Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa
File:                     61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa (raw, json)
Hash identifier:          EtTBmvlRT4HIB7XB2meONzevsiknHGWD1qO4+uEisxU=
Subject key identifier:   5A:9A:06:00:C6:1C:D6:97:A2:55:3D:96:96:11:09:3F:DA:3E:D9:35
Certificate issuer:       /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial:       010D0C9F43285849CE9A4C18145D5C82EFE9C8C0
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     30148
IP address blocks:        192.124.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:4c:18:14:5d:5c:82:ef:e9:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=7bb2d7c8-dae7-4ff2-a9d6-63f2d2d27609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:db:be:06:95:c3:8f:33:c0:e2:f2:f3:ff:f3:
                    63:94:8c:0a:e3:b7:65:8c:62:f7:46:6e:c1:52:cf:
                    26:6b:24:4a:2b:f9:da:80:35:da:93:70:e8:55:3f:
                    b3:31:88:09:e1:eb:97:0e:a9:d4:94:68:a3:48:5f:
                    db:42:95:02:30:6e:16:7e:f0:76:1f:1c:f4:40:b0:
                    98:70:b9:9f:17:67:d0:87:53:b9:a4:72:29:e5:a6:
                    0a:99:0b:a0:86:f0:ca:af:aa:b1:5e:f8:07:33:51:
                    c7:0f:92:73:43:33:55:36:1e:d2:7f:3e:10:14:d8:
                    75:f8:f9:c2:d9:9b:40:8c:e0:bd:92:c7:e3:58:c3:
                    10:01:1b:26:ed:7c:6f:6d:32:51:5b:dd:ad:36:ec:
                    a4:8c:81:32:94:bc:c0:41:e8:15:16:cc:71:a7:24:
                    12:40:23:1c:48:42:6f:25:8e:c3:ef:13:1e:91:b7:
                    3f:de:14:16:0e:37:a0:0b:3c:cd:8c:16:3a:28:04:
                    0f:0d:e0:7b:b2:72:99:aa:b6:36:91:ad:c3:e5:01:
                    e0:a8:09:14:f3:af:16:37:1a:d7:7a:a6:7f:de:86:
                    45:58:5f:f2:a6:59:57:4e:15:22:a3:37:a3:49:0f:
                    1f:db:91:c2:52:d5:57:f8:84:88:86:15:ba:36:f9:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9A:06:00:C6:1C:D6:97:A2:55:3D:96:96:11:09:3F:DA:3E:D9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:d4:88:0b:c3:31:30:35:42:86:f8:cf:51:c5:ea:2f:ab:61:
         c2:b4:ff:7c:cb:19:82:2e:9e:e7:f1:1d:79:ff:42:4f:57:16:
         fa:7e:2f:f0:f6:a1:ae:fe:34:1c:c9:57:65:09:35:60:81:b4:
         0d:f0:a6:fc:37:77:3e:ba:c9:c8:33:f3:2a:33:2f:e9:b5:5d:
         4e:d5:c2:bc:1d:df:ae:c0:cd:52:eb:5f:83:2c:0c:81:33:ce:
         3c:d8:e3:50:33:ed:03:16:7c:43:43:e4:3d:35:50:bb:ba:3e:
         18:66:7a:20:70:fc:50:77:7e:43:1e:6a:7b:62:01:f5:7d:1f:
         cb:e3:04:90:3f:ce:9b:18:ee:e9:78:25:db:76:5e:f9:d7:b7:
         2e:24:0f:87:21:ff:34:2d:69:ec:76:8c:69:c8:e4:16:47:27:
         d8:2a:e1:3a:62:06:35:c9:38:19:a4:53:cd:fd:2b:41:45:d6:
         ee:39:b1:ca:a7:3e:f4:4d:29:ca:57:46:c6:ff:fe:18:ed:2d:
         67:60:a9:44:8f:10:99:10:9b:ec:9b:37:de:ab:9d:08:17:ca:
         50:06:21:30:69:79:cd:5b:be:dd:75:4a:bf:52:6f:d8:80:67:
         21:c7:8c:22:98:22:0b:33:7e:50:cd:a5:09:af:b8:77:dd:41:
         e8:80:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:11:19 2025 by rpki-client