Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa
File:                     42377806-4a77-3098-8fd4-c6b8e4389e40.roa (raw, json)
Hash identifier:          HbgjPNF+XE/rATtUbzGFsm/F2N0/b9t/30Yysd5d1Dg=
Subject key identifier:   91:DB:6F:D6:D2:FB:BD:B6:76:87:F8:9D:1E:26:00:DB:37:E2:65:87
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F43285849FCAA6FE040ACBAE4BA1E4A00
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     5050
IP address blocks:        147.73.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:6f:e0:40:ac:ba:e4:ba:1e:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=59ab5255-b6b5-40f3-87b4-9aa7f2af543b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:8d:05:5b:c4:80:6b:08:af:b7:65:91:69:
                    c7:26:ad:08:7e:b0:2c:ab:c8:67:6c:98:db:aa:c3:
                    f4:16:69:d1:4e:9f:27:71:9a:a5:88:07:79:ef:bb:
                    7d:34:fd:80:f4:d3:d5:dc:92:4c:f4:b4:a1:9a:65:
                    d2:6f:8f:00:38:bb:e1:2e:51:84:4a:cf:d4:23:1f:
                    9e:20:77:75:40:c2:7a:78:cd:2d:fe:6c:ca:0c:39:
                    f8:b0:ac:11:e5:6f:be:c4:57:0d:47:00:09:a2:f3:
                    44:88:47:7d:0f:4f:a3:81:aa:da:da:57:1a:03:43:
                    c4:37:32:24:86:11:67:ea:9b:fb:d7:f3:c2:e9:ff:
                    be:67:5b:91:93:4d:e1:1c:23:62:4d:48:a2:78:91:
                    95:07:b2:63:9a:85:61:10:47:9a:57:b1:6d:4e:77:
                    84:b6:1e:6a:5f:ba:21:e5:84:ea:71:3c:33:41:83:
                    f9:44:e5:2d:87:da:d8:b3:5a:25:d1:87:8a:65:80:
                    d0:60:1b:6d:2e:b4:17:6f:f6:a7:5b:47:82:65:be:
                    f0:5b:2c:bf:ff:87:97:ef:3a:2a:62:a5:28:37:57:
                    db:d2:19:0f:f9:9c:9d:54:35:4c:fc:c0:47:a2:9b:
                    f5:8f:80:04:e0:e4:37:56:37:a7:5a:15:a0:fb:c3:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DB:6F:D6:D2:FB:BD:B6:76:87:F8:9D:1E:26:00:DB:37:E2:65:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e5:99:f9:e2:c5:bd:18:45:70:8f:ef:3f:69:2a:8d:7c:6f:
         6b:26:d7:bd:f5:c4:14:3b:a2:fb:f4:e5:15:0e:ab:a2:58:40:
         2e:6e:ef:85:3e:d3:43:b4:e7:29:fc:1f:56:49:23:c7:ed:88:
         24:0a:df:8d:9d:7b:29:0f:fc:4c:d8:22:d2:02:a6:04:e4:0c:
         28:32:73:d7:b4:f7:ab:30:ac:2a:58:77:be:79:f6:21:77:8a:
         c4:13:fd:ed:4c:b1:6d:92:97:7e:83:38:c9:2b:eb:05:57:50:
         b6:40:c6:64:93:9a:61:3f:a5:97:0a:c3:a1:db:6e:82:4a:f5:
         64:51:5f:2f:c9:20:58:d1:6a:1d:21:d2:b1:08:d2:d0:43:44:
         0b:0a:29:42:23:d2:88:2c:69:89:40:a6:06:66:eb:8f:80:14:
         bf:1d:e2:4b:f9:67:ab:eb:f6:e9:31:63:98:96:2b:1b:04:68:
         e1:0a:bd:07:e7:d1:8b:44:6d:ef:c6:5f:5a:70:2a:83:f2:12:
         49:9f:97:bd:bd:e4:6b:1a:1c:90:9e:00:17:ac:ff:92:cc:a0:
         26:34:b9:9a:13:bf:f1:4f:7c:84:3a:18:e5:1e:98:d4:f9:d5:
         9e:41:47:3b:73:92:2f:c8:12:dc:8c:f1:a9:8c:ee:a2:dd:99:
         ed:9c:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:06:12 2025 by rpki-client