Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/432232b8-2424-32a0-af2c-2bea4e98ad81.roa
File:                     432232b8-2424-32a0-af2c-2bea4e98ad81.roa (raw, json)
Hash identifier:          v/LYcpU9KijBaO1pdCjyNM/fRr7Uzd4tUsUtoCJOB1U=
Subject key identifier:   42:1F:49:A5:C6:BF:96:2C:89:00:FE:2E:F4:B1:B6:B5:79:4F:9E:0C
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584A8C70CED66F2E5A45B22BCD80
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/432232b8-2424-32a0-af2c-2bea4e98ad81.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     393262
IP address blocks:        150.252.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:ce:d6:6f:2e:5a:45:b2:2b:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=3e9f6f73-5a98-4a84-b0bd-ef2638532d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c0:aa:20:de:28:e9:9d:95:7e:67:40:f6:1f:
                    0d:78:6e:e6:aa:33:78:1e:e5:95:b4:04:fe:49:7c:
                    e8:f7:04:69:fd:c9:5d:8f:96:f4:b8:30:c2:7b:1c:
                    7a:15:47:7e:26:08:bf:fd:10:3c:b8:2e:06:93:4f:
                    14:44:73:d5:a4:65:41:0a:97:46:45:91:f3:ca:b6:
                    68:65:ca:79:9b:10:68:74:75:e1:8a:25:fb:47:e1:
                    d2:53:51:ec:5c:78:89:c4:bd:04:65:fb:38:a0:86:
                    24:19:2b:b4:05:65:7e:17:49:0a:63:ff:a0:1d:d5:
                    c0:af:95:24:96:b6:11:3d:37:88:39:83:a7:0c:db:
                    ba:44:e9:90:c1:42:33:f7:68:37:da:8d:1a:af:5b:
                    30:2b:3d:c6:e1:bd:82:9f:73:a8:6b:03:85:46:16:
                    3a:1a:ea:d1:2d:c2:c5:20:6a:f9:23:20:99:47:2b:
                    8d:a3:b5:0a:ec:6d:42:6f:44:f1:f2:9d:8e:25:fd:
                    b8:b3:38:b0:a8:85:a1:76:45:ea:b7:c9:9a:35:a7:
                    cf:21:47:50:e7:64:45:81:8c:ef:0e:d0:9a:df:68:
                    98:cf:74:9a:89:34:17:af:f9:1b:05:dd:c2:0c:d7:
                    81:ab:b0:e0:a3:ac:be:2a:12:3a:01:40:31:5c:c6:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1F:49:A5:C6:BF:96:2C:89:00:FE:2E:F4:B1:B6:B5:79:4F:9E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/432232b8-2424-32a0-af2c-2bea4e98ad81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:78:4b:d1:ad:55:74:66:7e:21:60:de:1c:12:6a:35:0a:fd:
         49:35:f2:76:45:09:ee:ed:0a:2a:94:48:01:2a:66:00:96:ef:
         7a:9c:30:4c:2a:66:22:f4:57:1a:a4:b1:03:8b:b2:9c:a4:21:
         f8:c1:71:79:25:26:16:c7:e7:d1:85:07:51:66:b8:02:be:ec:
         8c:67:c5:6a:d0:9b:bc:e4:eb:38:df:6f:52:36:ec:f1:aa:0e:
         07:60:07:c0:a1:0a:84:48:e9:75:d7:26:14:01:e1:80:f5:d9:
         c7:bf:43:c9:d3:74:d9:3a:3b:ad:b1:d2:c8:f0:04:f8:0b:69:
         4d:f7:86:2f:ae:7a:42:d9:7a:10:5e:11:12:c6:fa:cf:47:c6:
         4b:9e:d5:05:06:40:83:c6:ae:7b:f2:5f:6a:93:23:10:7f:4f:
         0d:20:e6:96:87:64:f0:51:00:fa:6c:35:09:d6:cc:83:09:82:
         1a:f9:12:0f:78:c1:60:7f:e5:db:e5:89:38:52:b1:10:5e:b0:
         09:4b:f4:8e:c5:ec:e8:13:f8:28:d6:04:b9:ec:c5:ed:ca:dc:
         59:f4:bb:d2:12:21:c5:db:69:ac:74:11:ec:f6:44:9e:c8:a4:
         e5:97:af:80:e4:1f:dd:a9:05:ee:be:4b:8e:89:da:3d:73:73:
         c8:0c:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:23 2025 by rpki-client