Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/44ed0453-6336-3500-9d30-9fe74a5024ab.roa
File:                     44ed0453-6336-3500-9d30-9fe74a5024ab.roa (raw, json)
Hash identifier:          0Gh64ymDSTzW2CiObOEIJOpqerPWQy41P5oH0ziFTFw=
Subject key identifier:   44:E4:AB:E8:3E:4E:01:CD:DF:67:99:E4:42:D2:5D:D4:18:07:40:55
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A0C9A9EAB4F4FCD375480
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/44ed0453-6336-3500-9d30-9fe74a5024ab.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11537
IP address blocks:        198.71.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:0c:9a:9e:ab:4f:4f:cd:37:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=67d24f88-19e8-4e77-a948-75879f716c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:0f:33:63:f4:5c:f6:7f:f0:8e:5c:a4:2b:
                    54:13:f1:64:b2:91:ae:bb:65:32:52:13:fe:77:6c:
                    0b:b1:0f:cc:3f:b9:47:a6:ad:51:01:43:5a:36:8f:
                    7c:3a:95:dc:15:7f:b6:b8:3c:70:42:2a:8b:0c:9a:
                    f7:12:d1:8a:28:7a:60:dc:0c:05:40:dd:2e:a4:97:
                    c9:a5:42:b4:78:5e:0e:2d:6a:55:d0:2c:eb:0b:e3:
                    07:c6:24:8a:62:4a:bd:e4:02:be:83:84:95:98:9e:
                    50:81:5d:32:5c:ea:0b:f6:d0:20:ae:38:ea:df:a4:
                    48:92:21:7f:5a:25:ac:b0:a7:a2:81:1c:61:68:1a:
                    c5:c6:76:ba:5a:40:aa:15:39:43:de:05:40:66:52:
                    d8:f4:c8:19:8f:8b:62:a1:2a:87:77:a2:e6:6e:53:
                    69:0a:42:9d:4e:4d:f2:33:2b:39:2a:24:04:c8:e3:
                    40:72:2c:69:ff:e6:6d:e2:6a:c0:fc:9f:04:26:6b:
                    86:1b:87:bd:79:ea:a6:b5:3b:66:21:29:f6:77:e7:
                    96:c3:98:6f:07:83:86:b7:9f:38:0c:68:92:86:ba:
                    5e:50:5b:72:61:3b:f1:8b:ee:82:04:64:c0:a7:9d:
                    11:13:63:5c:f4:2e:31:10:7a:85:b2:fd:69:5d:f6:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E4:AB:E8:3E:4E:01:CD:DF:67:99:E4:42:D2:5D:D4:18:07:40:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/44ed0453-6336-3500-9d30-9fe74a5024ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.71.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:5d:87:ad:5e:d9:c7:9d:83:c4:fe:cf:f0:9d:9f:dc:fc:
         0f:b5:da:cf:0d:63:78:92:7a:f7:13:f0:32:ec:26:13:7a:ca:
         4d:33:d0:03:74:44:4f:a5:1e:ff:b8:7f:9b:be:5b:09:14:9a:
         5a:c3:46:f8:5d:10:f3:be:6a:3e:34:28:4e:df:2b:d4:85:78:
         f0:cf:0a:e5:58:e7:4f:e5:05:0e:6e:89:17:f3:c4:ae:e3:70:
         c3:cb:54:c5:ca:da:e6:c6:5e:9c:5e:26:b8:2a:f0:25:27:bd:
         e3:fd:1e:63:a2:ec:6e:07:eb:e0:b0:d2:56:e0:39:c1:29:96:
         9e:ed:0c:5b:c7:51:a3:20:08:33:22:83:b7:4f:12:a3:f2:f8:
         63:b6:a0:08:c6:ed:3a:7f:47:52:c4:b1:cf:c8:95:cd:ed:49:
         1e:e6:2f:1a:f7:86:dc:54:08:61:e3:8c:73:bd:0f:f7:47:4e:
         65:b6:c3:12:dd:1c:6c:89:95:8c:f1:6b:59:15:c2:03:43:c1:
         b8:00:c4:c6:fa:dc:2a:b3:10:4e:a8:2a:4c:dc:44:23:32:be:
         97:9d:fc:41:bc:af:ac:24:0f:78:56:bf:c8:06:bf:c5:06:1a:
         ba:f7:a0:88:38:85:c3:8f:fb:45:66:35:de:71:a9:df:6a:08:
         35:25:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:20:37 2025 by rpki-client