:7d:55:63:9c:40:07:72:3f:ab:87:
         4e:90:79:ba:99:85:d7:c5:46:c3:17:ad:a5:df:26:03:04:2b:
         72:7f:62:69:e4:65:14:90:c5:9a:24:e3:43:e6:21:02:e9:f4:
         9a:51:4b:af:e8:0a:cd:26:a0:83:41:ff:a5:e5:a8:91:e3:e7:
         a0:46:b4:4e:3f:7c:5d:07:ef:ba:11:03:a8:8b:b6:2a:73:b8:
         06:e5:94:5f:1f:16:b4:d6:a5:0f:fc:79:f6:f9:fe:88:66:47:
         92:32:d3:07:b5:c7:12:dc:58:0b:31:95:d4:97:57:46:de:ef:
         6b:8c:36:e0:75:37:e9:8f:47:d3:20:a5:71:4b:0b:54:98:c9:
         e1:9e:f9:e2:58:22:1f:e5:5a:0d:85:97:2c:77:fc:a4:b4:a7:
         0f:36:f8:d9:79:a1:65:32:fe:62:e9:25:28:e8:2e:ec:8b:f0:
         6e:d2:37:0a:8a:24:a5:ab:05:60:eb:c6:44:67:12:c8:5b:8b:
         7d:22:90:b2:17:f1:bb:1c:a2:09:83:b9:ad:44:00:83:35:52:
         66:05:74:c0:39:c3:99:20:60:01:66:a8:90:74:51:5c:77:db:
         1d:71:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:56 2025 by rpki-client