Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be48dd99-4d77-35f0-b4cf-0c9450c1dc9f.roa
File:                     be48dd99-4d77-35f0-b4cf-0c9450c1dc9f.roa (raw, json)
Hash identifier:          l6Ak6LZfqd+H+k6np/IdseiU3lE2MfnvRvRCjorTEf8=
Subject key identifier:   18:DD:6C:FC:6A:5C:2A:80:A5:7C:1E:AD:29:21:9D:26:2A:5A:8E:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC37B4D473F673476B4BDE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be48dd99-4d77-35f0-b4cf-0c9450c1dc9f.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        24.0.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:7b:4d:47:3f:67:34:76:b4:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=986c32b1-1a2c-47b2-92a5-a7a7e627e957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7d:d3:30:ff:55:c0:24:dd:44:1e:40:49:56:
                    ea:01:ee:e0:0c:e3:77:e9:72:35:d8:dc:21:a7:99:
                    9e:43:82:c2:08:6f:59:3e:32:f5:cc:f2:f2:87:5d:
                    21:a5:6f:81:76:d7:75:4c:33:f9:0b:4b:72:9b:8e:
                    20:80:d5:49:e3:e0:4c:ce:22:0a:7c:df:02:60:dd:
                    8a:67:a7:5b:79:05:49:60:b2:d1:7b:fc:42:95:07:
                    10:f4:c6:4b:5f:ad:77:3e:9f:84:1f:bc:25:07:73:
                    df:85:c7:d1:21:d3:79:8f:0b:d8:20:e1:28:48:9e:
                    77:4e:45:c1:f1:e0:e3:5a:f2:1a:26:1f:ff:47:9c:
                    34:fa:1f:1b:db:c9:3a:8a:b0:ca:eb:5a:8d:82:fd:
                    67:c5:52:19:cd:ce:bb:d5:8b:e6:f5:a7:42:f5:90:
                    ce:c8:4d:de:6e:02:e7:15:d7:94:18:9f:d5:15:49:
                    0b:55:ca:ea:1f:64:8f:5d:ab:6d:2e:d7:27:23:d4:
                    ca:33:c5:2d:67:86:4c:3f:e8:83:6a:57:59:1d:f8:
                    0d:14:70:04:fa:89:dc:bf:55:ea:40:63:91:67:71:
                    9b:20:f7:cd:92:5d:a3:11:46:65:bc:13:a8:43:a1:
                    d0:a3:c6:82:31:88:6c:46:02:02:c9:01:fc:63:6d:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DD:6C:FC:6A:5C:2A:80:A5:7C:1E:AD:29:21:9D:26:2A:5A:8E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be48dd99-4d77-35f0-b4cf-0c9450c1dc9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.0.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:26:f0:19:56:9b:89:9f:9d:c7:b6:41:68:f8:18:22:37:73:
         9c:17:f1:d4:55:8a:03:3e:d8:99:97:3d:b3:1d:61:8c:57:6b:
         ad:f6:23:ed:b6:92:8c:a1:90:ef:fc:58:30:32:f1:b7:90:91:
         27:84:67:07:58:d5:a5:ad:45:e6:38:2e:9d:a2:37:91:c5:d6:
         74:f3:f3:aa:8c:ba:fd:03:c9:b4:ff:3f:83:37:a2:ba:cc:2d:
         a0:b2:af:60:7d:78:04:d9:58:ed:e4:c3:c2:ba:c8:4e:ef:3b:
         3f:3d:00:e5:32:84:0d:a1:10:2d:ac:1f:2a:ec:46:3b:27:88:
         05:e0:41:2b:b6:f0:50:66:0d:49:3a:25:9e:90:e7:ad:3e:7a:
         38:8f:4e:0c:02:b8:1a:83:b5:ec:89:4e:9c:14:79:83:2a:d0:
         f4:fd:49:23:85:53:c2:19:0d:80:14:3a:8f:81:04:0c:75:93:
         ca:58:b8:b1:d5:b3:12:c4:77:91:1b:4a:05:f6:e0:24:5b:3c:
         d3:75:e5:7f:c8:dc:89:84:d1:94:d2:c9:e9:a5:80:29:e8:53:
         e2:72:e4:a2:fe:35:e8:12:d2:af:ab:e2:3c:ca:54:28:cf:23:
         03:ca:7b:d7:14:b2:73:3c:54:0c:d8:3b:9f:42:b6:91:b1:44:
         84:8d:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:13:52 2025 by rpki-client