Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/401e3d20-2c1f-3e44-a0ba-c0ac7cc03e73.roa
File:                     401e3d20-2c1f-3e44-a0ba-c0ac7cc03e73.roa (raw, json)
Hash identifier:          HkrW20Nmxkxz/YKjx0qYcT0UCW58zKl4wfm/tdIu5FA=
Subject key identifier:   46:9D:24:F0:C9:68:51:C7:46:F2:2E:6C:9F:14:62:5F:6C:C9:83:50
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C247813E4881888D9DC0880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/401e3d20-2c1f-3e44-a0ba-c0ac7cc03e73.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     19720
IP address blocks:        216.2.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:78:13:e4:88:18:88:d9:dc:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=d1818d48-7cd2-4073-9f0b-1b64f64e5f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:68:04:95:de:e9:ce:f7:91:3e:4d:8d:9c:01:
                    c2:00:c2:5f:0b:d8:ed:87:8b:c4:44:09:81:ea:dc:
                    21:da:8f:34:b0:72:da:fb:32:46:a5:d9:49:59:ca:
                    80:52:ed:84:fe:52:e9:47:b1:89:a3:31:2b:d9:4d:
                    c2:aa:ae:2a:fe:2b:d9:50:9f:92:cd:6e:b6:30:a1:
                    da:e2:62:f6:32:c0:f4:b2:a0:78:5a:99:71:88:ec:
                    eb:d1:08:9f:35:fb:ad:c5:a1:d7:58:68:26:7f:cf:
                    5f:14:84:2f:8b:bf:38:ce:22:82:b8:98:5c:05:bc:
                    6a:31:6b:7a:2a:57:79:4c:a1:60:d5:bc:47:67:5e:
                    2f:39:09:9f:29:61:55:8f:e9:af:cc:16:07:75:da:
                    f5:24:a2:0f:24:3c:27:2c:1b:34:3e:ac:f5:25:25:
                    1c:a3:d0:3e:5f:09:1c:58:80:60:7f:09:ca:3f:c6:
                    62:1d:d6:3e:74:30:3d:76:b7:d2:af:f4:35:7a:f9:
                    85:96:73:ad:ae:fd:b3:7d:00:12:6c:04:a2:34:aa:
                    ce:5d:4f:89:61:67:ea:af:2c:3c:fb:aa:47:c6:a3:
                    b7:2c:91:8b:12:f4:b9:bb:c7:de:e9:1f:d0:3b:1b:
                    6a:03:95:f4:d3:1d:4d:5e:fc:6c:7d:98:18:f1:78:
                    03:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:24:F0:C9:68:51:C7:46:F2:2E:6C:9F:14:62:5F:6C:C9:83:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/401e3d20-2c1f-3e44-a0ba-c0ac7cc03e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.2.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:03:f7:c9:67:57:2f:ce:65:34:d0:e8:d2:4d:31:44:7f:a6:
         14:e7:3d:1a:ac:cb:d1:cb:62:4d:0d:0d:bf:3b:63:dd:c8:95:
         3f:eb:f9:10:71:ba:a5:be:61:21:e5:a6:5c:54:81:79:a6:57:
         79:72:6c:75:cb:29:c3:2e:0d:cc:f1:b0:0e:88:cd:21:70:b7:
         7e:95:01:6d:79:7b:af:b3:1f:07:62:97:51:22:40:e1:b0:60:
         3f:42:3a:0a:19:07:ed:9f:cc:a4:d8:dd:fb:75:ef:9e:24:f2:
         07:45:51:77:6d:ed:9d:3a:a3:0f:43:49:a8:01:81:37:46:f5:
         b0:46:61:ea:9d:f6:05:a5:e9:a0:17:32:c7:89:ad:df:c5:aa:
         7e:4f:33:7a:8e:9f:d6:5a:55:e7:35:a7:a1:0b:50:83:23:81:
         e9:04:80:1c:18:76:f5:05:d4:5d:d0:01:79:ed:ca:e4:d1:97:
         c2:29:c5:2f:3c:10:55:b3:8f:8c:5c:a0:54:71:6c:0a:74:fc:
         b5:9e:63:6a:51:78:24:00:3e:83:7c:eb:57:35:38:40:b0:01:
         c3:c6:5e:be:cf:43:72:c4:4a:1f:eb:3e:98:ee:f3:a3:c1:a8:
         45:3c:53:f2:5e:03:ed:cf:37:73:00:7a:5d:61:1b:8c:60:b0:
         ae:5d:02:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:35:25 2025 by rpki-client