Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa
File:                     a958d35b-5bff-30c1-9a51-b65ae1791370.roa (raw, json)
Hash identifier:          gyspTQmnS7HgRncGBGbEPmhLQsl9W6pGHLH2KwyMBwo=
Subject key identifier:   89:10:14:24:88:05:E6:4D:BC:71:6A:95:0E:9A:40:A2:D3:05:4B:F7
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285849B149E94926D8AB74EF23BA00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     396253
IP address blocks:        149.19.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:e9:49:26:d8:ab:74:ef:23:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=c2227bd3-bbd1-4818-abfd-a38ef150df78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:0b:b0:01:23:38:02:19:5b:9f:dc:9a:42:
                    1c:89:66:f1:c5:f5:0b:1c:08:29:f8:5e:1d:27:61:
                    6a:0e:c4:93:d2:2b:bb:67:a9:75:a7:53:12:cf:ea:
                    64:6d:68:aa:40:fc:9a:2c:b2:8d:7e:ab:16:c3:4a:
                    29:15:e7:b1:40:03:ba:ce:8a:58:b9:d3:a2:62:78:
                    83:40:27:1f:7d:ac:d3:4d:c9:7a:9e:59:9c:23:69:
                    40:e4:6c:6c:11:8a:70:74:39:65:19:4d:41:bc:59:
                    4a:fb:bc:66:72:ea:14:93:63:28:0f:93:55:ba:ea:
                    9a:02:b6:aa:ee:46:98:c5:e9:ad:03:f4:b6:f3:49:
                    14:8e:db:54:2c:1f:d2:d6:85:0b:82:17:93:ac:35:
                    00:09:d1:95:00:e3:dd:11:09:93:2c:72:62:48:b1:
                    e2:d3:58:e7:46:6e:7a:ec:f8:df:9c:92:eb:45:66:
                    15:46:79:26:2a:04:35:b0:9e:4a:07:15:99:1e:80:
                    dc:5a:10:73:5a:78:21:57:75:e8:1b:58:ba:d4:dc:
                    3c:d4:9a:2a:cb:5e:d6:25:1c:01:da:d3:ee:32:56:
                    eb:58:60:6d:04:29:38:9d:82:b6:d7:40:91:5e:48:
                    1d:88:76:ae:98:de:ed:f5:27:ec:90:54:a9:85:7a:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:10:14:24:88:05:E6:4D:BC:71:6A:95:0E:9A:40:A2:D3:05:4B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:66:0f:ab:57:12:62:d7:e2:41:ef:11:fc:41:97:e5:c1:2a:
         0f:7a:55:2f:01:2d:e9:36:23:43:a0:d6:d2:fe:45:49:53:06:
         ee:97:9c:40:e2:39:2c:40:ee:d7:84:19:0c:b6:7f:a9:fd:d4:
         8f:88:1b:82:61:a9:4d:85:58:68:dc:fd:a8:ce:8f:cb:b1:66:
         45:18:ac:c9:a7:52:3d:ef:ff:a6:dd:27:51:a7:9f:25:29:72:
         ad:e2:e7:be:ba:3b:f5:41:18:4e:16:92:ef:ee:26:f0:6e:4a:
         13:bc:52:33:e5:7c:17:b2:fc:98:37:0c:a2:c8:21:42:b0:14:
         2f:cb:34:89:b1:bb:7b:44:2e:81:69:d2:97:b5:d6:aa:33:7f:
         7a:2c:d5:d8:d4:b6:2e:e8:3d:03:bc:eb:d6:f0:4c:a9:6f:fb:
         a9:63:9e:da:55:3b:8e:1d:4f:85:3a:6d:6e:08:b2:ab:f1:ef:
         93:da:f6:9c:23:b4:5d:48:7f:9f:14:3e:14:a4:9c:6c:20:3a:
         bf:4a:c9:06:c8:25:9b:17:c2:ee:3b:b8:32:77:17:59:7a:14:
         92:b3:96:8a:4e:d5:a1:df:6e:85:d9:e4:41:ee:ae:89:1d:cf:
         53:ca:8b:4e:95:3f:a3:a7:33:36:48:19:22:0b:70:38:cd:ac:
         a3:91:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:18:24 2025 by rpki-client