Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa
File:                     b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa (raw, json)
Hash identifier:          4qyD+8iObKggVdwlemHuf9dWhqQRXudhSHL1axjS+do=
Subject key identifier:   CC:E5:9B:69:53:51:11:B0:F9:DF:DD:99:9C:EA:AD:DD:6D:A4:D9:CE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D21100ACBDFFAC45E167A300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     14455
IP address blocks:        67.151.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:00:ac:bd:ff:ac:45:e1:67:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=c9fdeef3-6fd6-4515-8fae-e3a838cefb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1f:62:14:8c:52:b4:c6:33:76:f4:33:69:c1:
                    7b:f2:93:30:b5:6e:b2:ec:48:7c:e2:7b:4b:f4:5a:
                    25:be:5d:b3:d3:5e:c1:d1:19:1e:ac:1d:69:1d:cf:
                    8d:7d:2d:9a:77:96:9f:d3:78:43:a2:ab:04:90:6b:
                    98:c7:33:31:9d:b9:18:29:f5:2a:f4:da:23:29:23:
                    56:ac:9d:5c:b9:4b:7d:36:91:11:56:79:e9:96:68:
                    75:19:b5:89:89:76:c9:60:29:c4:32:53:9a:70:13:
                    b7:0f:7f:3c:15:3f:43:69:39:1b:41:38:88:b7:dc:
                    18:ff:1a:fe:62:79:2b:ea:0a:23:8c:35:15:67:44:
                    22:96:56:2b:2b:78:f5:7e:70:00:66:9d:f5:cd:21:
                    60:90:b9:95:9b:82:5b:6e:1b:77:ff:78:c2:14:35:
                    db:45:16:5f:32:32:f2:19:10:52:99:93:00:d8:c3:
                    91:ce:27:74:56:71:6f:09:d7:df:0d:6f:f6:89:5e:
                    8c:5c:9a:5d:7d:88:84:3c:d4:dd:62:9e:c2:ec:c1:
                    00:5d:ef:8f:ad:d3:d2:eb:87:af:7a:73:03:5d:f6:
                    6e:1f:77:cd:77:6f:14:b3:f5:4b:6b:99:65:48:96:
                    41:78:40:0b:ec:f9:55:32:b5:22:91:e9:68:34:03:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E5:9B:69:53:51:11:B0:F9:DF:DD:99:9C:EA:AD:DD:6D:A4:D9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.151.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:73:c6:f6:38:64:29:71:7c:11:f7:9b:03:52:39:d0:53:27:
         9d:eb:44:46:1d:f3:a9:c4:e7:e4:30:e1:7b:a0:2a:2f:45:49:
         99:54:6a:cc:91:2d:69:77:2f:c8:0a:99:eb:0e:87:4a:9d:f4:
         c6:a7:19:40:ac:df:17:5a:d6:6f:bc:b5:49:d5:2a:a0:75:6c:
         4d:75:e6:79:54:a1:11:f9:9c:52:50:c9:0a:d2:e5:51:dc:57:
         28:a3:cb:9a:7c:ef:37:32:a9:2b:ab:08:d1:a4:81:fc:63:41:
         ba:91:96:a8:fb:fb:d3:49:13:ad:ba:fd:b4:b7:9d:1d:3f:bd:
         da:59:11:bf:4e:63:22:27:d8:26:76:47:a2:21:48:51:e3:90:
         b7:4c:2d:83:9d:d6:00:42:c0:f6:a9:26:63:1e:84:4c:74:2b:
         46:f2:2c:3d:a7:9a:33:02:cb:e4:ff:34:79:b8:f0:32:eb:15:
         64:26:81:44:45:a8:38:48:b6:c6:c6:fc:cb:00:8e:92:19:54:
         58:15:a2:46:aa:40:4a:cf:5d:7f:5b:df:c4:a2:cf:18:97:46:
         b7:15:d8:1b:9f:ab:53:2e:60:ea:c9:e8:ff:18:17:40:9f:20:
         16:01:e7:76:12:aa:6d:3c:2f:b6:00:50:80:73:52:39:ef:6a:
         65:7d:7f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:30 2025 by rpki-client