Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa
File:                     502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa (raw, json)
Hash identifier:          IvFBXsdvKA+qXmPAkMiukAOa5eIg9KZkTTPfSlLXNsA=
Subject key identifier:   44:34:C1:99:CE:EF:D2:02:20:C6:5A:56:5F:C9:21:32:CF:E7:BF:5A
Certificate issuer:       /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial:       010D0C9F43285849C0A4DB3C74609A27F54DDA40
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     3677
IP address blocks:        199.201.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:db:3c:74:60:9a:27:f5:4d:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=301bf57d-a64b-4c92-ab70-889dda24292c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2b:c1:31:69:46:05:ee:3b:df:05:55:43:35:
                    78:5a:cc:19:6d:79:e3:6a:7c:5e:c2:3d:68:f9:ab:
                    be:14:01:54:c3:c1:0b:4a:c8:32:a3:df:c9:33:b0:
                    3a:3a:44:26:5d:40:2d:c0:d9:22:37:2f:db:36:47:
                    18:e9:b2:4f:fe:81:ee:10:ad:0a:4b:6e:6c:98:e8:
                    76:2d:9b:3c:2c:54:89:3f:18:27:5d:29:22:37:61:
                    8d:98:2b:62:5e:a3:e0:60:4b:f6:8e:be:88:23:90:
                    48:48:5e:6c:fd:0b:f1:74:e4:f6:d4:80:34:d0:4d:
                    1a:66:7a:39:08:1e:7d:40:7a:f7:9c:3b:4e:f2:7f:
                    db:40:1a:b4:25:74:1b:37:29:13:02:b2:f9:26:15:
                    ba:b8:55:66:13:1d:fa:ab:20:b4:b5:e1:30:d0:bb:
                    7c:bd:6f:fe:f8:b9:42:ad:54:c5:e6:c4:8d:3e:56:
                    26:65:9d:58:a0:bf:d5:7f:6e:8c:70:88:a6:99:33:
                    77:ad:fb:82:ca:37:65:21:97:fe:55:38:c8:df:9e:
                    27:56:4d:f0:cd:37:42:b4:2d:46:d1:dd:02:32:13:
                    b1:6a:53:aa:59:b4:4a:01:89:51:8a:c7:e9:9d:1d:
                    45:da:6a:5b:e3:54:26:22:8b:ea:76:5c:ea:62:46:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:34:C1:99:CE:EF:D2:02:20:C6:5A:56:5F:C9:21:32:CF:E7:BF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:7e:86:94:2a:d0:32:da:73:76:c8:7a:ca:0c:3d:72:81:35:
         55:03:6c:10:84:45:22:40:27:93:2d:2b:1f:f2:8c:0c:4c:9a:
         4e:33:b7:c0:b5:3a:e6:94:ed:ae:62:b0:cc:af:21:e3:dc:c4:
         55:07:10:92:2f:37:13:c5:12:8d:90:c9:a7:8e:d0:8b:1d:b5:
         22:0e:ed:9d:2c:0d:2f:59:84:cc:a6:7e:8e:c5:e9:e1:f2:ba:
         d8:43:21:cf:38:f9:80:64:46:b3:86:9c:af:b5:c0:6e:99:fb:
         a7:7b:69:a4:ba:bb:50:90:0b:91:fc:81:c8:55:ae:6a:19:4a:
         57:54:18:10:bc:33:2a:c0:56:6e:cc:e3:08:05:17:cb:ee:30:
         bf:f1:6e:67:d1:35:e9:6a:e0:78:eb:86:32:15:5c:f2:64:1b:
         3b:9e:4b:a4:83:3a:0d:c6:ea:66:10:a6:0a:80:f7:e3:8a:15:
         ea:46:b3:4a:f5:b7:ca:03:c5:72:67:6a:be:20:38:75:3e:a2:
         86:81:f9:a5:f9:e4:6c:47:15:b2:ef:0d:6b:04:2c:1b:08:4d:
         15:9e:3e:18:12:65:6e:d3:b0:3c:45:5f:54:8a:35:b7:4f:cb:
         4f:71:54:fd:32:45:58:c6:5a:9f:f2:f7:aa:5e:da:a1:4d:96:
         bb:57:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:57:51 2025 by rpki-client