Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/82557685-7b5f-3eb5-a736-6796688e9f9a.roa
File:                     82557685-7b5f-3eb5-a736-6796688e9f9a.roa (raw, json)
Hash identifier:          nLxUeo/8IQfq1mSp1LNYNbBbZ0FgmU5mlAlf54Dxamo=
Subject key identifier:   7F:A9:A7:92:84:5A:F8:A9:97:53:AA:34:76:F9:DF:C0:0D:7E:9E:73
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285849568F3FC53331777A67A99B00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/82557685-7b5f-3eb5-a736-6796688e9f9a.roa
Signing time:             Fri 28 Mar 2025 13:01:58 +0000
ROA not before:           Fri 28 Mar 2025 13:01:58 +0000
ROA not after:            Thu 26 Jun 2025 13:01:58 +0000
asID:                     40010
IP address blocks:        65.124.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:8f:3f:c5:33:31:77:7a:67:a9:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Mar 28 13:01:58 2025 GMT
            Not After : Jun 26 13:01:58 2025 GMT
        Subject: CN=5835fcdb-d72c-44cc-a415-b5a1a0c8d88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:60:a9:44:87:ca:99:67:2c:ea:88:39:6a:
                    bc:97:99:6c:bf:f8:18:53:15:20:a6:13:bc:3e:a9:
                    80:6c:dc:ac:74:4a:4c:4b:b2:09:54:90:2f:c9:88:
                    b8:04:33:09:22:12:fe:c6:1c:3e:30:4d:af:be:d0:
                    81:d4:af:9c:36:e0:bf:3e:49:19:a2:02:c7:67:be:
                    b4:46:29:bc:aa:8d:8c:f4:48:ad:46:f2:87:1d:4b:
                    75:00:d9:67:6f:15:98:dc:fe:50:4b:f4:4c:e1:90:
                    c7:b2:b3:36:00:33:6e:0d:d6:0b:a7:ab:da:a9:f6:
                    e0:4e:3a:95:2d:29:9d:48:5d:ce:bf:25:10:b3:89:
                    c0:1f:e9:e6:8c:9f:9f:6e:b0:b7:51:c7:5f:6b:4f:
                    27:2b:b4:92:7b:e7:25:76:66:25:31:4d:eb:72:79:
                    d0:72:cb:37:d9:8f:db:77:e2:b6:5d:e1:4f:ac:0b:
                    d4:47:e3:c6:04:f8:0b:1c:5b:ad:13:e7:f4:80:fc:
                    f1:69:e4:c9:17:00:cd:f1:9f:4f:0d:de:3e:a2:77:
                    90:68:f8:c9:62:54:05:c5:2b:b5:be:c3:72:4a:5c:
                    67:4c:50:85:69:f3:2a:f4:6d:02:de:4a:67:b0:c2:
                    15:57:04:bd:df:a1:80:53:60:dd:88:9f:2a:39:da:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A9:A7:92:84:5A:F8:A9:97:53:AA:34:76:F9:DF:C0:0D:7E:9E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/82557685-7b5f-3eb5-a736-6796688e9f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.124.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:00:1a:d4:08:eb:85:04:41:c9:d3:07:2c:78:1b:cd:f9:d0:
         1a:96:eb:e0:db:09:41:de:32:a2:19:22:1a:14:6f:ff:57:5d:
         bf:d8:e9:27:a3:de:a7:98:f2:74:4d:a1:b3:93:c2:35:f0:33:
         cc:5f:2f:4c:eb:77:72:a9:78:18:45:a4:5c:11:29:92:f5:62:
         c4:67:42:6a:04:50:3c:8b:e6:31:19:85:bd:95:4e:5e:e7:ce:
         3d:b7:86:e9:57:ee:e6:c4:e5:61:8b:db:31:0d:da:6d:1e:c7:
         1e:16:c0:51:72:52:bf:32:5b:07:6e:24:04:52:01:3e:35:40:
         26:f1:a6:d7:85:9a:57:8a:e6:e4:ac:fd:07:ce:5a:11:96:c3:
         57:a9:c3:84:49:af:88:02:54:85:96:35:31:96:c2:aa:94:80:
         97:bd:6e:b3:19:36:7b:70:a0:a4:c5:ff:5e:fa:42:c6:2d:9f:
         79:f8:97:59:fb:ad:07:41:92:81:12:f5:bf:14:54:77:c3:95:
         ab:88:5b:fd:6e:74:44:83:f7:36:bb:6f:97:5f:d0:81:d2:72:
         34:60:5c:ef:90:93:da:c3:7e:52:c6:93:d7:61:99:d3:97:c4:
         08:67:a7:68:e6:38:1f:52:7e:97:25:c7:3e:eb:b6:40:2d:78:
         79:da:b4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:33 2025 by rpki-client