Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa
File:                     cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa (raw, json)
Hash identifier:          ojHkv189ntPwUSZssr4hNSu2qFzDGoOK3jSeGs3Wj4s=
Subject key identifier:   15:E9:19:FA:D8:50:AD:76:24:0D:24:FE:CB:70:73:0F:74:87:24:D9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A8B0B5AC7DFBEB891441F1880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     64267
IP address blocks:        149.20.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:5a:c7:df:be:b8:91:44:1f:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=86eecb9d-ba8b-45eb-bb04-6277037ef3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:12:b6:ad:7e:71:50:10:6b:97:18:0a:f9:
                    60:e1:5c:68:8f:0b:14:c3:9e:21:b6:fd:9c:f1:b4:
                    85:9b:1a:0b:91:29:20:15:0f:4e:97:43:1d:16:7d:
                    03:ca:f0:d8:d4:5c:41:12:69:f6:e6:74:0f:c9:68:
                    f2:17:79:1a:06:d5:43:dc:33:db:6d:a2:9c:ac:6b:
                    0e:d7:74:fd:00:0d:5b:2e:13:8c:47:32:05:16:1c:
                    7e:fc:1d:9a:fd:9e:e6:a9:d7:80:4b:9a:17:dd:23:
                    eb:48:1a:d3:2c:55:61:86:35:2c:18:25:93:20:a5:
                    d8:18:2f:1e:55:5a:97:f8:92:af:ee:0c:f3:30:d8:
                    72:df:fa:07:72:a6:9a:38:8c:99:af:77:22:de:46:
                    7b:be:5d:7d:08:a5:a5:7f:81:11:9d:44:1c:2d:da:
                    24:5d:db:2e:c3:9a:3e:2a:56:60:1b:92:04:3d:5e:
                    f6:ea:97:ab:2a:4a:2e:91:c2:95:65:1c:fd:06:df:
                    5e:53:2f:9a:10:a2:d5:3f:79:43:d1:9a:fc:29:ad:
                    5c:9c:b5:64:fe:80:d6:3d:18:10:e2:d6:6f:61:ce:
                    d3:45:b4:7c:90:ca:93:a0:9a:e9:59:9c:8e:df:d3:
                    8e:19:67:38:66:75:f0:52:ef:8f:cb:5c:ad:cf:98:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E9:19:FA:D8:50:AD:76:24:0D:24:FE:CB:70:73:0F:74:87:24:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1c:89:d7:0c:65:8e:52:fb:4b:fb:80:3e:ec:3a:7c:4d:1e:
         7d:39:7b:f9:b5:01:ca:c1:b9:61:1f:20:66:4d:53:a1:36:72:
         61:a7:0c:5b:29:10:18:b4:f8:ad:ae:33:33:ed:58:ef:2c:e8:
         fe:e3:7c:42:5f:69:de:a0:08:12:c1:b1:d6:d7:5a:5f:5e:91:
         c4:53:22:4f:8a:a4:33:1e:d7:0d:3a:00:62:19:e6:c2:27:22:
         c7:9c:47:b2:1f:7b:9f:ae:af:5e:a8:0e:a3:d7:3a:9e:b1:18:
         de:10:95:04:ea:22:72:66:7a:a9:87:65:6c:7a:02:d9:d0:5b:
         16:aa:68:e8:57:6a:cb:00:5a:b5:01:35:50:24:ad:ac:98:7d:
         4a:5c:98:d3:84:54:1d:ce:53:be:c7:18:0e:8d:36:81:80:bc:
         c6:e2:32:de:12:e4:c9:ed:19:7b:64:db:18:74:53:56:3c:de:
         a7:00:e0:59:f1:c6:b4:43:9c:19:b3:1c:44:c7:bf:e6:53:a2:
         b2:40:12:8e:d7:5c:8b:5e:77:e6:83:b3:69:29:b7:b2:85:2c:
         6b:ab:cb:9c:c8:f1:16:a5:54:39:6d:1a:1c:50:d5:b7:6b:d0:
         46:4d:39:5d:4f:55:aa:21:8d:04:ae:e5:25:c8:ce:fa:c2:0c:
         28:c8:8a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:24:13 2025 by rpki-client