Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/0c386be9-e47f-3c2f-8593-dfacf6bebbd4.roa
File:                     0c386be9-e47f-3c2f-8593-dfacf6bebbd4.roa (raw, json)
Hash identifier:          pMyi18jDTQAXy6FZ5gDxImNOmALv2SApt6eCm/lFfi0=
Subject key identifier:   11:68:9B:BC:D6:32:77:FE:89:BC:F4:AA:39:6E:37:AB:53:9A:A4:2B
Certificate issuer:       /CN=48e1915e-1132-4c62-a522-0f196fb03c8f
Certificate serial:       010D0C9F4328584A146560F4EF7D0EF7257C1300
Authority key identifier: 92:6F:EC:EE:CB:0A:F9:03:6A:02:62:DB:0B:D9:11:2A:0B:43:81:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/0c386be9-e47f-3c2f-8593-dfacf6bebbd4.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     36375
IP address blocks:        141.214.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:60:f4:ef:7d:0e:f7:25:7c:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e1915e-1132-4c62-a522-0f196fb03c8f
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=078e5548-70e9-41b2-aee1-8816a974c44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:12:60:12:f4:fe:a5:53:36:9e:d9:5e:04:
                    38:b1:37:e8:6f:d4:47:b5:24:e2:4c:80:c2:6c:64:
                    4f:0a:b5:b3:50:d7:62:4d:c3:c8:d4:68:11:c0:ef:
                    45:da:6d:dc:ec:48:51:f7:3e:55:33:8c:11:2b:6f:
                    6e:00:fa:82:1c:87:ab:40:94:bc:08:93:53:2d:00:
                    b9:6f:c4:4b:70:c3:af:8e:5a:47:92:f6:a3:6a:dd:
                    d5:7e:a5:87:b3:64:41:b3:55:06:de:32:ef:0a:a8:
                    54:73:46:96:3b:40:d9:c4:c4:fe:b0:a1:97:3c:01:
                    c5:93:39:93:93:66:a1:40:46:6d:70:54:5d:5c:2f:
                    2f:2c:69:94:b6:ce:bb:4e:4b:0b:52:6f:af:17:3a:
                    71:15:7b:c7:b3:8e:9e:63:1d:64:87:ec:5a:83:e5:
                    c5:79:a0:67:6f:b8:66:cd:dc:3f:e5:cb:ed:aa:94:
                    41:bb:f0:e9:5c:d9:65:e6:5d:32:bf:98:96:f6:cf:
                    b1:b2:6d:39:15:ab:eb:2f:de:2a:da:41:f7:58:35:
                    0c:c0:61:c4:86:e1:78:7b:b4:3a:e0:2b:d8:d1:b4:
                    f5:68:88:13:dc:50:be:dd:5c:03:45:f2:b1:af:37:
                    2e:b1:52:38:1b:2f:95:af:8d:1f:23:bb:61:48:5b:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:9B:BC:D6:32:77:FE:89:BC:F4:AA:39:6E:37:AB:53:9A:A4:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/0c386be9-e47f-3c2f-8593-dfacf6bebbd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.crl

            X509v3 Authority Key Identifier:
                keyid:92:6F:EC:EE:CB:0A:F9:03:6A:02:62:DB:0B:D9:11:2A:0B:43:81:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.214.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:43:67:bd:76:e4:22:02:4c:f6:46:e0:96:5a:a3:5a:53:
         3d:8c:b1:d9:78:97:ff:88:d3:c0:d0:e3:1d:47:08:ef:18:52:
         da:9b:48:e1:a2:58:65:16:3d:bd:01:25:77:37:d7:28:f8:b7:
         05:89:61:c4:dd:9d:a6:22:76:d0:2d:91:f7:3b:14:2c:2a:29:
         15:76:af:22:53:ae:12:6f:75:6f:f5:a4:ad:0a:0d:a2:c1:5c:
         8c:f7:a1:d3:83:10:06:8d:74:8d:36:1f:88:9c:2e:46:ce:db:
         33:d3:4a:bc:0b:e0:05:46:7b:89:98:b7:ba:76:8d:52:b0:44:
         20:cf:31:a2:fa:2b:14:a7:01:71:97:99:c7:75:f6:03:fe:58:
         1a:dd:23:9a:1d:f2:d2:af:62:04:34:50:86:78:71:93:ea:6e:
         3e:01:c3:77:12:30:52:b6:01:4f:b9:1c:9e:f4:cc:1a:c4:05:
         bc:35:5f:37:8c:15:08:f7:7c:18:55:34:d9:d1:b4:75:96:2a:
         ee:79:43:05:83:0c:a3:4a:31:cd:f1:14:03:37:5b:6d:54:a5:
         34:03:78:81:3f:d7:8e:97:61:f0:d5:c4:35:5e:7f:c9:34:b0:
         61:1e:52:0b:d4:56:11:31:50:e4:10:63:1e:f8:03:99:1b:ee:
         cb:3a:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:35:05 2025 by rpki-client