Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/edce5252-1740-3c45-83d6-f6be110eccc7.roa
File:                     edce5252-1740-3c45-83d6-f6be110eccc7.roa (raw, json)
Hash identifier:          HvY9T00uEM93AtUboTVoTGJyfvkXjSvHFehHaEKstvc=
Subject key identifier:   CF:8C:DD:A4:70:88:A9:E8:E8:55:D2:2A:C4:B5:ED:17:09:BC:1B:A5
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584A0C0556F46CC795D4E94B04E0
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/edce5252-1740-3c45-83d6-f6be110eccc7.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     397373
IP address blocks:        192.154.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:56:f4:6c:c7:95:d4:e9:4b:04:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=6d8e7883-4c70-47dd-ada8-c340136f9349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:32:b1:69:96:9e:93:4d:a7:0d:d6:a0:b9:
                    14:c6:98:99:b6:4b:89:05:b0:19:e3:a3:05:ca:be:
                    a1:d7:f1:07:0c:f1:6c:d4:5b:e9:1c:f0:a7:90:1c:
                    d6:da:ed:7f:dd:c5:50:a8:61:8e:c6:5c:dc:25:c6:
                    2f:90:3f:ef:1a:69:62:d8:af:52:15:ce:54:f9:85:
                    c5:66:74:7b:be:54:24:82:16:6b:47:5a:ba:8e:7b:
                    e8:00:9a:84:7d:e3:71:1b:96:cf:a5:b8:ad:93:35:
                    45:21:1c:4f:4a:4d:ab:bc:b0:82:5a:73:fe:90:f1:
                    ef:73:da:be:e3:72:c2:80:cf:3e:a1:e5:94:bd:5f:
                    ee:21:9b:95:d0:a5:33:3a:7e:39:5d:96:82:bd:1c:
                    f3:f6:4c:22:c1:fa:6e:38:42:e3:bc:df:f9:98:84:
                    16:3e:a2:a5:8c:74:70:a7:74:1a:ad:d0:b7:ba:ed:
                    b5:53:b7:be:7c:b9:20:54:6e:96:54:e5:f2:59:3f:
                    0e:9a:e2:74:90:08:c6:54:03:4e:9f:df:40:5e:d7:
                    df:cc:f9:c4:92:79:1e:d8:16:c9:13:d0:6c:02:eb:
                    46:9b:22:e0:6c:9f:90:9e:5b:35:b0:d2:39:59:f4:
                    f9:42:11:17:70:21:d5:a8:18:50:fd:c5:64:80:43:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8C:DD:A4:70:88:A9:E8:E8:55:D2:2A:C4:B5:ED:17:09:BC:1B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/edce5252-1740-3c45-83d6-f6be110eccc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:df:8d:cc:05:6f:d0:32:f7:2e:94:60:a7:27:d8:87:2f:e4:
         c8:99:95:f7:d9:7f:11:5f:cd:2f:6f:d0:42:13:a5:6b:22:a4:
         5c:42:29:5a:ed:77:bc:1d:28:87:fc:f0:00:88:bf:57:e9:2d:
         74:ec:90:42:14:3a:09:1a:4e:2c:a0:df:35:c3:1e:15:dd:5d:
         e2:5f:86:52:de:24:f0:6e:20:9b:35:08:db:54:61:4d:33:eb:
         5d:bc:23:92:ce:ee:dc:35:ec:7c:0c:6d:8d:9a:1d:32:aa:7b:
         41:14:35:cb:a5:6b:2a:0e:ed:51:6b:be:88:99:5c:0f:cc:42:
         35:f4:1b:56:93:3e:9a:17:fb:b9:25:14:6b:27:d6:21:bb:82:
         8a:e2:a6:24:b0:7d:af:33:d8:ff:1a:2c:14:35:79:39:6c:01:
         6c:b6:fe:6f:af:24:9b:df:11:fe:3a:29:da:64:40:e2:eb:a4:
         78:7f:ea:3e:b2:37:ed:cb:77:f9:79:ef:7d:73:f8:65:b4:92:
         9c:7b:6e:33:ab:42:9c:74:f3:77:3f:fe:92:d5:be:9c:ad:0b:
         8c:78:a2:8b:01:64:87:40:36:71:c2:a9:1b:da:de:6c:82:e8:
         e0:76:8c:86:28:66:26:de:09:de:ea:10:88:29:46:32:ac:c0:
         6f:00:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:05:54 2025 by rpki-client