Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/84f92b82-db32-3021-b880-580bbb7ff242.roa
File:                     84f92b82-db32-3021-b880-580bbb7ff242.roa (raw, json)
Hash identifier:          UNdCeAmVXwfVVjx8p5frMHJbPD1Q2GKK4jKa7OpPT3A=
Subject key identifier:   27:79:A7:2B:34:14:B7:B2:6E:E8:1A:36:89:29:04:7F:42:FC:69:7A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D85FA8787A09E29D7E2CB380
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/84f92b82-db32-3021-b880-580bbb7ff242.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     63296
IP address blocks:        208.185.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a8:78:7a:09:e2:9d:7e:2c:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=cedeef5b-843e-408e-a412-44a9210f760d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:a2:b2:29:b1:79:8c:8e:bb:ff:d7:29:4e:
                    85:09:94:e4:4d:1f:20:c5:b8:60:6d:99:37:05:d0:
                    3b:15:3d:94:d2:ca:2b:5b:86:23:f3:e4:15:2a:e4:
                    f1:b2:86:4d:51:5e:0d:ca:83:7b:12:c4:8c:77:e9:
                    c5:cf:38:e7:e5:b9:86:10:95:fa:62:c5:bf:8a:a3:
                    e4:75:7d:9a:ae:86:8f:c3:54:8e:10:ff:b4:7b:40:
                    6d:53:b1:cb:01:f1:ac:6e:83:16:37:60:95:ee:ac:
                    5f:40:90:b1:c6:91:85:7a:7d:f7:89:c5:4c:3f:e5:
                    ef:9a:07:6a:54:c5:33:43:ea:63:f7:0f:72:e9:e8:
                    98:8d:6c:78:fa:cf:38:3b:03:1d:7b:ba:44:22:c1:
                    5a:5c:e6:aa:13:c9:5b:77:05:db:f3:bd:8a:e2:32:
                    95:1a:c5:a7:c7:20:d9:27:93:f0:5d:c4:a4:81:c5:
                    9c:4d:24:11:e8:ad:33:53:e0:1a:c3:15:be:f9:5b:
                    17:02:b9:61:75:77:cb:09:1b:bc:ad:71:c3:f5:18:
                    7f:82:0e:f0:32:59:82:27:b3:f6:cf:bc:01:06:94:
                    ce:52:01:6f:c2:e6:a2:0e:68:33:2c:d1:ba:52:b5:
                    26:1d:ee:53:bf:6e:8b:10:07:9e:3d:4c:cf:57:34:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:79:A7:2B:34:14:B7:B2:6E:E8:1A:36:89:29:04:7F:42:FC:69:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/84f92b82-db32-3021-b880-580bbb7ff242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:5d:cc:9b:04:d1:a1:d8:7b:15:91:f0:0e:7a:dd:cc:cf:3a:
         f8:7c:a9:2f:32:15:2d:5a:26:59:7d:fe:62:79:f7:58:42:cd:
         0b:24:f8:e5:03:75:02:a7:92:07:df:87:7a:fc:7e:6f:6d:16:
         3b:03:bd:43:03:7f:11:c6:ce:0d:7a:27:25:5d:10:d5:a0:1a:
         6a:dc:41:33:8d:b4:c3:04:d8:4c:c9:ea:38:62:da:a9:ea:b5:
         a2:57:54:7f:ad:c6:0e:64:27:f4:aa:30:fc:5a:68:14:64:51:
         11:8a:b2:dc:59:8c:e1:88:1a:b1:d8:aa:1d:34:44:6d:b1:29:
         6c:0a:e7:be:0b:81:08:b8:99:56:67:90:9d:82:06:18:0c:24:
         2e:eb:e0:cf:60:bb:f8:fa:16:ab:b6:45:9b:00:2c:ca:bd:a4:
         69:4b:3a:49:7d:5b:50:d8:a5:41:95:47:21:2f:d9:08:6a:0e:
         53:e4:b1:a7:13:bb:ef:a5:5e:25:14:ab:8f:c5:7c:27:32:dd:
         92:1f:77:42:21:5e:b0:34:db:a4:a9:ce:68:6b:06:67:20:0e:
         44:c0:d2:97:62:b3:c3:0b:30:05:46:e9:0a:be:e0:31:0e:5c:
         e6:e6:ab:31:5c:97:e2:8f:d1:38:80:61:fb:0a:4e:28:fe:5e:
         8b:55:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:31:33 2025 by rpki-client