Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/518e9091-b854-3d66-ba08-f6d275b4138b.roa
File:                     518e9091-b854-3d66-ba08-f6d275b4138b.roa (raw, json)
Hash identifier:          8r2Zdla25YRJEW+emrK895LxQovoEnKtChNf1gNQwyY=
Subject key identifier:   7B:E3:FB:4E:CC:B6:63:55:36:CC:FC:28:0E:50:91:1B:46:86:C4:61
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584965E97C5DF112AEB12F96E900
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/518e9091-b854-3d66-ba08-f6d275b4138b.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     46450
IP address blocks:        208.64.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7c:5d:f1:12:ae:b1:2f:96:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=9615fe55-0235-4f57-a77c-b94d47ae319c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:43:0b:12:a4:82:01:2b:6e:32:d8:d9:be:33:
                    2d:9c:46:d8:27:96:3e:ca:b8:ec:db:18:69:25:56:
                    99:0c:3f:41:fd:fc:a8:22:0c:49:fd:04:cd:a1:b3:
                    28:58:b3:80:71:e6:3d:42:98:27:90:c2:cc:13:91:
                    c1:de:c6:ee:24:be:04:b5:0d:42:1c:67:18:ad:2c:
                    d2:dd:59:df:c5:0d:64:ad:89:16:f8:a0:b4:04:e0:
                    42:a1:5e:18:cd:3e:03:b4:85:4f:3c:65:d5:67:ad:
                    c1:c1:bf:00:2c:b9:cf:d9:e7:6c:9c:16:fb:24:05:
                    2f:05:dd:a2:ce:e0:7b:17:af:67:90:ed:45:be:13:
                    95:24:00:ed:22:d6:e8:ab:83:d8:f1:fe:94:8c:a0:
                    a6:f3:41:50:3a:0e:e5:2a:6a:dc:f8:c1:c3:03:3d:
                    66:a0:33:e7:ee:db:16:2f:f4:1b:91:53:64:be:e6:
                    75:2c:53:fc:4f:d9:23:ed:ce:7b:6a:91:aa:f5:89:
                    fa:c2:89:e7:4a:5e:e8:70:75:cc:09:00:1a:08:20:
                    5c:e7:d9:b5:76:39:d6:f0:d4:a7:75:60:db:1f:a7:
                    99:e6:7b:9e:ed:da:78:11:86:a1:f6:3a:11:7f:c1:
                    2d:fc:b8:8e:eb:ef:84:7d:b9:37:ef:37:51:86:95:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E3:FB:4E:CC:B6:63:55:36:CC:FC:28:0E:50:91:1B:46:86:C4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/518e9091-b854-3d66-ba08-f6d275b4138b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ad:83:c1:74:23:a6:c3:00:db:74:f7:28:84:61:94:74:b9:
         9a:93:25:c7:67:4c:86:10:64:99:71:2d:ad:04:c7:56:f0:4b:
         49:59:23:82:f6:1a:60:ee:3c:83:f1:0e:41:16:79:33:7e:57:
         08:ab:d4:2f:bc:1b:32:b4:ee:8f:a5:a9:17:a9:e2:21:ed:e9:
         f4:35:c4:cf:bd:aa:14:5c:bb:d9:65:07:ee:59:03:9d:88:b8:
         4d:06:d6:75:13:c0:98:25:ee:cd:46:b0:62:bf:a5:6f:c8:33:
         4d:eb:d9:14:c9:48:cc:0f:02:1b:9e:bb:c2:b8:35:ec:83:ae:
         79:fa:3a:2a:ac:4c:62:f5:e6:ee:98:ad:0f:ff:d4:b5:56:8c:
         c4:c9:ae:2c:85:4c:b9:0b:56:bf:0f:39:99:99:be:37:21:a1:
         84:95:9f:85:fb:25:c5:b6:93:07:eb:2b:4d:88:be:f9:c8:3b:
         fa:16:94:97:a0:e0:80:d8:c4:8f:e7:b1:1c:fd:f6:d7:6a:96:
         44:81:c7:93:57:26:99:27:76:a9:2b:d5:98:3d:a7:f7:51:0e:
         b9:d0:42:5c:1f:db:ba:12:ae:42:1f:36:2d:e7:56:fa:5d:9d:
         01:03:04:17:20:6c:f0:47:83:65:cb:d6:f1:18:71:ab:bd:cc:
         d7:f5:8a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:30 2025 by rpki-client