Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa
File:                     0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa (raw, json)
Hash identifier:          jcHBDji2LWDOQRCTqSxHWs+7Lb5U/cGY1cRnMPA5Z/U=
Subject key identifier:   0B:BE:90:20:41:BB:08:47:29:A2:5F:99:E3:81:B8:6F:8A:77:85:94
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD2DC780D71AB27A9A000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        172.64.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d2:dc:78:0d:71:ab:27:a9:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=fedf67c9-f3b2-4e6e-9db9-609435cdcf1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:92:37:b9:44:ce:45:01:87:34:24:b9:8e:
                    ba:46:f4:e4:9d:f5:ab:7c:29:2e:db:32:d2:31:25:
                    e3:5a:c7:48:e2:3c:ec:93:bd:23:20:36:52:0f:cf:
                    a0:99:84:5e:2f:2c:44:ec:80:93:cb:97:75:02:22:
                    9a:c1:36:90:14:11:f4:bb:a9:ff:b2:e5:b4:af:7c:
                    7c:bd:86:5d:3d:93:d3:14:04:4e:1f:be:af:6e:a5:
                    b1:91:60:1b:65:0b:6f:a0:3b:e0:e1:16:78:71:b2:
                    ae:dd:91:b3:6b:7e:25:1b:f3:5c:89:fb:bc:07:b4:
                    0a:25:0e:f4:99:b7:c4:9f:ae:0d:4e:77:2c:1e:87:
                    da:fe:c1:03:96:ed:dd:62:f6:bd:4a:ff:b4:6b:d0:
                    20:fa:88:dd:13:d5:cf:c5:f9:b4:49:28:ae:6f:7d:
                    30:27:33:75:fe:a6:1d:df:7f:d7:40:25:33:dd:cb:
                    e9:24:b1:b7:32:a8:40:3a:14:4e:d7:75:37:05:84:
                    1e:f1:8a:bf:21:7e:2d:ad:23:8f:13:f2:1a:8f:28:
                    fe:36:49:9a:77:11:4e:ae:82:9e:bc:74:26:7c:23:
                    d5:f0:51:25:c4:5b:2d:14:2a:6f:17:ab:8a:57:87:
                    f6:ce:88:89:ce:6e:e8:c8:f6:d2:ec:06:6d:c6:5e:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:90:20:41:BB:08:47:29:A2:5F:99:E3:81:B8:6F:8A:77:85:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:20:b4:51:75:43:f3:20:79:cc:b3:ad:1a:b4:81:10:e6:8c:
         55:53:f7:bb:f0:d5:00:30:4c:6f:7c:3e:f3:8d:3c:36:9b:81:
         d1:a2:24:fe:3d:76:bc:d0:79:ee:08:70:db:37:69:5c:0d:96:
         60:85:04:10:fc:e4:fa:fb:23:7d:f6:8b:44:b0:7b:3f:ab:4f:
         00:d2:68:0a:12:5f:a1:94:e1:45:11:98:c9:2f:f2:69:93:94:
         d9:e4:d8:2f:b1:02:8f:b2:b0:33:de:2a:74:05:8a:06:56:46:
         d1:cc:0a:af:2d:bb:8d:21:08:b4:90:21:e4:55:98:07:b7:36:
         96:f1:a6:bf:ff:6b:33:2c:2f:27:b9:cc:e5:80:e6:d6:7f:ae:
         df:29:15:05:8e:8c:61:bb:b0:ae:99:b7:7b:37:6d:88:af:4b:
         4c:f3:1b:73:80:5a:97:ff:a1:9e:f5:87:ea:61:9f:ed:4d:4b:
         74:10:c1:58:0e:a7:1b:7e:49:b7:fe:4b:50:ca:93:88:47:bd:
         9f:cb:fc:ec:1f:80:44:ff:e4:72:e5:e9:5d:1d:4c:ed:02:ed:
         93:14:03:c2:75:3b:33:91:a2:54:0e:30:2c:81:26:44:38:d1:
         35:38:1f:5e:9c:92:21:8c:2e:a4:5c:c8:9b:d2:a2:ab:09:31:
         1d:15:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:31:30 2025 by rpki-client