Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/8158f8a6-7717-3c4d-8253-18c3677c262c.roa
File:                     8158f8a6-7717-3c4d-8253-18c3677c262c.roa (raw, json)
Hash identifier:          7y2NNbmCmbbMd8RV/wqERURgJ+P/CTprJuGUbwRxmoY=
Subject key identifier:   FB:C8:E6:B2:A7:12:ED:5E:67:CD:68:E2:91:E7:66:6C:2B:17:5C:62
Certificate issuer:       /CN=48e7861e-5414-403c-8268-a7d7b18f405d
Certificate serial:       010D0C9F432858499DBF2F99EA6A3A7AF41ABF80
Authority key identifier: 4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/8158f8a6-7717-3c4d-8253-18c3677c262c.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     20325
IP address blocks:        198.27.29.0/24 maxlen: 24
                          198.27.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:2f:99:ea:6a:3a:7a:f4:1a:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e7861e-5414-403c-8268-a7d7b18f405d
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=3c08f0d4-5cef-4908-b98c-7eb51363e958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:f7:3e:04:d7:1f:35:ca:7a:35:0b:ff:4a:
                    15:66:86:00:3e:22:97:6e:1a:14:48:ee:19:53:23:
                    81:55:f7:37:90:5a:a6:e9:fd:af:6e:d4:4f:55:e3:
                    c3:e4:29:90:cf:fe:9b:1b:9e:c0:4f:8c:61:7d:d2:
                    85:09:c6:42:49:76:b6:b1:de:ed:10:7d:4a:50:79:
                    b6:17:bb:7d:83:8c:c2:80:fe:84:13:75:f9:31:86:
                    24:6d:11:bf:62:74:a3:72:8a:8b:41:23:d1:f5:03:
                    ce:ea:fb:97:fd:46:d6:f0:fe:99:99:ed:c9:83:f7:
                    2d:07:23:96:ae:45:ed:18:f8:e5:b3:a3:57:4a:b3:
                    7b:45:72:b3:00:0e:da:89:73:16:73:77:08:27:60:
                    c8:14:0d:56:6b:0a:86:b4:a5:15:c9:e9:c9:bb:07:
                    c3:ed:b6:e1:06:d6:57:1f:d2:bc:7b:e1:b4:18:c6:
                    ca:f6:5c:b0:27:d7:33:96:5f:cb:fe:3c:de:f7:bf:
                    13:7a:07:8b:f3:31:e4:46:6f:10:12:6b:96:ce:43:
                    63:dd:10:92:43:ed:aa:9d:87:ff:83:49:30:07:6e:
                    38:31:91:55:21:b2:22:8b:6a:99:dd:ff:0f:23:e3:
                    a7:42:58:79:a7:92:5f:0f:b4:61:ce:b7:71:44:4b:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C8:E6:B2:A7:12:ED:5E:67:CD:68:E2:91:E7:66:6C:2B:17:5C:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/8158f8a6-7717-3c4d-8253-18c3677c262c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.27.29.0-198.27.31.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:af:28:66:c8:cc:fb:a1:fa:dc:ca:35:34:c8:61:ab:11:1f:
         ec:d8:ab:74:92:e6:65:6b:97:4d:ea:12:9d:5e:8f:8f:84:f9:
         dc:66:ec:e4:78:ca:54:c8:38:4a:ae:7d:7f:e1:a7:c6:d9:c7:
         89:ba:6a:3e:03:12:65:21:66:b3:4c:5f:d0:29:5d:6b:f7:e7:
         86:e7:b6:74:2f:a9:25:4e:67:6e:b2:f7:3a:f9:db:ea:79:58:
         e8:cc:5c:eb:3c:91:15:4d:98:65:54:47:47:13:6e:e2:16:6b:
         90:c8:17:e4:9e:f0:6f:32:06:12:c1:31:f3:2f:25:ec:09:79:
         a3:b8:60:ef:b4:a5:24:36:28:37:35:a6:b5:e3:9f:a2:f4:12:
         a6:cd:ad:27:ba:9e:53:09:ed:a6:5b:02:6a:7f:70:f7:27:77:
         24:1d:e2:79:ed:4f:e7:72:f2:60:37:c3:7d:33:6c:ec:98:90:
         d3:05:e0:d9:8e:dc:e2:42:0b:e9:15:d1:e7:c4:45:43:c5:9b:
         c0:fa:23:c6:7f:02:f8:d1:2c:2c:96:12:60:ae:d4:3d:83:d0:
         19:63:07:4f:b4:09:ec:07:5b:c1:20:0d:3a:9b:c1:78:01:e0:
         77:38:03:59:73:d9:8e:67:de:b1:5d:0b:15:f8:fe:ef:4e:9c:
         b8:66:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:18:16 2025 by rpki-client