Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcead342-7ef8-319c-84e3-9d7d24711399.roa
File:                     dcead342-7ef8-319c-84e3-9d7d24711399.roa (raw, json)
Hash identifier:          ro9n/wr2d4W0ctCSAt7BIy1+L/YhvMPvtJw9o2XmHVg=
Subject key identifier:   22:0A:88:BE:9B:7D:F4:3C:52:2A:0A:C6:22:78:C6:13:7C:7F:0E:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCD8B7B274F00F2C49C980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcead342-7ef8-319c-84e3-9d7d24711399.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7016
IP address blocks:        24.124.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:d8:b7:b2:74:f0:0f:2c:49:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=42da26e2-b05a-4549-8b56-aa89c58733a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:72:62:db:a7:cf:10:0a:8e:11:07:47:ad:
                    73:36:78:3e:e0:79:a3:cc:d2:c7:05:c1:3d:7b:54:
                    87:2e:cb:74:f1:1b:62:78:2f:96:1e:33:c0:3f:5c:
                    1b:71:e1:fa:c4:c3:3a:f7:41:43:aa:33:fc:18:4d:
                    99:6c:66:c8:89:d4:32:db:ce:9a:5d:4e:83:a2:1c:
                    14:24:95:ae:97:c8:12:e1:2e:b9:12:18:bb:01:fc:
                    70:5f:ec:8b:2b:80:d6:8c:7e:6b:6e:6f:39:44:fa:
                    d6:d9:a0:72:5f:86:4f:a5:f1:1f:d9:80:6b:19:4a:
                    85:15:8f:fd:06:12:75:43:1d:be:9f:4b:b0:6e:00:
                    87:12:6c:14:4e:b0:1c:8a:e5:70:9f:c4:e3:cb:88:
                    57:b4:0b:9f:f8:1a:a1:b6:ea:55:69:e0:ea:04:63:
                    01:4f:c5:eb:48:45:2e:a3:7a:be:cb:e1:c4:11:a5:
                    ca:bd:c6:e8:a9:59:e7:32:94:eb:44:5f:0e:98:b9:
                    7d:16:91:b7:7f:07:15:0b:a0:f5:ab:01:b0:14:54:
                    0d:ee:d6:d2:1f:03:bc:10:42:a6:4f:22:db:d9:75:
                    a0:6e:63:0b:e7:4e:ba:17:ed:41:b7:e0:66:87:2d:
                    95:54:eb:21:20:a6:74:c9:36:7e:6e:31:25:b8:05:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0A:88:BE:9B:7D:F4:3C:52:2A:0A:C6:22:78:C6:13:7C:7F:0E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcead342-7ef8-319c-84e3-9d7d24711399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.124.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3a:30:1a:ed:a4:b8:a8:cf:06:63:30:28:3a:c5:b4:4a:df:
         e4:f6:b4:82:51:19:99:8e:60:1e:76:62:d8:7f:d6:47:05:d3:
         d4:21:e0:fd:f1:d5:a8:77:8a:8a:92:24:88:cf:a9:0d:a7:c7:
         a9:a6:ce:59:77:5a:c1:ad:e6:d4:d1:32:f2:0c:ae:b3:ad:56:
         4c:cc:ae:16:13:e3:5a:54:c5:a6:c1:ba:87:26:a0:34:24:bd:
         ad:3d:8c:96:c0:0c:31:0a:09:62:a9:a3:c9:ce:a4:5d:17:29:
         85:f0:31:57:98:66:d1:81:eb:c7:bb:5e:a6:fc:fe:1c:ae:32:
         9c:97:3d:6c:84:39:c6:51:14:a8:e8:b9:62:35:cb:16:5d:39:
         73:09:2a:c9:e6:53:44:ef:32:1b:f3:62:fb:06:d1:64:ad:5f:
         5d:2a:fb:11:3d:c4:82:f2:c3:b7:d0:5a:d5:ec:09:e9:46:49:
         21:2c:3f:20:74:bf:6c:2a:5a:30:5f:8b:d5:dc:bd:17:7a:01:
         27:8b:86:e5:e1:cc:1a:3d:91:9d:11:33:ca:9c:ff:24:84:b0:
         c2:2b:62:dc:96:f3:67:75:cc:18:6e:70:48:f2:5f:a9:38:3f:
         04:08:9b:3b:e0:33:05:c3:fa:00:cb:a6:e8:33:34:91:56:d4:
         d7:56:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:55:26 2025 by rpki-client