Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/80de212f-d67c-35b7-91e1-6a07e2aa5221.roa
File:                     80de212f-d67c-35b7-91e1-6a07e2aa5221.roa (raw, json)
Hash identifier:          xYnngfu8W4fPiQwWjOWf2sXY39dLD/WScU+IrVs+USk=
Subject key identifier:   78:79:9D:3E:0D:A0:81:F0:3B:2E:8C:B7:DC:4F:A0:FD:D0:6A:09:A5
Certificate issuer:       /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial:       010D0C9F43285849BC74AED9F3F21CA5230FF500
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/80de212f-d67c-35b7-91e1-6a07e2aa5221.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     397913
IP address blocks:        192.147.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ae:d9:f3:f2:1c:a5:23:0f:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=dba5d8a2-518c-4194-aefc-0e14cf865b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:f8:93:4a:55:3b:a3:8a:f9:b8:72:ea:f0:
                    c8:43:b6:f7:da:f1:d5:9b:f3:4c:83:2a:45:88:4b:
                    9f:cc:45:4e:48:92:59:79:33:b0:fd:13:3b:90:36:
                    15:19:5f:5f:77:22:99:98:f9:0b:6f:87:13:c9:1c:
                    54:8e:8c:36:fd:9b:49:9b:66:c6:8e:60:8b:ce:42:
                    03:ee:26:fc:33:bf:40:33:82:20:0d:fe:ed:08:6c:
                    5c:f0:04:06:de:3a:e0:d4:3a:e3:f1:4e:1d:e6:3d:
                    8f:8d:2e:e6:05:62:f2:7c:92:0d:0c:d7:3b:77:06:
                    aa:7c:8c:c4:31:c4:38:1b:ef:62:60:2e:e1:33:ec:
                    d1:39:06:99:5a:61:65:ae:7f:32:df:2e:95:03:32:
                    e2:7a:b1:ac:be:5f:34:5c:1e:c8:30:e2:12:c1:c2:
                    de:e7:ee:7a:e3:fd:ed:90:a1:e6:44:a2:d2:28:45:
                    37:b7:a5:ec:1f:61:c4:e0:d1:fb:73:84:6f:d6:93:
                    95:10:95:4e:26:54:63:9b:7f:36:9d:7d:46:d0:bd:
                    1a:29:7c:22:58:0b:3e:0e:63:e5:3f:76:6f:00:e4:
                    d6:f3:85:e2:95:2f:fd:da:09:c7:fa:2a:d2:42:be:
                    33:6f:76:b9:11:45:88:ca:0b:c0:6c:58:ac:3d:eb:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:79:9D:3E:0D:A0:81:F0:3B:2E:8C:B7:DC:4F:A0:FD:D0:6A:09:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/80de212f-d67c-35b7-91e1-6a07e2aa5221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl

            X509v3 Authority Key Identifier:
                keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.147.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:10:13:5d:c6:f2:b7:d1:28:f3:5f:8c:bb:e1:9d:db:d8:ae:
         cb:d2:7a:c1:dd:99:34:65:c6:57:4a:bf:bd:5d:38:4b:4f:38:
         3b:c0:82:95:7a:12:5f:33:ce:8f:1a:ad:29:7d:e9:5b:6d:60:
         27:88:21:3e:2e:15:7f:b3:fc:34:66:94:36:d2:bc:1b:aa:7b:
         10:4f:30:20:c6:df:c5:6b:8c:fd:8e:47:aa:82:79:e7:fd:a8:
         09:04:9e:cd:05:e3:54:25:de:fe:b1:c9:73:6a:66:06:9e:fc:
         9d:94:c7:04:ca:24:ad:8f:b2:d8:3e:ea:60:55:ee:40:46:a5:
         06:13:0c:e2:00:b1:57:24:0d:98:49:01:a3:f4:ce:06:af:8e:
         23:77:f3:de:f9:20:6d:e2:52:04:d5:b8:55:5e:7e:f1:b3:1f:
         f0:22:f7:6d:20:e3:45:b5:e0:0d:5c:8b:88:f5:92:eb:31:21:
         c3:92:d8:89:14:c8:e5:c9:b4:5f:7e:b9:cb:ff:48:7f:4d:74:
         48:16:8f:0c:ae:a0:c9:92:3a:69:b9:47:f5:68:56:7b:fa:da:
         c0:90:b5:a3:25:a1:f2:5d:9d:ce:5f:40:e9:b0:6c:48:07:a7:
         35:66:4d:9c:66:df:c4:35:47:76:31:e5:aa:f7:32:3b:18:2d:
         2e:94:43:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:35:15 2025 by rpki-client