Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa
File:                     bc60d7b4-d6be-35cb-80fc-16177325cc06.roa (raw, json)
Hash identifier:          5L7E2I3d4RGwH5uvGW5ODI5bIHoDYvrt8i6WzO26IfM=
Subject key identifier:   DF:1F:A9:57:C4:8F:B0:34:EE:39:19:C4:8B:56:47:2A:83:91:CD:1D
Certificate issuer:       /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial:       010D0C9F432858492CAE891FB059A3D02040ADE0
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     13928
IP address blocks:        199.21.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:89:1f:b0:59:a3:d0:20:40:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=c2da4cd8-d7dd-409e-b47e-954c3391963b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:72:96:13:14:53:e2:c5:df:8e:f7:37:7d:c1:
                    1e:e5:d4:ab:ff:06:fa:40:01:03:47:ca:7b:97:9a:
                    3d:b9:66:9e:9b:dc:38:55:80:89:45:2a:c0:3d:7d:
                    2f:7e:aa:04:d2:21:33:f3:1c:24:48:d1:49:e0:48:
                    86:32:fb:6f:c9:45:34:68:c4:fe:3d:e6:22:fb:e9:
                    32:b6:75:8c:18:5b:98:34:d0:c3:97:74:0b:7f:3b:
                    28:6f:66:7a:9c:47:15:b0:e8:1a:0b:34:49:8c:85:
                    fc:80:d5:11:53:43:53:66:9c:da:f7:ee:92:f9:69:
                    d8:90:77:fd:a7:57:27:cb:39:e1:49:dd:bc:97:16:
                    56:48:04:6a:76:94:18:aa:b9:76:3e:cd:cd:85:2b:
                    72:b6:c0:d3:0f:9c:9a:e6:fc:a8:67:0d:62:ff:9e:
                    87:a6:45:a9:06:ed:08:04:3d:39:04:52:6d:02:9c:
                    32:ae:7b:a0:52:5d:90:3d:90:35:33:bf:3a:ac:a2:
                    3f:cd:87:b4:17:4f:36:d4:9e:01:3f:d6:69:9b:30:
                    e2:f5:7b:7c:31:0d:d0:dc:c4:5e:b7:63:66:5e:55:
                    60:a0:cf:0b:50:e8:de:91:0c:18:a8:1a:77:3d:81:
                    0f:e4:45:81:99:f0:4d:38:25:a3:20:24:c1:0b:78:
                    77:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1F:A9:57:C4:8F:B0:34:EE:39:19:C4:8B:56:47:2A:83:91:CD:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:dd:61:c8:35:df:9f:2e:cf:c0:86:31:a2:c7:49:72:12:de:
         05:81:77:aa:dc:83:ec:8e:f8:2a:80:18:05:82:9b:0d:32:ad:
         5e:58:fc:19:2e:c1:a8:12:6d:95:af:63:b7:54:7b:e2:d6:da:
         33:72:4e:8b:92:43:7b:b6:78:a2:77:46:6c:0e:23:d3:a4:31:
         97:79:53:43:43:af:3f:79:0e:ae:23:dd:3a:33:b8:4a:fe:5e:
         0b:b5:31:d8:e2:70:17:0e:31:eb:be:e3:21:ed:d6:3a:2c:d3:
         9c:7d:a4:d1:83:82:ff:c7:17:1a:11:57:16:5b:c1:27:f8:a7:
         bb:20:46:e9:03:51:59:14:b9:c2:7d:8c:e9:33:0d:ba:e2:61:
         55:70:9e:1d:b7:1d:38:3b:a6:85:b2:d9:f9:72:c3:e7:84:c4:
         33:bf:d9:56:78:68:6d:01:00:71:62:fc:28:8a:09:ce:96:f9:
         9b:b2:e2:89:e8:99:8f:10:11:a3:e4:31:df:19:a4:a3:b6:2a:
         ae:50:31:89:7f:6f:fa:07:de:0c:9a:a5:e2:f9:82:03:61:ab:
         93:d9:bb:31:b0:ed:53:cc:c9:37:25:c4:89:c4:15:05:16:1c:
         71:76:f7:09:68:17:08:30:fe:24:ed:d2:e8:24:48:d8:98:0b:
         fb:fe:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:27 2025 by rpki-client