Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7db6eb3-8d95-32d1-a25c-5fe42f3fb923.roa
File:                     d7db6eb3-8d95-32d1-a25c-5fe42f3fb923.roa (raw, json)
Hash identifier:          tIOKrF1adEwM0cEk8LH8ehQheSKEmLGCOavukmb0mdc=
Subject key identifier:   06:3C:89:47:AE:E6:92:B3:0D:B1:66:81:04:D4:53:8A:46:DE:14:34
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DF5A55A3170A9D6234E0D9C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7db6eb3-8d95-32d1-a25c-5fe42f3fb923.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     30036
IP address blocks:        192.119.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:55:a3:17:0a:9d:62:34:e0:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=4f755e88-7b2e-4b92-b9bb-69b95b4d3246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:fb:c5:81:f7:cc:61:77:58:53:74:70:31:
                    d6:e2:40:e9:ee:56:a6:d2:1c:71:78:a2:d3:8a:52:
                    c9:54:16:a3:4d:83:86:8a:c8:37:94:b4:3f:d9:ef:
                    22:5a:66:f5:8d:ac:7d:8c:be:8d:87:f3:2c:aa:fd:
                    3c:3b:37:59:ec:fe:3e:98:0c:97:63:77:65:48:f2:
                    d7:d8:fb:52:33:a5:dc:62:3d:ba:af:38:e3:1f:87:
                    2e:1f:c4:86:3e:f8:18:db:06:7f:04:8c:15:5e:cd:
                    2a:5d:11:e2:0e:c7:51:dc:3e:6d:c7:c6:9e:06:4f:
                    09:02:82:da:23:66:5b:12:4d:f7:29:ae:b2:9c:08:
                    72:b7:24:8d:05:49:a4:8a:2f:f8:ce:e2:26:ed:a8:
                    10:b4:12:58:da:32:ab:82:6f:b2:8e:31:ee:ea:d5:
                    1b:82:d7:a9:e6:30:2d:b2:1b:f9:6e:ac:a2:80:c5:
                    c8:9b:e5:4f:1d:25:09:71:2d:17:0c:ef:ed:c6:d7:
                    ce:0d:8f:23:a3:98:36:2c:19:02:f8:f5:fd:ea:f8:
                    bd:09:5f:7c:06:33:93:58:6c:eb:ba:47:b3:4e:23:
                    ad:ee:dc:cb:5f:53:b5:15:78:3f:94:40:03:ed:49:
                    13:46:d8:1a:32:a1:ed:d5:8f:05:cf:e2:ac:d5:8b:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3C:89:47:AE:E6:92:B3:0D:B1:66:81:04:D4:53:8A:46:DE:14:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7db6eb3-8d95-32d1-a25c-5fe42f3fb923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:2c:0f:aa:9f:70:00:c0:11:02:cb:eb:fb:8c:43:0e:eb:a5:
         89:72:ee:fd:42:a7:2c:80:3b:74:0e:55:0f:a7:6d:26:56:ad:
         d4:3d:f9:ae:e4:46:5d:4f:e3:a7:c7:23:83:43:f0:ef:6a:42:
         20:f6:d0:e7:1c:4d:7b:1c:76:c8:70:08:c4:11:7d:19:b2:7d:
         ae:b1:72:6d:1d:50:f0:f8:a3:7f:85:74:b5:ac:15:ac:7d:1b:
         31:4a:35:54:28:25:3a:f8:90:97:dc:d0:6f:c5:a8:1c:ab:3f:
         8c:19:c5:0e:ca:a9:74:c7:48:27:1d:07:a9:40:14:7b:5c:06:
         12:e2:4f:23:dd:60:10:df:10:85:2d:e4:92:65:43:d8:98:e4:
         c6:98:77:8a:98:ba:c1:dc:ff:2a:cc:27:9d:b2:fe:1d:8a:a8:
         63:cb:0e:d9:ec:2f:58:3a:38:73:4e:89:d0:5b:e1:b3:fd:7f:
         76:e4:d8:e0:63:04:88:40:28:1f:35:e2:d9:f2:60:22:c5:3c:
         bb:b4:00:e6:56:65:44:70:3d:45:c9:b7:84:88:c7:e0:19:4d:
         f7:d8:63:60:f8:67:c8:e5:fd:65:56:09:7c:31:d4:50:8a:08:
         9a:cd:a9:50:bb:07:ef:26:b3:f7:9e:fa:84:f2:ae:42:1b:b6:
         6c:fb:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:27:00 2025 by rpki-client