Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8e80a925-2486-3f57-9efb-2870ff53ef11.roa
File:                     8e80a925-2486-3f57-9efb-2870ff53ef11.roa (raw, json)
Hash identifier:          c5Nz86Zov0tcKSDlRViQGfaGVZlcId74tNf5Ix4Ptnk=
Subject key identifier:   59:6E:F8:8F:C3:B3:8A:EE:6C:F4:4F:41:F0:92:C0:E9:8A:39:DB:2F
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6C20782413594DA1F400
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8e80a925-2486-3f57-9efb-2870ff53ef11.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        199.195.119.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6c:20:78:24:13:59:4d:a1:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=1a297e2e-e33c-4bab-8fb2-3edb429fe7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:e2:e1:39:1c:45:24:ff:eb:74:5c:24:57:
                    10:1c:01:bb:73:5f:06:5f:7a:3e:4b:49:f9:bd:b4:
                    c7:48:02:ec:3d:ab:22:7f:8b:23:4f:ab:91:74:19:
                    74:8c:03:f3:26:6a:19:79:55:cc:d3:e9:35:1e:60:
                    9e:19:71:4e:fa:95:2e:f8:d6:d9:97:bf:4d:93:6e:
                    a6:16:1d:13:88:62:85:4a:a9:c6:4c:f9:a1:8b:f3:
                    b6:88:f5:3d:90:e9:4a:d8:bd:4f:d3:4b:c2:72:6f:
                    6d:ee:0f:8a:e1:ec:ad:d6:e3:37:32:08:3d:46:df:
                    e9:87:f0:0d:a7:98:84:5c:0c:3a:9d:1a:43:4d:59:
                    84:bc:7d:ba:a4:9d:95:3a:47:ff:3e:dc:40:58:40:
                    d2:f6:02:28:14:c8:08:dc:85:fa:40:80:98:09:32:
                    5d:64:e0:22:e7:c4:95:67:22:58:93:14:a3:1d:97:
                    e2:19:c5:6e:f2:24:b1:91:a1:e0:6d:7c:f0:eb:73:
                    8b:5c:e0:2f:52:fa:f4:c5:b6:f3:33:79:e4:b5:a3:
                    f3:0a:a9:4b:ca:01:fd:69:1f:98:7e:20:fd:e1:99:
                    7f:9a:d0:47:02:99:6b:5a:ab:7f:0d:04:67:8a:4c:
                    61:91:71:f4:8e:95:c3:11:44:76:9b:39:a6:28:ad:
                    fe:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6E:F8:8F:C3:B3:8A:EE:6C:F4:4F:41:F0:92:C0:E9:8A:39:DB:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8e80a925-2486-3f57-9efb-2870ff53ef11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:49:0d:7b:61:5b:88:ac:70:82:70:2a:5c:5d:bb:69:e8:
         ca:9b:c9:a1:3c:e8:7b:b1:e5:10:26:d6:b1:0a:6a:95:fd:72:
         fe:3e:f7:64:02:08:e1:bb:b7:8e:b3:22:12:75:3f:fc:aa:5d:
         13:02:52:98:e6:1d:85:bd:43:f8:3c:5d:33:2e:f2:1e:fd:29:
         06:40:da:a8:1a:44:45:73:cc:3a:5f:7d:61:ae:f3:61:21:1e:
         9e:79:75:52:0f:4e:45:d6:82:78:34:1d:3d:70:75:9b:df:7d:
         f3:d8:8b:b2:60:ae:7f:ce:5b:9b:e2:b9:d8:54:c8:03:fe:21:
         81:ee:0c:fb:12:77:f0:b3:a7:0f:d9:da:3c:c6:10:99:d5:83:
         02:cb:65:f6:bb:27:44:5d:ba:e8:1a:fa:bb:ff:cd:7d:5c:a7:
         dc:bc:44:39:c4:9b:98:af:d1:56:1c:2d:c1:eb:95:77:af:46:
         52:49:74:3d:7a:db:d7:39:bb:c0:86:0a:15:7f:75:e8:2f:35:
         e0:9d:1c:a3:23:a8:39:0b:31:ec:ca:d8:56:6a:5a:85:e6:7f:
         28:cb:a5:29:55:7c:36:80:9d:ba:95:01:cb:92:be:f2:db:99:
         6f:9b:b3:9f:bc:ae:bc:33:fe:41:08:6d:0a:8d:6e:44:76:47:
         3a:8c:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:29:11 2025 by rpki-client