Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa
File:                     9b1c53d7-a055-3051-9111-c6f8e5def468.roa (raw, json)
Hash identifier:          PteZFVre1iTnnNF1KPNKvU3MPUHUpUuVhWcfqd9XTxQ=
Subject key identifier:   05:5E:F7:76:9A:8A:80:02:18:CF:40:41:CB:4F:80:EF:0D:48:50:A0
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584944694812AC8505BBCAD8E180
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        24.149.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:48:12:ac:85:05:bb:ca:d8:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=0fb23215-0247-49bc-863e-d21acde2ecba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4b:d3:9b:bc:ef:37:41:08:8d:88:15:47:25:
                    c6:a9:1d:65:70:02:c4:b5:cc:f4:9e:e0:26:f5:7b:
                    9e:e3:a1:5e:50:0d:3e:6f:b8:d9:4a:b1:97:6b:4c:
                    94:47:6f:a6:40:8f:da:c0:82:9b:41:d2:08:fa:4d:
                    98:7e:57:11:5f:3c:4a:36:34:ee:79:71:6c:95:44:
                    e1:93:b1:11:49:c2:f1:21:ff:a8:cc:48:64:72:6b:
                    4e:b3:a2:83:ab:a3:fc:cf:18:0e:a0:e3:f4:9f:0f:
                    fd:fd:d9:76:06:db:a7:47:83:bb:8a:d3:f4:77:0e:
                    28:dc:a5:03:c4:ef:74:50:5e:ec:6c:e6:18:d6:54:
                    54:3f:65:ff:53:a4:b4:1f:29:c2:9f:57:f8:9d:ab:
                    31:1f:8b:c4:08:e6:69:9d:73:f2:c8:ad:fb:1a:59:
                    84:fa:f9:56:b9:58:84:64:df:17:09:6b:19:ec:87:
                    82:ba:18:14:65:15:b3:20:8f:dc:13:6f:9c:8f:90:
                    c7:e8:38:fb:7b:57:72:c7:53:fd:f4:d7:d9:9b:e5:
                    c9:42:bf:f1:54:66:15:38:8c:66:d0:fb:71:a9:4d:
                    7e:c7:e9:a8:6c:a0:8f:2f:6b:56:cf:cc:54:dc:58:
                    cd:4a:57:8a:4e:9b:07:d3:c9:d0:aa:fe:1d:af:85:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5E:F7:76:9A:8A:80:02:18:CF:40:41:CB:4F:80:EF:0D:48:50:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:97:3b:8c:76:99:ae:0c:d5:e8:79:38:a3:76:37:84:a4:
         44:a1:08:78:c5:d8:cf:73:69:11:b6:e3:9c:a5:bf:d5:aa:29:
         d6:73:df:b0:0c:b5:a6:59:5b:3b:3c:c1:6f:3e:8b:ee:15:90:
         b0:2e:c8:69:5f:f4:8e:e9:09:bf:6d:72:68:db:1f:69:c5:43:
         bc:11:89:3d:fa:6a:24:30:b3:5a:7c:5b:52:27:09:f2:d3:3c:
         7c:69:85:11:bf:83:86:97:3b:f6:36:40:5c:e4:c7:17:0c:64:
         66:4e:ad:a8:62:73:d6:4e:a8:62:84:a4:51:00:1f:72:31:21:
         00:8a:47:f6:44:3a:0b:9c:74:3a:cb:76:6c:89:c4:cf:04:39:
         c0:54:8e:a6:3d:33:9f:a1:be:0a:92:e8:92:0a:fc:8b:34:c5:
         28:de:76:37:7a:ab:b0:18:62:91:30:14:e2:1c:f3:5b:30:b8:
         f9:fc:51:71:07:10:7e:66:22:91:c6:89:0b:83:67:1f:50:b7:
         1d:9c:74:5a:65:8d:28:2b:da:1d:f2:ff:24:5a:50:a9:04:fd:
         c2:b2:f7:b2:89:15:aa:93:ed:dc:2d:a7:8d:d2:29:e5:18:d2:
         c3:94:fc:6a:21:90:8b:b8:bc:e3:44:1e:23:fa:57:8f:8d:16:
         2e:af:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:57:25 2025 by rpki-client