Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/56276dff-a1b3-321a-ab5f-1678563c8a54.roa
File:                     56276dff-a1b3-321a-ab5f-1678563c8a54.roa (raw, json)
Hash identifier:          vhW5gJraZ40VyqD5g7MM761HH7hZCvVvrHjNFvaIEGs=
Subject key identifier:   59:66:C9:9E:2D:97:2B:C0:DC:A8:4C:EF:02:E7:A7:9B:10:83:28:DE
Certificate issuer:       /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
Certificate serial:       010D0C9F43285849FE53CCDE6FF2A3AC9C696280
Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/56276dff-a1b3-321a-ab5f-1678563c8a54.roa
Signing time:             Tue 27 May 2025 15:18:00 +0000
ROA not before:           Tue 27 May 2025 15:18:00 +0000
ROA not after:            Mon 25 Aug 2025 15:18:00 +0000
asID:                     12208
IP address blocks:        192.34.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:53:cc:de:6f:f2:a3:ac:9c:69:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
        Validity
            Not Before: May 27 15:18:00 2025 GMT
            Not After : Aug 25 15:18:00 2025 GMT
        Subject: CN=5f089ede-d0c5-46e9-92c6-dbaa423f60be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:a2:4e:46:b1:5f:78:91:99:7f:24:09:9c:
                    d7:a2:aa:f6:74:d8:80:57:cb:cb:c5:cb:f6:34:be:
                    55:57:9c:e1:96:48:e2:b8:23:cb:c3:93:a2:94:18:
                    2d:49:b9:2a:9e:96:58:61:0c:7b:d4:37:b6:26:6e:
                    3e:58:08:9b:96:db:1a:93:83:72:a4:a8:26:04:ab:
                    c5:f1:d8:0e:42:d9:0b:0c:53:61:3f:52:e7:6f:8e:
                    27:69:7b:c6:15:6a:57:4d:22:38:75:f2:cb:1a:ff:
                    fe:98:e4:7a:05:dd:ab:ba:d1:4b:81:58:ea:a1:a7:
                    46:cc:b2:9e:1d:a9:f9:56:36:50:bd:d7:9f:7b:2b:
                    71:dd:ae:fb:08:f9:cf:5f:84:a0:77:64:c2:66:e4:
                    ad:ce:0a:4b:22:c4:5e:8f:69:ab:f6:57:8b:a6:85:
                    97:3b:d1:b6:76:fa:43:e9:af:19:59:7f:a8:30:bc:
                    1f:c0:2e:5b:03:95:2e:65:75:48:99:55:86:7f:73:
                    0f:35:d8:fb:6e:6b:2c:23:b5:16:46:8d:e8:e8:b6:
                    03:de:b0:45:5f:3a:bf:ac:8e:6d:92:0a:92:8a:d1:
                    46:54:08:d2:fd:9e:97:36:99:44:e9:e1:ad:97:35:
                    6a:b5:d8:1b:f1:37:06:ea:7a:87:91:e9:39:76:61:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:66:C9:9E:2D:97:2B:C0:DC:A8:4C:EF:02:E7:A7:9B:10:83:28:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/56276dff-a1b3-321a-ab5f-1678563c8a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4b:72:02:47:f4:55:cc:b6:2f:5d:98:58:fa:20:e9:7f:1f:
         ce:ac:71:9c:83:e2:23:4f:fd:52:66:7c:16:59:01:6d:d6:40:
         4d:28:3d:f2:f5:cc:fe:cc:e9:f7:93:37:89:16:51:a3:87:9e:
         e7:53:0f:d1:82:d7:b3:a2:3e:ef:7f:2b:77:f5:b6:c4:83:1c:
         41:13:16:51:8e:90:88:d8:00:ec:9a:1d:80:13:b6:67:29:02:
         01:2c:dc:5a:73:2b:b4:2e:ef:92:4b:ff:8b:3d:a3:8a:0e:95:
         81:74:93:af:b1:8c:88:64:dd:84:6a:b0:29:68:c4:24:49:f7:
         2d:db:2d:74:e7:ee:9b:c9:e0:b4:3a:f1:56:27:dd:60:65:94:
         c9:80:b9:01:a5:d5:07:b2:e9:75:9b:d3:0b:30:78:7a:c3:51:
         d6:64:6b:d9:b4:d0:fb:a8:9e:19:a8:10:e3:fc:f2:49:df:5b:
         9b:1c:a8:01:50:c8:4e:bf:4c:c2:e8:65:bd:1e:04:83:55:77:
         80:f3:a8:cb:7a:84:5c:6c:36:61:c5:2e:67:4c:ed:5c:8e:89:
         62:ea:81:c3:1f:35:ce:b8:3e:08:37:09:7a:4c:d4:60:84:0f:
         05:be:3d:68:32:3d:c9:dc:34:f6:79:25:ab:bb:a4:89:68:42:
         03:85:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:53:52 2025 by rpki-client