Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/bab8ee06-16c6-3f41-b881-914ad580457f.roa
File:                     bab8ee06-16c6-3f41-b881-914ad580457f.roa (raw, json)
Hash identifier:          rODZi+F8L83IKFPo9WncYqpMAad/3fp/6vAdSmhzels=
Subject key identifier:   76:5C:1E:B0:9A:5D:C2:16:33:68:16:BF:6D:F5:D1:1E:74:06:71:53
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6BD2D4520A24537D813C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/bab8ee06-16c6-3f41-b881-914ad580457f.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     17025
IP address blocks:        159.18.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:bd:2d:45:20:a2:45:37:d8:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=3a2e4483-bdc9-4e9a-a15e-38833ade9993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:45:1c:76:33:25:ef:61:db:bf:c1:0c:b4:9e:
                    f1:61:e7:43:f3:f3:4d:f1:09:a3:bd:54:cb:7a:c0:
                    cb:3b:c0:66:0d:cb:2c:e3:52:34:40:7b:e7:36:20:
                    b1:ce:5c:9f:fd:50:c4:ee:98:e7:4f:40:28:e1:c3:
                    7f:cd:c4:81:1f:82:62:f4:00:e6:13:e6:cf:49:70:
                    ac:33:27:b4:26:e2:c1:6a:87:1e:bb:06:c1:16:f9:
                    d3:82:fd:90:d9:3e:06:c7:b0:a4:9d:c2:2e:d3:2d:
                    8c:31:dd:e3:90:bc:19:ef:8d:11:3f:a1:08:f7:16:
                    0e:54:b5:f2:95:2b:af:cb:00:46:29:7c:a4:3c:f1:
                    9e:f1:c2:4c:73:29:04:38:40:5b:0c:0b:79:36:d7:
                    b0:0a:8a:eb:e3:ad:90:80:dd:fd:a8:33:77:5c:b6:
                    13:e1:46:97:3f:b6:61:f0:14:56:e4:75:d7:57:67:
                    39:ac:b9:e0:18:8c:b9:ec:9b:86:b3:a1:db:f6:44:
                    ef:4f:7d:3f:c9:f9:f8:c3:f8:1c:32:07:43:cf:16:
                    25:f5:cd:66:b7:f9:2d:45:e1:f6:99:a5:77:83:92:
                    d7:b3:1e:df:1c:62:ad:63:f6:4d:e1:66:0d:65:86:
                    13:14:db:91:e1:2b:7d:80:2f:da:4d:06:f1:f8:4b:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5C:1E:B0:9A:5D:C2:16:33:68:16:BF:6D:F5:D1:1E:74:06:71:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/bab8ee06-16c6-3f41-b881-914ad580457f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:df:56:b3:72:c7:ad:1f:18:fe:7a:6f:4a:f0:6b:5d:a5:
         32:07:0a:a2:ee:f4:9b:50:65:af:72:74:8f:24:55:62:17:3a:
         79:00:f4:b9:7e:8e:30:ad:0d:1d:08:de:8c:e6:f3:b4:60:f8:
         2c:eb:f7:e2:8a:20:b0:1a:c8:3e:ea:29:99:3d:01:77:a3:f3:
         9e:7f:ff:ce:5b:7f:f1:01:ae:e3:b5:f5:c7:de:8e:a8:55:67:
         84:e8:f4:7a:a3:6e:e4:be:9a:c3:b9:b5:02:57:f1:d6:83:c8:
         01:b8:5d:de:48:00:4c:81:c8:22:d3:bd:ca:4a:91:67:d5:03:
         db:99:e8:85:f5:30:2a:e5:44:15:a4:e3:b8:08:55:87:8e:93:
         7d:3a:59:0e:1e:63:70:71:28:45:f8:d5:b4:a1:27:62:b0:25:
         01:a9:f7:3f:a7:31:60:77:9e:58:a3:a3:22:48:fc:47:44:c6:
         32:d8:5a:01:4b:82:10:3e:a6:b0:49:d3:a9:03:3f:42:84:53:
         81:8e:ca:36:b8:b8:c1:c3:75:b5:c7:8a:e8:f0:ea:3d:de:c0:
         18:4e:e2:d0:bf:bd:8f:b1:48:0d:7b:ff:7d:00:be:26:ec:44:
         d8:9e:38:54:7e:90:64:01:da:eb:cb:fd:74:23:b6:19:04:6b:
         9d:4f:8e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:44:12 2025 by rpki-client