Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/8ba705ac-13c1-316e-9514-c187d25271b5.roa
File:                     8ba705ac-13c1-316e-9514-c187d25271b5.roa (raw, json)
Hash identifier:          1ioHvZd8dj/iNAZ4mvPMCQTHYI/xNi7TlF16oXVVBX4=
Subject key identifier:   BD:8C:4A:A3:19:6B:9F:ED:3D:5F:9A:21:AA:A3:79:DF:55:79:DA:01
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F4328584A6AF08DFFC063F66B31D747A0
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/8ba705ac-13c1-316e-9514-c187d25271b5.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        150.9.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:8d:ff:c0:63:f6:6b:31:d7:47:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=8b93ee84-7518-472f-88b4-0bf0f533f125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:88:66:75:f9:02:39:3f:63:7f:54:54:5a:
                    08:bf:ed:90:15:9c:02:d9:dc:cd:94:14:eb:c3:47:
                    ee:91:3a:04:f0:e0:b1:d8:d6:ec:74:bd:06:1c:86:
                    dd:88:de:71:c3:1c:13:cc:f8:16:af:b1:25:08:ac:
                    bc:2c:97:7f:14:c4:b5:9b:2a:0b:80:29:eb:d7:a3:
                    72:0c:fc:b3:7d:4c:60:d4:6f:c5:c1:7f:ec:9f:1a:
                    e8:32:cd:02:5b:8d:4a:71:ee:45:93:57:27:09:c2:
                    79:05:05:1c:54:8e:73:28:2d:ef:07:70:dd:bd:a8:
                    fa:bc:0e:e8:82:33:af:63:46:12:56:97:f5:d1:78:
                    5c:c2:e8:17:f6:bb:d5:b8:93:01:08:80:7a:e2:be:
                    e9:05:a3:84:f9:4b:af:f6:f2:71:73:fb:18:04:97:
                    66:85:26:f2:60:36:0d:79:e1:39:62:b9:de:39:51:
                    a7:14:35:77:ff:19:59:e7:6a:0c:a3:ee:7e:bb:3b:
                    59:02:c6:24:1d:a8:38:bf:9a:3e:e0:ca:ba:ea:03:
                    b6:93:dc:fd:69:8c:6c:ea:dd:63:6b:40:69:df:a9:
                    71:30:2b:e6:35:68:a6:21:f0:78:b4:3e:ef:65:2a:
                    38:8e:8b:a1:0e:dd:2d:f6:9c:e9:44:a7:ce:40:e6:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8C:4A:A3:19:6B:9F:ED:3D:5F:9A:21:AA:A3:79:DF:55:79:DA:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/8ba705ac-13c1-316e-9514-c187d25271b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:af:1f:5c:02:ad:bb:d1:59:bd:06:ba:80:ac:0f:85:2b:3a:
         a4:bb:f8:63:b3:49:2e:83:cc:18:67:55:bc:25:61:ec:31:d5:
         e8:20:cd:fe:fb:d0:9c:34:44:ea:98:75:60:ec:f5:a4:b9:43:
         c8:3a:97:a8:6c:0f:7a:5b:3c:b9:1b:97:b9:94:b3:ed:cc:74:
         88:28:f9:f7:63:81:91:5a:00:93:71:ea:3b:bf:24:bb:81:ed:
         b7:33:6c:10:9b:49:d7:bb:76:ba:13:39:2c:45:af:e6:f8:84:
         fb:cf:46:fc:28:10:65:aa:92:ce:23:7b:65:57:03:b4:f9:5b:
         da:d0:95:05:a7:be:f5:8e:0e:b1:a4:89:d1:ec:d2:b1:c6:53:
         57:63:8b:58:37:74:9a:10:5f:d3:45:00:ab:f8:65:9a:fa:e8:
         db:df:40:41:ef:a6:66:21:b2:0f:fe:2b:1c:15:a0:fd:fa:ef:
         e5:9b:5d:5f:66:0b:38:7d:e6:ae:b7:db:ad:e3:4a:cb:05:6f:
         66:0c:af:42:8f:9e:5e:e2:6c:db:33:e7:9f:b4:30:7b:86:4c:
         0d:2b:a6:3b:ae:d2:ae:cc:6f:d9:73:4b:7d:53:47:b6:ee:ee:
         ff:b4:c0:89:f1:27:c1:87:ba:cb:9e:ce:59:98:05:eb:e6:0a:
         43:bc:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:53:36 2025 by rpki-client