Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/61e047c0-059e-39d0-8a9c-aa85bb357fd0.roa
File:                     61e047c0-059e-39d0-8a9c-aa85bb357fd0.roa (raw, json)
Hash identifier:          z7XrfFSYLPUNcpzobB8nOpmOn/FSoPbrlN6wLRFjhhY=
Subject key identifier:   C3:BC:72:70:4F:F6:C1:5D:F3:AF:38:C1:D9:49:0D:FF:0E:DC:82:8C
Certificate issuer:       /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial:       010D0C9F432858492D98C0D277DA1C49E4980F30
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/61e047c0-059e-39d0-8a9c-aa85bb357fd0.roa
Signing time:             Thu 13 Mar 2025 20:52:59 +0000
ROA not before:           Thu 13 Mar 2025 20:52:59 +0000
ROA not after:            Wed 11 Jun 2025 20:52:59 +0000
asID:                     54651
IP address blocks:        149.117.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Mar 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2d:98:c0:d2:77:da:1c:49:e4:98:0f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
        Validity
            Not Before: Mar 13 20:52:59 2025 GMT
            Not After : Jun 11 20:52:59 2025 GMT
        Subject: CN=49f9069f-2394-4ba7-b763-79beb9c5e87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:00:98:a2:00:cc:79:66:e8:10:b1:1d:7f:
                    a2:09:64:80:bd:ef:f3:10:bf:33:eb:af:0b:47:1e:
                    48:cb:a9:d0:08:00:22:db:3b:04:05:3f:54:02:27:
                    c4:43:2e:37:96:68:a8:f6:d8:d5:a6:15:a9:64:1e:
                    fb:bf:f6:fb:a0:36:9f:91:86:9a:bc:33:ed:da:b6:
                    c7:3f:0d:71:c4:cc:e5:fd:57:53:47:62:bb:e7:75:
                    de:80:1e:e9:7c:81:66:3f:42:bd:d6:23:1b:3e:3e:
                    bb:49:7b:db:27:be:3e:8c:bd:e3:85:eb:f8:1f:9c:
                    b0:21:a8:90:ba:07:cf:d8:bb:38:63:1a:97:b6:84:
                    c8:b2:f4:5c:5c:9e:ba:3e:cf:c4:f4:91:52:e1:6d:
                    80:08:1b:dc:17:7b:f6:81:9c:66:ed:e0:47:f9:cf:
                    26:ac:a0:a9:cd:60:51:6b:53:d7:c4:04:11:a8:d6:
                    6f:ed:d3:73:c3:8d:3e:ea:d6:48:d6:84:f0:c6:c2:
                    d4:05:93:30:bf:f2:46:9d:9b:31:62:d4:37:3d:07:
                    6c:09:c4:3b:83:b9:02:b6:57:14:1c:e8:94:c3:23:
                    9a:ac:bf:d1:15:2e:d3:50:fe:d8:b5:2f:f7:09:db:
                    25:d0:8c:e1:5a:a1:e2:d6:35:a7:96:16:25:4e:07:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BC:72:70:4F:F6:C1:5D:F3:AF:38:C1:D9:49:0D:FF:0E:DC:82:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/61e047c0-059e-39d0-8a9c-aa85bb357fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl

            X509v3 Authority Key Identifier:
                keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.117.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:07:40:0a:0f:fe:f5:84:ae:a1:f6:8c:91:9c:a0:e1:87:
         06:a6:89:53:16:c8:6c:6c:72:25:a3:42:36:89:cb:db:99:d6:
         ee:b8:5a:ea:4b:96:a8:3d:08:ef:83:10:78:91:b6:fb:0d:cf:
         21:4f:9d:b7:55:2c:90:c4:ff:bd:7e:e2:2b:b2:39:5d:9a:21:
         de:aa:69:78:cb:a3:7d:a4:eb:a5:f2:4e:1b:35:b5:99:ca:f7:
         b7:74:63:31:4b:50:5f:8f:ce:e6:8e:68:60:69:bd:fd:1b:3e:
         8c:eb:d8:b0:c7:11:53:c9:3e:5c:f6:8f:b9:9d:0b:c8:ff:04:
         ee:65:58:9b:3a:18:47:5d:65:28:a5:c0:61:77:9f:d7:1b:cd:
         cf:aa:aa:29:04:78:20:38:bf:fb:47:34:e1:8e:cd:ac:12:5f:
         65:2c:84:16:a5:2c:7f:f6:ad:31:f2:97:58:bf:f6:c8:f6:4d:
         ee:f2:d9:7c:fc:33:c3:3c:31:df:41:84:72:ad:ee:3b:5c:5b:
         7d:e8:6a:71:00:a3:cc:0c:44:3c:a2:c3:d3:52:56:06:47:93:
         f5:3c:31:8e:a9:95:43:b3:6d:b2:fc:f5:12:c1:93:ef:6f:c8:
         01:40:c7:92:5d:3b:25:cb:b8:60:c4:4d:11:1c:64:0a:01:13:
         91:41:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 01:40:28 2025 by rpki-client