Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
File:                     995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa (raw, json)
Hash identifier:          dLZbjAJD9A0xP4vgSWLhRR7lRCjjkxwKl3dCm4fwAq8=
Subject key identifier:   E1:D0:2C:B8:89:E3:00:12:27:DD:27:1A:93:F2:6C:85:18:0A:05:9B
Certificate issuer:       /CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
Certificate serial:       010D0C9F432858495ABEBF5CCAAD6808BF20C870
Authority key identifier: 6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     60011
IP address blocks:        198.199.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:bf:5c:ca:ad:68:08:bf:20:c8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=916d1935-dfd1-47f4-b620-f5546bbf7a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:76:3e:f5:89:e3:20:55:1a:5b:29:51:d3:
                    85:fc:36:99:40:02:33:d9:b1:1a:9d:4e:60:4c:8c:
                    75:b9:63:33:5f:73:26:a1:29:79:2b:a7:04:27:12:
                    e1:12:9a:ad:46:c6:8c:d1:cd:bc:21:70:01:36:5e:
                    61:2f:a0:08:e4:af:13:7d:75:36:d1:f4:bd:0a:d2:
                    97:e6:63:0a:af:19:3b:77:fa:b1:6f:74:2e:6a:86:
                    03:88:e1:2e:be:8d:98:c5:ea:cb:35:00:e0:72:69:
                    f3:48:bb:af:55:28:9e:9b:25:46:f7:97:f9:92:c3:
                    26:e5:fd:ec:61:fb:32:3e:41:70:3f:80:b3:60:74:
                    45:51:1d:80:35:3f:91:a2:3f:b6:ee:f7:84:61:9d:
                    9c:0c:ec:a0:99:1e:f2:cf:66:43:9a:cd:cb:80:ed:
                    92:eb:b5:0d:75:bd:94:e9:ec:f8:38:57:9f:a6:16:
                    7a:ff:22:32:ad:9b:93:36:bc:89:95:20:ed:a6:99:
                    05:d8:16:3f:cd:47:9c:ed:d4:1d:5e:d2:18:d5:87:
                    be:ab:40:ba:a8:4f:77:44:fe:3c:71:9a:1b:2c:39:
                    6a:ae:0d:d1:a5:7f:35:24:fb:8c:2d:22:b2:75:4b:
                    cd:a5:ab:a7:0d:76:d0:eb:14:44:66:7b:ce:44:32:
                    75:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D0:2C:B8:89:E3:00:12:27:DD:27:1A:93:F2:6C:85:18:0A:05:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl

            X509v3 Authority Key Identifier:
                keyid:6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.199.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fd:71:e5:a9:38:7c:75:d2:73:70:3a:fc:92:56:12:3e:34:
         32:15:0b:6b:ed:d8:95:64:8d:bc:fc:c4:d8:27:e4:56:f2:19:
         6e:ff:84:86:e4:5b:92:6b:de:22:06:25:da:90:85:c8:4d:21:
         81:f4:df:6e:6a:e5:22:f7:63:d4:95:c3:76:bd:44:fc:28:4a:
         e7:5c:da:89:b3:eb:6a:56:35:00:a5:89:c3:18:89:05:47:21:
         71:f7:43:9e:9a:7d:15:cf:22:8a:93:da:02:22:b5:01:c9:df:
         04:e0:92:e8:1c:b4:5c:77:b4:4b:c8:a2:4d:44:17:19:d1:ca:
         93:dd:ad:7d:07:65:9a:78:63:c8:19:91:95:a5:42:99:e3:80:
         0b:98:31:5f:d9:62:0b:4d:c3:61:b7:93:77:cc:52:4b:78:30:
         87:77:3a:57:a8:17:30:bc:28:9e:1f:d8:c2:a6:0d:e9:fa:fe:
         d8:6e:5f:f4:0d:67:da:55:7d:f6:76:17:fb:22:2f:3f:7c:9d:
         48:1b:cb:72:25:25:30:52:8d:83:e0:da:fa:07:56:bf:d9:37:
         8a:46:73:39:f5:69:d8:bb:cb:c4:54:1e:81:4b:3d:63:d7:a8:
         b4:26:11:75:4e:79:e0:8d:3b:f4:35:a0:7e:1a:e6:ed:13:61:
         48:0d:67:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:09 2025 by rpki-client