Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/1e254357-1d2f-3370-a3fe-8df9a37b7b0e.roa
File:                     1e254357-1d2f-3370-a3fe-8df9a37b7b0e.roa (raw, json)
Hash identifier:          YGXhR69fm1Hu+/IsyjP0yaBJ0BGgBCq9/hyubjGBKWE=
Subject key identifier:   B0:8C:FA:D2:5B:57:82:F7:BD:1B:1D:B2:19:D3:9F:58:12:CB:FD:C5
Certificate issuer:       /CN=08a6d347-5170-4470-abb6-1b99491a1406
Certificate serial:       010D0C9F4328584992949AB3190C95B7A2C4DB80
Authority key identifier: 34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/1e254357-1d2f-3370-a3fe-8df9a37b7b0e.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     199959
IP address blocks:        192.52.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:9a:b3:19:0c:95:b7:a2:c4:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a6d347-5170-4470-abb6-1b99491a1406
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=b6bf5eaa-2529-4a8d-93ef-bd3f5855edec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:77:4e:d0:69:84:bf:cc:19:2d:0c:ff:6a:
                    43:15:ae:f2:8a:b8:01:bc:63:53:ec:ea:99:74:0b:
                    7d:a1:cc:6f:a3:9f:c9:72:f7:79:86:06:d6:a4:5c:
                    3e:e8:fc:95:de:79:ec:55:07:44:43:29:4d:07:c2:
                    f6:e9:4d:d3:28:e1:c4:9a:7d:1c:45:2c:af:dd:ae:
                    58:69:38:39:c8:14:49:0a:a9:fa:cb:c9:f9:0a:d1:
                    a3:6c:49:d5:9a:a1:8e:f2:40:fb:db:c2:37:c7:0a:
                    db:2b:18:ae:2b:c0:05:c9:f7:31:7d:40:5c:0e:d1:
                    76:b9:1e:75:75:4e:b4:46:b2:01:69:03:60:9d:a5:
                    dd:c7:93:d8:cb:f1:bb:77:22:24:a6:95:07:3d:af:
                    99:c2:6e:62:cd:7b:f2:8c:59:e0:b9:e3:b6:8c:ae:
                    d7:59:37:f6:63:cf:af:27:6e:a5:11:8e:db:8b:5a:
                    36:db:57:b1:27:40:d1:1f:be:d4:60:99:03:e4:56:
                    41:2d:89:55:b6:25:ff:3e:0f:f5:60:ac:f9:10:eb:
                    55:a1:f3:b9:40:95:f5:d5:e6:dd:c8:7f:f7:fe:a7:
                    aa:23:2d:3e:1f:8a:72:1f:9b:91:60:c5:d2:ca:d7:
                    ea:fe:29:bc:34:c8:6f:f2:41:e9:5a:42:66:d4:1a:
                    60:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8C:FA:D2:5B:57:82:F7:BD:1B:1D:B2:19:D3:9F:58:12:CB:FD:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/1e254357-1d2f-3370-a3fe-8df9a37b7b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl

            X509v3 Authority Key Identifier:
                keyid:34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ea:e2:13:15:0e:09:1d:da:54:01:23:0c:14:9d:8b:8d:fc:
         e6:c5:4f:f6:40:36:07:b1:f5:d9:d5:c8:bf:a0:37:29:1f:d4:
         33:e5:cd:89:71:f8:2e:aa:36:da:2e:9b:ca:b3:56:75:50:b4:
         62:5d:17:8b:86:9e:44:3a:17:6a:77:b9:42:d5:8d:12:bb:70:
         73:99:16:3c:a4:ed:f9:de:ae:cb:b1:b8:cd:16:fb:6b:e0:fe:
         c7:b9:40:f0:68:07:34:35:3c:6e:bd:1b:98:11:d3:08:f4:07:
         be:74:fd:aa:7e:22:b2:2f:62:b2:85:c2:95:5b:20:2e:7b:43:
         ce:b0:18:3d:11:65:f7:19:30:0a:e6:8c:44:c0:02:34:32:0a:
         ad:d5:43:5c:51:59:cd:4f:d4:91:f5:00:fe:84:ca:87:9f:33:
         5f:41:ef:57:fd:c5:b5:50:14:b4:16:7d:49:80:4e:98:49:10:
         cf:3b:9b:21:85:64:10:6c:45:35:9c:6a:bf:b8:95:6f:0b:ac:
         c5:fd:3e:84:ea:e1:da:ff:2a:5f:08:e3:dd:f5:bd:04:e9:b8:
         4b:b1:8e:67:ad:9a:4e:99:14:4e:92:c7:cf:dd:1e:3d:f8:79:
         25:1d:a9:f6:96:19:9a:e1:fe:8e:61:c4:43:95:b8:b4:b0:87:
         cf:94:7f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:10 2025 by rpki-client