Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
File:                     955a609a-42f8-316d-a938-27d1ede991ad.roa (raw, json)
Hash identifier:          xK9i/JtnjNp71QsuGMhxA0Fxw7IqogtSXm/zyl4D58E=
Subject key identifier:   2D:1D:BE:32:54:A8:93:2F:30:B2:C2:0B:A8:3E:90:67:E2:7A:C9:E5
Certificate issuer:       /CN=4b0cf977-e8ab-492d-bd1d-e7b11385e631
Certificate serial:       010D0C9F43285849A1EF7294A902EC72E296C300
Authority key identifier: 31:2D:BC:40:C8:98:37:68:4D:D7:DF:28:3F:A8:DC:28:EA:73:99:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     3477
IP address blocks:        192.94.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:72:94:a9:02:ec:72:e2:96:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cf977-e8ab-492d-bd1d-e7b11385e631
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=de7124bf-10f7-4d7c-b0f9-859e09e6a710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:50:3a:d1:1f:e5:93:b6:5e:2f:e0:ad:c9:
                    a6:e3:51:c9:55:36:95:25:fb:92:c2:3a:27:47:90:
                    5f:67:c4:58:ac:9d:7b:f6:48:3b:b2:c2:7a:97:15:
                    dc:bf:49:b4:7b:34:18:98:23:df:86:6d:f4:9c:58:
                    79:c3:71:0b:4f:81:d6:43:92:b3:3d:75:c4:59:d3:
                    41:9c:4a:f2:4b:56:be:eb:ce:bb:d5:89:2d:d9:bd:
                    44:9a:b5:7a:75:eb:d9:45:a5:03:47:2c:cf:3a:ec:
                    a4:db:51:65:a3:dd:f5:09:ff:e4:e2:4e:a2:5f:c5:
                    7e:f3:79:f8:c6:f5:16:c6:39:6b:8d:22:c7:78:2f:
                    38:54:05:fa:c9:e1:25:5a:97:2f:8f:a8:2d:c3:df:
                    35:1e:45:44:39:1a:73:00:bd:e2:e4:00:74:8b:8c:
                    92:a0:22:0d:e4:46:37:4f:4b:2a:2f:14:9e:da:30:
                    4a:8a:9f:c8:c5:63:7c:fa:f7:db:f2:9d:a8:25:f4:
                    4b:c9:a9:7a:0e:dc:be:b4:1c:35:23:ce:18:d6:2b:
                    61:41:58:2c:91:26:0e:f4:66:a4:d8:d0:6b:c7:13:
                    ba:2f:dc:0a:07:06:db:6c:4a:87:fb:63:d8:ba:b5:
                    05:a4:1a:92:e4:0f:7a:8c:6e:1a:a4:71:f0:f5:50:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1D:BE:32:54:A8:93:2F:30:B2:C2:0B:A8:3E:90:67:E2:7A:C9:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.crl

            X509v3 Authority Key Identifier:
                keyid:31:2D:BC:40:C8:98:37:68:4D:D7:DF:28:3F:A8:DC:28:EA:73:99:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f6:8d:66:6f:97:01:0c:89:cb:a6:ce:63:35:05:aa:7d:1d:
         86:f0:6e:b4:04:4f:08:18:f3:dd:2c:b9:a3:fa:50:0c:48:91:
         86:16:14:9c:f8:56:51:c5:23:d5:23:38:84:c5:3c:a7:c6:9c:
         19:a4:84:69:d0:f4:da:c1:a7:bf:f7:4c:39:5a:9f:f4:44:8e:
         f1:27:e5:28:08:05:f6:b2:64:ee:42:af:66:45:9c:ef:d0:f2:
         ce:50:f7:53:ff:40:0e:b8:07:61:b9:a7:a0:89:b8:d2:4f:7c:
         77:31:50:d9:c3:20:3d:71:94:7d:45:44:ce:02:0b:0c:b9:75:
         47:e2:9f:28:b2:80:a6:85:ef:a4:bb:44:57:bb:da:40:29:d6:
         e8:d2:4a:f4:1e:b1:8e:e3:c7:37:b4:d4:35:45:b8:42:84:98:
         53:4e:7f:a6:d0:d2:f6:35:d8:00:92:e6:36:65:9d:1f:33:e8:
         ad:9f:7c:a4:d8:70:da:03:9a:4d:dd:84:02:96:7e:ae:4d:65:
         e3:46:d9:48:36:8d:c7:07:13:b8:2e:14:ba:b6:e5:ed:47:a9:
         e9:cc:6a:5a:0b:f8:37:ca:f5:7d:ab:dd:9d:c2:3c:65:83:1a:
         20:af:39:4d:e5:20:b6:b9:fa:8d:85:10:5a:90:4d:cd:a2:97:
         56:1d:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:54:28 2025 by rpki-client