Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34e9f4bd-87ae-3e9d-a9b8-21773a91cf35.roa
File:                     34e9f4bd-87ae-3e9d-a9b8-21773a91cf35.roa (raw, json)
Hash identifier:          cypD2vNSXuTjsCtVYopgR2lHVTWlrhipGgDEnfbP3Xk=
Subject key identifier:   BD:A8:27:C9:03:89:3E:F0:CE:AB:85:36:23:F7:E4:AD:9A:C1:DE:15
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A9013390B0B5A01587F40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34e9f4bd-87ae-3e9d-a9b8-21773a91cf35.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        198.41.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:90:13:39:0b:0b:5a:01:58:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=51ea53bd-d671-4f83-96b9-c1e41c5d65bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:ce:6f:2f:c7:98:e4:5c:84:ac:a1:fd:b7:
                    8f:b8:6f:a2:e6:6d:c0:1f:d1:fd:bb:ab:c7:07:b2:
                    cb:28:f5:d8:60:7b:4e:71:2e:b2:82:98:df:ae:10:
                    e0:f2:83:c2:d2:0c:58:a6:92:8c:03:63:7a:59:08:
                    15:7f:a5:eb:4a:0e:44:17:3b:13:f5:44:38:8d:37:
                    63:8a:93:42:bf:29:81:a6:27:4b:73:04:b4:19:ce:
                    2d:cc:66:bf:ea:37:da:cb:9d:5d:64:ba:2b:69:32:
                    b4:38:bc:84:31:2a:14:f9:5a:ed:7c:1b:2b:c1:9b:
                    3b:35:65:fc:87:4e:6c:13:db:fb:4a:cd:eb:5c:9f:
                    04:f5:32:bd:f8:be:45:38:2b:78:1d:0c:ae:61:19:
                    b0:52:ce:a4:4a:44:46:8b:7b:29:c0:54:db:27:00:
                    12:0c:1b:85:b9:48:93:3c:1f:49:09:7a:c7:c1:90:
                    e9:7b:7f:1a:43:a0:24:ce:73:65:ac:d0:4d:46:01:
                    e8:38:97:7f:d6:57:ea:b9:13:87:85:05:0a:d9:c9:
                    28:8e:8d:4b:fa:2b:ee:2d:62:9d:99:3a:4b:71:f7:
                    35:30:ad:ea:e8:ef:e0:3d:d4:e2:7c:96:d3:ba:51:
                    b8:98:78:eb:ab:60:6d:04:b2:46:d7:32:47:a0:54:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A8:27:C9:03:89:3E:F0:CE:AB:85:36:23:F7:E4:AD:9A:C1:DE:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34e9f4bd-87ae-3e9d-a9b8-21773a91cf35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:20:da:d8:13:5b:99:b7:0f:39:1d:39:6d:e1:81:64:50:ce:
         20:ef:bb:33:77:f8:dd:87:06:9c:14:01:1d:71:ec:b6:dc:76:
         13:b4:a5:8b:de:5f:8f:a8:91:d2:8e:88:cb:0a:2c:d7:9b:34:
         02:9f:06:14:d2:8b:46:8e:c9:7c:ac:c8:dc:95:99:5f:78:53:
         15:c3:62:72:b6:43:41:85:74:c4:5b:4b:c6:8f:c1:41:81:ea:
         fe:c3:46:d9:09:6c:dd:62:27:23:f5:0d:49:58:08:fe:17:18:
         07:14:07:06:df:f0:e2:c8:db:5f:eb:41:f1:99:b9:9d:d2:0a:
         6f:3d:b3:a7:e6:bf:67:ec:c2:44:86:4a:98:47:11:23:bf:9d:
         46:81:8e:c3:83:d7:05:46:af:86:03:d1:67:43:72:09:0d:ea:
         d3:62:0b:31:8f:cf:eb:6c:5b:69:78:c8:30:1d:8a:31:fa:67:
         50:67:f8:64:e0:ec:90:c5:f6:5d:6f:d8:32:33:3c:5d:b2:48:
         05:d7:2e:f1:06:4e:53:8e:9e:35:03:bc:6c:84:69:c9:01:ce:
         91:39:4e:ff:45:0b:dd:d3:2f:c7:1f:c0:f2:d1:23:10:fd:01:
         ac:9d:7c:aa:34:e6:fc:29:bf:ef:be:5f:7f:87:64:1f:65:c0:
         a4:98:23:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:21:51 2025 by rpki-client