Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa
File:                     49eed83d-dd99-34f1-86ae-41393812eaf5.roa (raw, json)
Hash identifier:          LvBOuoVE6G0XZ8Jwo6gsSHkD7vkhVXot60NhrYMMbUw=
Subject key identifier:   F6:AA:62:30:F3:05:61:39:EF:BA:01:FF:5D:1E:23:5D:4E:84:E3:39
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A63F5B9D53DFF65ABD659E280
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     11233
IP address blocks:        209.237.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b9:d5:3d:ff:65:ab:d6:59:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=c4d27a69-27d1-4e91-a4e0-85af5f3542b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:19:91:e5:34:66:7e:43:3f:8f:dc:ff:10:
                    5b:b9:52:90:7b:5e:52:2e:1d:ed:c2:0a:06:9f:25:
                    bb:0c:05:9d:97:61:2d:19:42:57:48:4b:2a:ee:de:
                    14:01:12:ae:59:d0:9c:11:b5:3b:46:16:e9:d5:34:
                    ab:15:ec:fe:6b:2e:12:10:ec:e9:94:18:5c:88:52:
                    7d:cf:76:4e:d7:ec:0c:70:1f:6d:54:2b:17:a0:1d:
                    e7:3f:c8:f7:d0:b6:e2:cf:2b:13:ea:df:a1:ba:ab:
                    7b:43:44:52:b5:63:2c:5d:89:b2:38:f6:88:c5:ee:
                    78:67:ec:d8:9c:1d:8c:ed:d9:ec:eb:7c:b3:b1:e7:
                    3f:b4:6c:82:c3:23:d4:5a:08:0e:ba:fe:f9:d6:c1:
                    b5:e7:c1:bb:31:54:0b:d1:38:e5:c6:58:cf:ae:1a:
                    8a:d6:b0:2c:2e:7a:3c:09:a3:5b:1f:3b:79:e9:3d:
                    36:47:6e:d1:26:61:d2:30:89:ba:13:38:66:eb:32:
                    84:06:cf:0c:a2:18:8e:21:fe:c6:96:60:35:c0:ff:
                    31:bf:96:a8:4a:25:a0:85:74:8d:fb:b2:b5:3a:e4:
                    af:7d:5d:16:89:fd:89:d3:61:3d:06:d0:62:77:7c:
                    bf:36:40:a0:ae:63:cf:9b:9b:84:de:12:38:91:24:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AA:62:30:F3:05:61:39:EF:BA:01:FF:5D:1E:23:5D:4E:84:E3:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:68:40:97:86:d1:56:18:7c:8c:72:c3:49:35:9b:e2:d2:
         b3:d1:b3:d8:f7:ab:4d:9b:fc:47:29:c0:43:aa:36:06:7e:08:
         b3:ef:86:7d:51:3e:f2:71:82:67:9b:c7:9a:0a:c6:cd:e8:c7:
         7d:a3:bf:32:ee:fd:77:64:c1:32:56:3c:4f:cc:a7:85:96:b7:
         e2:27:87:3d:f9:44:12:32:9e:4b:48:c1:5a:38:c8:f3:93:03:
         8c:ee:dc:b2:77:9f:d7:67:7a:d8:1d:f1:45:74:fd:2e:78:27:
         b3:5c:64:99:2d:cf:c3:b1:1a:db:26:07:2a:c4:8a:b6:a7:9b:
         65:66:b3:e8:34:9a:4f:c0:41:d1:2a:97:72:e7:b4:dc:22:20:
         07:c3:be:f9:0b:11:e4:2e:54:8d:54:d6:2c:f6:84:ec:70:64:
         52:e7:d3:91:5c:b2:0c:91:c4:57:70:44:16:e9:5d:04:91:54:
         95:4a:ac:cd:19:ed:7d:29:00:f1:e3:e8:e1:1c:32:98:60:a1:
         f7:cc:36:26:2a:7f:11:90:6a:e2:c1:2f:ce:50:ab:e5:51:01:
         16:b0:19:b2:41:fc:f3:93:fc:6b:2f:51:83:e3:4e:d5:6a:53:
         29:41:63:dc:be:f3:a1:9a:0d:af:44:2f:49:86:35:b8:7a:20:
         90:4f:72:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 15:11:40 2025 by rpki-client