Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/11cfa27e-719b-3266-b215-446176a2db40.roa
File:                     11cfa27e-719b-3266-b215-446176a2db40.roa (raw, json)
Hash identifier:          KqmmSPvfJuKrs2VctGwKPyeb15oYNhinJi4s1cYfTnQ=
Subject key identifier:   76:19:DD:B5:4C:DA:96:CB:3C:EF:96:07:DB:38:B1:DE:88:D4:D9:61
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F43285849C20A0F72A4113A9BFB09D4C0
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/11cfa27e-719b-3266-b215-446176a2db40.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        192.161.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:0f:72:a4:11:3a:9b:fb:09:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=b0084e0a-560e-49a0-b18b-343221682b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:b2:69:12:37:e2:3e:50:07:83:27:47:3f:
                    9f:26:95:4b:07:03:3d:8c:a3:97:6e:dd:43:3d:9a:
                    0a:d9:86:de:d7:2e:dc:72:a8:91:5d:7d:fd:44:67:
                    ea:59:dc:6c:d2:4c:8e:f2:43:de:d3:d0:1b:e5:98:
                    d7:57:da:34:dd:d4:12:81:6b:a6:14:0e:a7:fa:8b:
                    08:64:0b:a7:0f:12:ab:23:fc:21:15:3f:54:7b:e9:
                    ac:43:d9:00:5a:55:7a:d2:9e:37:18:92:54:1f:a7:
                    0e:96:98:c0:15:45:30:df:65:7c:0b:1b:45:f5:5e:
                    90:9b:0b:7a:0b:fd:be:54:40:a4:48:a6:43:a5:05:
                    a0:5a:97:8e:59:0a:ec:80:d7:c4:f7:93:44:34:63:
                    b2:c0:9e:ab:f0:a8:c1:d9:b8:28:c6:77:48:04:7c:
                    b5:19:66:b6:c5:65:4a:fd:e9:e6:7f:60:64:22:e3:
                    36:91:c9:b2:cd:43:89:42:dd:89:f2:0c:ce:3a:a3:
                    d8:07:a5:ed:2f:21:96:8b:fb:d6:35:a9:49:d5:ee:
                    83:e2:6a:d0:71:50:9e:47:44:2e:0a:85:9b:80:e5:
                    24:18:90:07:8b:37:63:f1:4a:82:92:fa:2b:84:ae:
                    fc:c2:bb:b4:56:85:12:34:25:ee:88:13:02:11:ef:
                    86:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:19:DD:B5:4C:DA:96:CB:3C:EF:96:07:DB:38:B1:DE:88:D4:D9:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/11cfa27e-719b-3266-b215-446176a2db40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:64:a6:cc:68:e8:4c:cf:86:3b:cd:a9:f5:db:ec:9d:64:eb:
         14:c2:09:0f:bf:e3:7d:5f:49:41:86:74:3c:0b:07:37:18:23:
         93:b2:4f:23:b0:67:75:b2:61:5d:fe:9c:f7:b7:97:30:ef:a8:
         15:af:49:8f:4e:86:e3:19:c9:dc:92:a9:5b:f1:b0:9c:1c:8a:
         42:9d:87:29:be:40:87:ab:01:29:f2:5a:bc:72:76:c9:76:04:
         2f:6f:6d:c8:f9:4b:40:b5:04:a5:80:b5:40:75:72:18:52:ab:
         b0:a4:7e:8e:38:e2:7f:66:0b:2b:db:c6:db:5b:41:4e:f9:da:
         c0:c8:a5:6b:e0:37:8f:93:a1:2d:a4:11:40:04:df:84:0f:55:
         3e:8e:d9:5a:e7:7b:2e:ae:62:90:fe:2c:03:de:64:94:10:bb:
         c6:c4:e8:25:ef:d9:75:87:cf:96:36:2f:cb:a6:b6:06:92:51:
         b8:36:38:70:02:fc:a4:72:b8:32:e0:3d:39:c2:b6:3d:23:2d:
         25:b9:98:08:2c:24:2e:e8:cb:56:9e:92:0f:89:f1:a4:18:16:
         c8:f3:95:ff:62:e1:89:b6:a2:1b:d1:6a:7d:07:89:82:df:c8:
         9a:a6:23:12:a5:c1:e1:9c:5b:32:e3:7a:88:d2:4a:42:5e:2d:
         0f:89:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:22:27 2025 by rpki-client