Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a6094a-4a11-3c96-aa72-c52957b7b244.roa
File:                     85a6094a-4a11-3c96-aa72-c52957b7b244.roa (raw, json)
Hash identifier:          ucDUADz/qBrmL/C5yg9iDIGlWav7s29a2a5sfIwxaEo=
Subject key identifier:   95:D7:A2:D4:39:04:E8:72:12:1A:13:59:F7:6F:2B:F6:A3:5D:C1:AD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F71534B98AA917EB74CFA800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a6094a-4a11-3c96-aa72-c52957b7b244.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     395747
IP address blocks:        198.41.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:34:b9:8a:a9:17:eb:74:cf:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=042f2044-0052-4144-b3b3-d495a8858532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:b6:1e:5a:60:82:ba:1f:df:ac:31:83:e3:
                    72:4d:31:aa:f9:77:84:d2:45:ff:a0:ff:db:27:a7:
                    be:7c:60:db:78:e0:4c:5c:b3:71:87:7c:e8:aa:b6:
                    8a:5e:18:f1:c7:90:17:8d:56:0e:c3:51:b6:ff:3e:
                    d4:3f:d5:e5:b6:c2:83:19:b5:c9:2d:de:97:2c:ee:
                    16:45:7c:5c:6d:35:13:3d:66:be:77:7a:92:0b:43:
                    10:75:59:20:21:02:ad:35:44:87:dc:48:79:06:72:
                    6e:9d:c4:a2:f5:68:1a:f1:84:71:3b:fd:8b:6e:08:
                    e2:64:57:4d:54:e1:e1:c7:6b:86:6e:24:78:ff:52:
                    39:18:33:c1:bc:2f:ef:f9:b9:17:33:c7:17:6e:1f:
                    20:e2:f4:0d:84:1e:ce:25:5f:ed:db:76:7a:57:96:
                    62:fa:b6:17:6b:36:7e:c3:fa:fd:7e:2f:47:a6:31:
                    a8:60:4c:8c:7b:17:e1:52:1e:58:22:bd:49:f8:b3:
                    82:a8:41:fa:52:ee:1f:c4:d5:1e:d9:71:dc:78:be:
                    4d:48:2c:ce:26:c7:29:bb:51:89:17:72:da:40:c4:
                    b6:33:06:4e:e1:1e:d1:30:b3:8e:f1:22:b8:a6:16:
                    15:06:0d:31:e4:5e:fc:81:b8:6c:01:1c:0c:46:38:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D7:A2:D4:39:04:E8:72:12:1A:13:59:F7:6F:2B:F6:A3:5D:C1:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a6094a-4a11-3c96-aa72-c52957b7b244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f2:05:a2:93:88:32:a8:09:09:20:14:d3:6b:55:9e:f0:4d:
         23:5c:18:58:7f:c5:94:db:42:17:2d:78:6f:71:d8:64:3b:ff:
         c0:2a:43:b4:cc:5b:84:81:56:c1:9b:18:01:52:9f:20:0d:da:
         0e:b2:0c:e8:13:2f:e4:06:5e:bd:3e:12:f4:d9:5a:db:ee:74:
         06:c3:e9:f8:73:9c:33:ba:e5:be:64:f7:42:4e:aa:b7:9f:f4:
         19:e9:84:a8:ba:6f:d0:ec:24:db:c4:25:ad:e5:cd:99:e7:f1:
         12:54:bd:85:c0:2c:52:7d:e8:0f:f1:35:e5:fc:19:d3:09:e4:
         f4:3e:24:98:4b:35:be:14:e7:f1:51:e6:8e:02:e8:3d:b3:7e:
         a9:2b:8f:fe:d6:ee:34:e3:ee:0f:e1:00:f4:19:0e:94:af:7f:
         1e:44:7c:8f:7b:a5:d9:d5:85:03:94:47:99:f4:f6:b7:2e:4d:
         2d:a9:76:1e:b9:23:92:a8:87:6b:aa:48:b7:b0:ca:35:56:61:
         40:ed:45:25:21:ff:af:35:6f:3a:50:0e:28:22:ec:6c:15:73:
         29:49:03:1e:fa:a8:5b:7b:ef:3a:fe:c5:c9:9d:2a:97:85:b8:
         9a:35:44:ff:2a:d6:19:37:4e:90:bc:48:0f:3a:9c:35:09:b5:
         f0:fc:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:54:43 2025 by rpki-client