Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/964546bd-d3be-387c-9014-6b3630a3ee7e.roa
File:                     964546bd-d3be-387c-9014-6b3630a3ee7e.roa (raw, json)
Hash identifier:          1iXi22fU7Go3/zuQVVTXf6FwFwvqdaJ7O2FS8M7gX/I=
Subject key identifier:   BF:55:86:D1:6B:7F:7C:DA:76:B5:30:F6:CA:09:17:F0:A7:1B:5F:16
Certificate issuer:       /CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
Certificate serial:       010D0C9F43285849AE7C99046C35BEEF7E1A4E00
Authority key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/964546bd-d3be-387c-9014-6b3630a3ee7e.roa
Signing time:             Tue 29 Apr 2025 00:55:32 +0000
ROA not before:           Tue 29 Apr 2025 00:55:32 +0000
ROA not after:            Mon 28 Jul 2025 00:55:32 +0000
asID:                     16509
IP address blocks:        206.15.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7c:99:04:6c:35:be:ef:7e:1a:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
        Validity
            Not Before: Apr 29 00:55:32 2025 GMT
            Not After : Jul 28 00:55:32 2025 GMT
        Subject: CN=c29377c5-fcf3-496c-ab1d-6e2fa3f3628a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:c8:57:1f:be:12:1a:0b:52:c1:88:d3:e7:
                    5a:89:61:ef:b5:45:d0:88:5d:c4:b6:7b:18:f5:0e:
                    ec:66:f8:f3:13:ce:ac:b2:d2:68:f4:2c:3d:ec:04:
                    26:df:50:9c:68:2d:b0:71:6a:73:0b:66:c9:90:5b:
                    0b:9c:84:9b:fa:87:da:36:50:d4:c4:90:b3:61:f4:
                    98:b4:28:1c:89:0f:96:58:aa:95:6f:42:06:07:6e:
                    c4:3b:5d:2f:01:9d:5f:5a:43:56:4e:64:82:ad:65:
                    d8:85:3d:b3:99:58:6b:64:74:fd:26:5f:7d:c5:bf:
                    78:64:63:b4:31:2f:b3:9c:98:0b:5b:ed:59:9d:16:
                    20:b9:07:87:2f:c6:bd:4c:2c:ca:b9:be:2b:31:bc:
                    c1:da:c1:b6:38:85:b9:2b:8d:f0:1f:01:5c:4c:6f:
                    51:a1:e9:57:2d:e3:89:f6:05:c0:b3:7e:c3:cc:ac:
                    4e:a2:04:04:76:14:2b:ed:dd:e5:0f:87:1a:3a:14:
                    d5:a1:a5:f4:d6:f6:2b:f6:8f:91:9e:dc:5d:d8:a4:
                    e3:38:02:0d:47:ed:18:92:4c:64:60:81:80:b9:c1:
                    eb:01:c3:cd:14:46:f4:ab:f5:c9:e1:8d:98:1c:3f:
                    54:1a:1d:fa:cd:96:25:94:e9:1e:38:20:7d:d4:dd:
                    75:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:55:86:D1:6B:7F:7C:DA:76:B5:30:F6:CA:09:17:F0:A7:1B:5F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/964546bd-d3be-387c-9014-6b3630a3ee7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8f:ae:6f:aa:99:e4:cf:a5:ad:27:2b:4e:b9:c3:00:f6:dc:
         43:d2:7b:cb:7c:8a:2d:d3:e1:d2:04:07:52:f1:07:a4:72:48:
         80:66:bd:47:f0:31:b4:a1:7f:f3:5e:80:95:29:80:ba:7e:34:
         6c:17:be:fb:7a:fa:4a:7d:fe:19:49:14:e4:c6:a7:ff:52:07:
         a9:cb:b3:a1:23:41:2c:3a:a2:5d:c6:cb:bb:65:76:6e:d7:ba:
         30:81:1f:a0:f3:09:13:55:f1:53:f7:0c:e8:01:46:3a:a4:eb:
         c8:ec:46:65:fa:62:49:1d:24:09:d2:72:f3:7f:a7:bc:c8:1e:
         c6:77:18:13:19:e3:bd:3e:e5:91:8b:47:a9:79:7e:9c:45:c6:
         05:70:ab:41:d6:de:50:ef:dd:9c:cf:ea:17:15:cd:c9:83:71:
         36:76:1e:82:73:9c:de:fa:3a:82:0a:c6:55:1a:68:c0:8e:42:
         00:76:d3:0b:ff:1b:ec:c5:01:7e:dc:23:fc:ed:eb:4f:92:63:
         bf:b4:bc:d7:b8:b3:10:a4:cc:15:54:95:56:b4:98:31:69:8d:
         f9:89:de:98:ef:aa:68:da:b9:99:72:cc:8f:01:34:3a:a4:71:
         b5:06:d1:c6:1e:d7:ab:29:e3:7b:30:de:da:fb:69:1a:2c:d6:
         62:30:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:30:50 2025 by rpki-client