Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/81b30814-d14d-3119-b7df-c279bfdf03c6.roa
File:                     81b30814-d14d-3119-b7df-c279bfdf03c6.roa (raw, json)
Hash identifier:          HXM3YSCACuTnPHo20Sh3jhqESsBXTFwSqzRjNRpKBao=
Subject key identifier:   34:A6:FB:16:F6:D7:2E:6A:1E:9F:2A:70:78:B2:0F:41:FB:ED:BF:05
Certificate issuer:       /CN=25b8413b-5254-4959-a9f1-d00f0fc1b819
Certificate serial:       010D0C9F432858497AD9BD874860FAE4210DE8C0
Authority key identifier: 9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/81b30814-d14d-3119-b7df-c279bfdf03c6.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     33523
IP address blocks:        150.250.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:bd:87:48:60:fa:e4:21:0d:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25b8413b-5254-4959-a9f1-d00f0fc1b819
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=2ea71107-fb7b-4e05-9673-85a4109a1746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:55:7b:45:e2:db:a5:85:76:0d:0c:4b:73:20:
                    07:03:c0:41:89:85:3b:02:bb:63:cb:e0:47:58:92:
                    a9:48:14:02:c7:aa:c0:e4:33:5d:04:50:3c:73:19:
                    de:22:10:56:65:e3:a7:fd:ee:ee:55:ba:b5:d1:ca:
                    06:94:55:b9:7c:6c:ad:05:c5:0e:5b:44:8c:a4:fc:
                    9a:aa:a7:4d:58:a3:5c:62:7a:50:d5:b6:09:10:55:
                    eb:1a:94:e7:c8:e4:b0:5b:c0:0a:5f:8f:f9:73:06:
                    71:8e:42:6b:bd:b6:76:4c:ca:06:6f:d1:a8:df:61:
                    d8:de:f8:93:5e:4f:64:10:78:f0:72:01:60:93:c7:
                    91:9d:89:01:c5:b9:c4:d8:a2:18:13:a6:5a:91:f9:
                    ce:e2:11:4a:2f:41:4f:05:aa:27:24:d5:98:cc:6c:
                    0d:e6:32:1d:2a:f3:85:9a:66:4f:3d:d8:8b:d7:97:
                    19:9f:47:e5:7d:fb:7a:cd:fc:3d:f7:44:5e:e3:87:
                    7a:df:fc:3e:52:88:cc:3e:5c:07:da:36:55:63:23:
                    ae:0c:01:b1:ae:44:68:16:c8:44:26:c6:45:ad:24:
                    03:af:86:7d:d6:63:8a:2f:aa:3f:b0:4a:5a:34:57:
                    e4:59:fa:dd:29:9c:fd:9c:8b:a3:9c:16:62:a3:aa:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A6:FB:16:F6:D7:2E:6A:1E:9F:2A:70:78:B2:0F:41:FB:ED:BF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/81b30814-d14d-3119-b7df-c279bfdf03c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.crl

            X509v3 Authority Key Identifier:
                keyid:9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:6c:67:9a:4d:e3:28:1e:d0:dd:91:30:4c:81:59:2c:c7:3c:
         1a:ab:d5:21:3d:43:de:4c:15:e7:f5:d4:a5:c4:7e:25:07:4f:
         f1:08:4c:2f:29:66:b6:0d:bd:8f:f5:e0:69:45:e0:c4:1c:a6:
         ae:60:45:ba:77:37:3d:41:9f:a2:b0:2e:f2:56:44:c7:f5:ee:
         df:9d:79:5f:18:4a:13:cf:e2:34:51:b1:97:95:a4:73:83:fc:
         6e:14:8f:d1:aa:be:4e:10:af:a9:0a:8e:08:58:99:53:f3:4d:
         e9:87:bb:09:e5:f7:7f:9f:3d:6a:54:5c:24:fc:f7:41:0a:6e:
         9e:82:29:8d:65:21:4b:48:2c:44:12:b3:38:6e:fc:06:e2:c8:
         72:8b:eb:75:e0:3f:ec:20:6c:33:bf:32:eb:5e:cc:08:ac:e8:
         6b:81:f2:f6:36:0b:2c:bc:95:8c:22:f3:e8:38:65:03:93:07:
         87:0b:93:a9:fe:4a:dc:6d:73:bd:d4:ec:91:bf:28:80:29:29:
         60:ab:71:5c:d4:f6:81:0c:02:76:2b:55:38:6b:ae:6b:81:5a:
         49:54:4e:c6:8f:43:c2:da:7c:99:13:24:e0:59:0b:00:d9:9d:
         12:3e:dc:7d:36:3d:e1:28:8c:77:3f:44:fa:62:36:72:74:65:
         74:d4:53:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:25:14 2025 by rpki-client