Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa
File:                     afd61a45-4551-3ab1-a3bb-928990ff0f81.roa (raw, json)
Hash identifier:          yJ1+tcWDOCfz9snVxVTNpYpCiCQIRJLpbD8uLoN0fCM=
Subject key identifier:   29:C0:D4:A7:B4:73:04:51:1D:30:02:9C:2D:EF:83:86:8F:BE:21:25
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A0FDD1F4A640AC914545624D0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa
Signing time:             Mon 02 Jun 2025 22:03:25 +0000
ROA not before:           Mon 02 Jun 2025 22:03:25 +0000
ROA not after:            Sun 31 Aug 2025 22:03:25 +0000
asID:                     132892
IP address blocks:        198.41.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0f:dd:1f:4a:64:0a:c9:14:54:56:24:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun  2 22:03:25 2025 GMT
            Not After : Aug 31 22:03:25 2025 GMT
        Subject: CN=d2e61b33-8dd0-4647-b539-ff1e235ffa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:55:b0:61:0a:b7:d5:c9:10:c4:97:ec:20:
                    8b:ad:a3:07:b2:74:57:61:f8:bf:1b:f9:58:ff:18:
                    e2:d2:41:88:e7:83:fa:39:23:d8:80:80:50:26:0d:
                    31:b0:b0:ae:16:65:6c:12:5d:ed:b6:35:16:00:ef:
                    b1:10:c8:5f:2e:c4:82:13:e9:04:6c:93:b0:b8:d9:
                    25:6d:4f:10:c9:cf:c1:7e:77:3a:fb:b2:95:2c:16:
                    18:91:28:a2:21:f3:39:a0:a8:35:81:4e:5d:82:4c:
                    59:be:fb:41:f9:ba:21:8b:d0:d0:6d:e4:29:96:47:
                    bb:9c:c1:fa:8a:c4:dd:7e:a0:87:a4:83:60:26:78:
                    9c:10:81:26:26:6d:e4:24:0a:86:80:f6:6b:e0:54:
                    9b:ce:96:a0:e4:58:32:67:3c:f7:0f:98:7c:43:33:
                    42:bd:b8:44:e6:89:60:92:fd:71:f4:ef:c9:e9:92:
                    9a:af:91:60:f8:b6:1f:d5:d6:ab:57:0e:6f:b8:b0:
                    93:5e:3a:e6:7a:de:7e:2e:89:c6:96:31:7b:8e:64:
                    b4:db:63:5f:6f:b0:c6:6b:67:43:4d:57:9f:ba:79:
                    99:ad:da:59:80:c4:df:b0:70:4b:63:83:2f:54:08:
                    5a:ea:20:fd:ef:f1:c5:b1:2b:a2:47:a4:a9:cd:29:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C0:D4:A7:B4:73:04:51:1D:30:02:9C:2D:EF:83:86:8F:BE:21:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:7e:00:4e:60:ba:a9:58:34:11:7f:bb:8a:92:df:06:ef:e8:
         09:3b:ca:8c:97:ed:66:7c:83:76:8f:d5:f4:a0:60:36:7e:e8:
         70:63:88:b1:df:43:a7:ba:67:15:66:4e:31:26:48:9f:cf:54:
         5f:8e:d4:3e:93:7d:38:df:43:55:63:0c:9c:3a:02:9d:0f:5c:
         3d:44:c0:71:d2:de:aa:d5:8d:15:fd:4a:35:1f:ed:25:09:ee:
         5a:19:ac:91:91:38:6f:ea:a8:d8:a6:0e:eb:fa:70:d9:e5:a9:
         59:b1:9d:05:ce:96:93:46:ff:da:72:ad:c3:33:50:e7:af:9f:
         5e:1d:8b:83:f6:4e:dc:6c:14:96:7e:92:28:2e:a6:1c:0a:64:
         73:77:b4:3a:35:76:84:72:57:b0:ec:7f:5c:de:f1:7d:c7:df:
         73:4b:46:43:f1:1f:04:f4:fc:a3:d5:38:3f:07:12:16:c9:f0:
         03:42:25:e2:2e:73:00:fc:79:68:ef:99:1d:ba:2c:4d:98:38:
         cc:b1:59:92:ec:57:6c:35:40:f8:fb:9f:38:86:4f:b1:2c:ab:
         3e:f4:c3:35:3e:b3:f7:b3:ac:52:1d:98:14:ab:2c:f2:88:96:
         21:84:51:92:bb:81:60:a8:8f:84:90:68:dc:cf:2b:4c:ee:a1:
         bc:49:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:47:21 2025 by rpki-client