Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/92889b1f-2814-3795-bb69-c86163200732.roa
File:                     92889b1f-2814-3795-bb69-c86163200732.roa (raw, json)
Hash identifier:          Sx/X5DzOQ5WUDskvPximVGYseDEv+povKc0AZ0+eYmI=
Subject key identifier:   B2:34:A5:8C:B3:68:02:20:06:B1:29:BE:3C:CD:C8:CE:DD:16:F2:E2
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584A17300AC4CF549E4B4C61A000
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/92889b1f-2814-3795-bb69-c86163200732.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     30045
IP address blocks:        192.139.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:0a:c4:cf:54:9e:4b:4c:61:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=788152af-644e-40ea-81a9-65d349378dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:40:2e:6f:98:b3:3b:e6:fa:f4:4b:43:8f:
                    83:6c:64:3e:4f:09:14:bc:d7:4c:1d:97:fb:86:c1:
                    5e:e3:40:b9:ce:80:53:60:da:c9:07:78:1a:ec:23:
                    21:6e:88:fe:ab:76:26:6f:8f:e3:1b:bf:ec:9c:9b:
                    cd:38:82:0a:97:e6:df:18:56:36:a4:72:c2:f1:21:
                    1d:6f:0c:4c:1e:84:d6:6e:77:36:1d:e1:03:cb:8b:
                    c6:46:f2:df:6e:a0:3d:a2:a2:4b:aa:e1:88:0a:bb:
                    63:80:12:e1:7f:c0:63:14:b2:20:fb:1b:41:77:23:
                    98:ec:8c:7e:09:01:f0:ae:15:db:51:d9:f1:8e:8d:
                    1e:f6:89:41:92:03:a6:47:98:47:e3:06:33:86:8d:
                    53:3d:57:d0:48:11:5f:58:88:e3:a7:43:bf:40:86:
                    da:23:b1:75:0f:75:01:c6:e6:fe:14:d3:13:c3:d5:
                    87:e4:5f:2a:63:67:ae:f0:d2:4d:ad:c4:67:86:38:
                    b5:11:98:5b:bb:32:2a:a2:04:3d:ea:20:46:44:c7:
                    68:14:89:82:a7:b1:83:cf:ef:52:de:6d:b9:4a:35:
                    55:05:a3:28:2a:e3:2d:3b:59:78:e7:a8:6e:77:00:
                    77:85:91:b8:f8:0d:f1:12:ed:3e:4f:4b:af:68:9f:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:34:A5:8C:B3:68:02:20:06:B1:29:BE:3C:CD:C8:CE:DD:16:F2:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/92889b1f-2814-3795-bb69-c86163200732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:74:f4:e0:9a:12:3a:0a:77:f5:06:da:9f:5c:81:a1:b8:b5:
         98:bb:24:3d:4a:d7:ef:89:36:8c:06:46:5c:25:77:8c:41:86:
         97:82:ec:da:7f:9d:8c:b2:63:bc:02:0c:f8:73:a6:1d:b9:cd:
         db:92:ce:a1:1d:b7:a3:30:c9:ac:d8:b6:30:c9:8c:a1:d2:0d:
         61:c6:da:e3:d9:3b:b9:3d:45:dd:06:13:8b:3f:c2:04:e8:ce:
         b0:c9:2c:3f:2a:9c:ca:8d:be:53:1f:3a:92:e5:35:a2:98:f0:
         c9:4a:c8:c0:93:4c:76:7f:af:d3:37:5a:e5:60:91:04:71:dc:
         76:99:f7:97:ac:f5:42:c0:b1:06:74:5e:d1:79:00:33:2e:4d:
         bb:db:89:1c:de:bf:d0:83:b9:67:af:b8:d1:8d:b5:75:26:a3:
         42:30:9c:4c:ea:d6:f3:c6:44:b8:5d:72:d3:99:b4:88:e6:68:
         86:8a:df:38:65:77:3b:a9:d4:2a:2b:6c:b0:a0:92:6f:a7:86:
         2a:59:b1:12:07:68:83:85:41:a1:b6:ce:1b:db:36:a7:dd:10:
         9e:24:af:44:6e:de:3e:3d:14:c6:82:fe:63:16:ea:f7:b7:30:
         5e:50:44:30:ae:cf:a9:e9:01:4a:12:97:68:98:a9:73:ae:7f:
         95:46:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:09:35 2025 by rpki-client