Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a616887-6377-3901-921f-0c549851b939.roa
File:                     8a616887-6377-3901-921f-0c549851b939.roa (raw, json)
Hash identifier:          mtXpkaZ1Rwyxc5TvFNhV0phylRezKd62G3xshwMmi88=
Subject key identifier:   A7:3C:9A:2E:57:18:85:13:CC:1E:E9:42:30:2C:AD:4C:F9:A5:5F:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0B969AFED6D4FD9BB2840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a616887-6377-3901-921f-0c549851b939.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        24.12.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:b9:69:af:ed:6d:4f:d9:bb:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=0847d3ef-9c8b-42a0-b26d-5157095ea86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:e6:b3:bc:84:77:58:e2:62:0c:49:f0:9f:
                    a3:f9:5f:e6:7c:b3:e4:fd:61:3c:a3:aa:2a:92:cd:
                    1a:81:f5:29:e5:27:90:e2:e3:fd:b9:3c:1f:b1:1e:
                    38:82:0f:64:18:5f:da:64:0b:c3:91:e6:e8:97:93:
                    67:54:03:df:84:db:83:22:5b:04:bd:0d:62:6e:e9:
                    82:b8:45:d2:a6:c6:3e:ac:b0:36:55:d7:4a:3b:6a:
                    3f:82:72:50:9d:a2:82:e1:7f:31:dd:13:87:d8:cf:
                    ca:a8:73:0f:6a:92:2c:b6:a6:dc:a9:cd:89:9b:16:
                    c4:6c:cc:34:cc:ec:6d:6f:a3:91:0f:1e:14:5b:1f:
                    77:09:b6:32:25:0f:d7:e4:6c:ad:ec:ec:e2:7c:65:
                    94:6e:30:ae:14:b1:a7:60:a4:b8:32:c8:c6:d9:42:
                    00:75:75:43:e6:80:d0:8f:26:5d:ca:94:0e:73:9c:
                    db:e3:3f:43:81:6c:56:e5:89:f3:be:0e:e2:b5:e2:
                    9b:14:11:01:63:00:bf:98:06:44:ff:fa:8f:6f:33:
                    71:7a:05:37:54:0e:ab:b0:77:3f:78:eb:53:02:bd:
                    20:86:e8:9f:39:2e:ec:06:1f:f1:1e:f6:2d:1f:ee:
                    c6:fc:2f:6f:20:fe:6a:e6:cb:ba:66:8c:5a:ff:04:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3C:9A:2E:57:18:85:13:CC:1E:E9:42:30:2C:AD:4C:F9:A5:5F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a616887-6377-3901-921f-0c549851b939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.12.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:be:3c:55:12:fb:ef:1f:3d:b9:3c:36:2d:f6:34:e5:99:fe:
         86:0d:f5:b2:c8:cf:05:ee:79:30:23:90:7f:32:08:80:ec:e5:
         5f:03:06:ae:ee:4a:07:39:10:ae:2c:62:d9:a9:b9:32:51:cc:
         59:30:46:76:0d:a2:73:01:ae:e4:aa:a2:04:75:37:04:dc:49:
         c0:36:3c:a6:7e:f3:9f:75:43:8f:5f:84:f0:a8:89:6a:e7:4a:
         f2:8c:0c:e0:d3:27:11:02:7f:07:36:32:0b:63:f0:c4:26:d5:
         2e:7d:8a:18:13:3d:2d:c7:63:ed:d8:54:8f:a2:55:05:0e:50:
         d3:bc:36:09:54:14:bb:94:29:80:11:2e:87:75:48:08:e9:57:
         c5:42:7a:96:58:d2:ea:0a:59:c3:1b:3f:92:13:e7:81:27:8d:
         c0:59:db:f7:86:8d:0d:db:a1:14:a0:4a:8e:68:a6:84:8b:9f:
         30:11:92:86:e9:bc:c0:d1:a8:33:8b:3a:4a:50:1a:85:ad:1e:
         ec:26:6f:26:fc:63:f9:76:0c:93:19:97:e1:12:ea:d0:6b:2d:
         cd:1f:0a:bb:36:9e:8e:24:0b:f4:b1:96:54:d1:57:0f:b4:67:
         40:3e:7a:f1:3d:a0:b0:07:fd:1e:f8:34:fe:00:4e:a9:e4:85:
         a7:01:73:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:12 2025 by rpki-client