Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/470c18cb-66bc-3cbc-9ac3-568ab42bf549.roa
File:                     470c18cb-66bc-3cbc-9ac3-568ab42bf549.roa (raw, json)
Hash identifier:          X79G45UqfVyEWnedb3D27hDno+B7kNAcBtk53iRzoEA=
Subject key identifier:   C5:68:09:69:9D:67:28:52:CF:61:A4:E4:E6:F8:15:16:D5:65:B0:60
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584A2C2025F288DDB9754214BF80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/470c18cb-66bc-3cbc-9ac3-568ab42bf549.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     11232
IP address blocks:        24.124.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:25:f2:88:dd:b9:75:42:14:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=d9a257d9-a189-4cf0-92ce-7afb55eb9193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:5e:b5:be:07:67:9f:fd:b0:af:67:1f:62:
                    58:28:33:a9:5f:f7:fa:ff:c7:e2:36:fb:cf:ba:76:
                    54:25:2f:64:b7:61:c2:4d:1a:43:47:87:fc:83:fe:
                    59:32:c0:97:8f:d5:f6:0a:24:a8:ed:d0:90:d9:b3:
                    57:3a:05:34:5f:c4:31:50:06:9d:b9:e1:95:34:a0:
                    1a:5c:e9:dc:a9:e9:9a:0f:10:01:b9:d5:cc:dc:16:
                    f5:14:cd:2a:e6:37:e8:9d:85:20:31:3d:d9:a8:65:
                    27:44:81:83:1a:e8:c7:ed:96:a9:82:0a:ec:16:37:
                    11:9e:82:b5:5d:28:ba:0c:85:d7:22:22:39:42:19:
                    48:a6:a4:0e:91:32:9b:f4:88:ed:dc:fa:da:53:6f:
                    1f:ce:dd:10:50:64:20:df:7f:a3:70:6b:7c:19:33:
                    90:e6:c1:26:31:73:17:2a:b0:e0:df:e0:b6:fa:3f:
                    57:3f:64:09:ec:04:47:f0:69:b8:4c:ab:8f:4c:1e:
                    56:a6:35:c7:87:47:3b:b1:49:ae:c1:b3:70:b7:dd:
                    45:06:49:e2:05:71:66:56:e6:e1:fa:33:14:9d:31:
                    91:28:a4:22:1d:4c:04:ef:8d:41:38:7d:89:a8:1d:
                    93:13:19:4f:01:04:de:9b:2c:87:99:2c:ef:bb:c5:
                    c8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:68:09:69:9D:67:28:52:CF:61:A4:E4:E6:F8:15:16:D5:65:B0:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/470c18cb-66bc-3cbc-9ac3-568ab42bf549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.124.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:27:9b:ea:9e:58:a1:08:ef:cb:51:e0:f8:1f:b8:2d:3c:
         e8:cf:e4:2d:a8:cb:9a:0c:c2:ff:b9:4e:1b:84:fe:45:e8:6c:
         ac:27:a9:f3:32:48:d1:fc:cb:d6:80:b0:42:23:bd:9c:60:be:
         92:40:e5:f1:75:3b:76:07:00:88:bc:f5:7a:97:8f:d9:8b:0d:
         26:f7:f3:0f:0f:d3:8a:6b:eb:22:87:28:17:da:09:87:59:f0:
         40:5b:2b:40:bf:40:5e:e5:e0:fa:8d:37:79:06:36:c1:32:15:
         8e:e1:2d:ec:e1:08:ca:b7:9f:42:ef:0b:1c:ff:f9:7c:c8:2c:
         40:e8:93:02:8f:94:94:f1:11:8b:15:14:5a:3d:50:2e:9e:d9:
         79:39:b8:cc:71:12:ad:cd:52:85:72:17:a9:b8:30:66:c7:cb:
         e1:aa:9a:b9:44:8c:b3:c9:d7:b0:46:5b:4c:a2:26:6e:4f:7f:
         b5:89:13:ed:ac:a8:a8:25:93:d4:c0:35:89:d0:4c:ad:d0:26:
         b5:01:7d:f9:f7:c0:23:25:d0:f7:fd:9a:2a:2c:a7:73:6f:54:
         1d:7e:3b:c4:40:0c:30:ae:1a:24:4a:fd:7a:40:b4:37:50:dc:
         83:b5:82:95:3a:f3:7c:95:49:10:5c:0c:f9:cb:4f:5d:f8:5a:
         32:74:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:30 2025 by rpki-client