Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12ed685d-5741-31ef-b9bb-d918a7762c00.roa
File:                     12ed685d-5741-31ef-b9bb-d918a7762c00.roa (raw, json)
Hash identifier:          UoSImu/9dsWk8v+d7iQkv9jbWTmzukdG+KE5qH/F0bc=
Subject key identifier:   1B:F9:82:41:3E:55:CC:60:64:53:48:D2:0A:97:C2:31:A8:E8:B1:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF759B353077E13223F68BD7
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12ed685d-5741-31ef-b9bb-d918a7762c00.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        24.99.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:9b:35:30:77:e1:32:23:f6:8b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=0751a55b-c052-44a2-a853-64c1aa419fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:33:ab:c5:6a:79:0f:2b:a5:35:27:e2:f4:
                    36:b6:92:ed:46:e9:1b:62:b4:3f:4c:61:e5:09:82:
                    1f:b5:ca:a0:d5:4b:d8:c4:61:44:3a:22:7b:57:ff:
                    f5:30:ea:86:47:88:28:b2:e6:8a:dc:62:13:9f:29:
                    83:f5:58:66:0f:b1:6b:f6:e0:41:e0:f4:9a:4b:ce:
                    16:ac:1c:b0:47:f6:ef:32:99:bc:a1:0f:ff:c1:51:
                    b1:cb:f9:3d:18:52:fa:d7:d2:7d:9c:ad:2b:8f:1c:
                    06:17:42:90:cd:46:c4:97:6b:6d:5f:4e:a0:bc:6e:
                    2e:1b:50:da:6f:48:9b:e9:7f:e5:19:3f:bf:45:2c:
                    f9:d7:b6:12:11:49:cd:ac:55:2b:93:92:b9:a6:7c:
                    29:20:24:aa:ce:8a:78:2d:06:f0:5a:7a:ef:63:ce:
                    91:c8:44:e1:c3:a2:cd:69:5b:25:18:b1:4f:35:e2:
                    f0:2d:42:fa:f5:e7:47:d1:83:4c:b0:7c:dd:10:cb:
                    82:a8:7f:e1:55:b2:e0:dd:05:c5:48:44:bc:18:3f:
                    a6:fd:d6:61:a0:e4:03:0c:ff:64:76:64:f7:cb:07:
                    22:ae:c8:d1:9c:2b:0c:0d:d7:6b:9d:76:ee:97:42:
                    a3:2d:fc:ba:8e:db:f7:f2:2d:7d:d0:ef:9c:43:bf:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F9:82:41:3E:55:CC:60:64:53:48:D2:0A:97:C2:31:A8:E8:B1:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12ed685d-5741-31ef-b9bb-d918a7762c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:84:ab:89:1e:95:f0:26:db:ae:ab:a2:8f:ab:15:d9:4d:b6:
         52:c6:d6:12:94:30:ee:49:3f:9e:dc:ad:6f:6a:c2:af:c1:b0:
         96:12:a6:b5:25:d4:ed:40:5e:30:bf:ae:e2:26:b6:5e:32:54:
         6c:b6:32:5b:57:d8:43:03:b2:a3:24:8c:04:9b:65:a0:28:3f:
         6a:25:4b:50:2f:11:97:9a:1e:12:95:93:e3:46:40:84:1f:16:
         9a:cd:1b:8b:d3:55:9e:d8:c1:a6:0e:be:23:38:bc:e2:a3:88:
         65:0d:42:2c:51:6e:f0:a3:ce:19:3d:b5:9b:b3:30:06:c3:3d:
         c9:60:8b:d2:d5:84:6b:2f:fb:c9:9e:cb:41:5c:19:45:56:f0:
         3c:85:1f:df:9f:65:5d:23:b5:30:38:01:6c:dd:e0:ea:f6:7b:
         87:bd:27:c7:11:a7:d8:83:3e:f6:15:a4:b5:06:7b:b6:4b:d5:
         01:04:6d:90:70:18:d8:5f:15:14:12:1a:4e:98:03:d1:a4:19:
         4d:80:2d:0f:dc:be:09:0f:c2:a1:cc:77:4f:dc:3f:11:95:e9:
         b8:e5:65:d8:f0:5a:9d:5f:56:9c:52:c6:51:df:eb:95:ed:17:
         69:69:55:df:a9:3e:15:77:74:8e:64:2e:d3:2b:1e:83:36:51:
         c9:b9:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:11:07 2025 by rpki-client