Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/44e8f65f-ce57-333c-a470-bc9213b738ea.roa
File:                     44e8f65f-ce57-333c-a470-bc9213b738ea.roa (raw, json)
Hash identifier:          Ggm7MdwreEEz/dF0nfUEqqkqVcoIdRTsyxv+qkdQD8w=
Subject key identifier:   DD:F0:FF:75:EA:36:9F:7B:7A:5F:2D:52:87:C5:1B:C2:43:F5:23:D9
Certificate issuer:       /CN=08e01c34-608c-4615-9e00-7b09e447bf4c
Certificate serial:       010D0C9F43285849C904EE0B936BF8506E689B00
Authority key identifier: 4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/44e8f65f-ce57-333c-a470-bc9213b738ea.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     15116
IP address blocks:        198.182.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ee:0b:93:6b:f8:50:6e:68:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e01c34-608c-4615-9e00-7b09e447bf4c
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=25fc7644-1fbd-4903-8829-d2389398d43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:3c:f4:a2:56:a3:11:a1:55:bf:21:35:1e:
                    e4:82:25:ea:cd:fd:09:b3:9b:fb:03:f8:38:4b:6d:
                    6f:5f:c5:c0:60:9b:3f:ee:11:bb:35:93:f3:f1:9b:
                    23:4f:b9:36:d3:f2:6c:53:d6:46:f5:92:83:de:98:
                    fa:44:15:26:80:dc:93:6b:a7:1d:46:12:30:ab:ff:
                    54:f1:04:71:fa:42:10:88:ff:a0:6c:d8:b4:be:4f:
                    fc:6f:22:e9:f2:3b:0f:cd:25:c0:3f:58:cc:80:36:
                    18:26:ca:d6:b7:23:35:a7:f4:00:11:e2:22:a6:d1:
                    7c:a6:44:a8:9e:7e:6f:97:49:70:28:f7:12:62:c1:
                    9e:59:05:0c:90:31:86:67:e8:38:c9:7f:f2:87:60:
                    83:3e:49:71:ba:bb:5b:40:1a:58:b1:77:be:7c:ec:
                    03:7f:f2:9b:fb:dc:24:34:29:d0:b7:7a:20:10:09:
                    11:01:fe:4f:cf:1a:21:35:99:57:ac:18:2f:71:b1:
                    a0:cc:1a:26:9a:89:d3:0e:c9:89:cb:35:fa:ff:f6:
                    bb:33:42:37:7b:90:ed:e7:47:91:7f:47:b0:02:72:
                    42:9f:4b:ce:3b:f0:a1:ab:2d:7d:c6:e6:0e:b0:99:
                    93:8b:cd:61:e7:5f:27:7a:0c:4f:1e:b3:93:86:db:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F0:FF:75:EA:36:9F:7B:7A:5F:2D:52:87:C5:1B:C2:43:F5:23:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/44e8f65f-ce57-333c-a470-bc9213b738ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.182.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:c3:68:c1:cb:a7:28:e5:76:0b:74:1c:91:cf:e6:dc:a2:
         82:c7:82:bc:77:65:8d:50:3d:b6:c1:96:fd:ea:fc:8f:65:2f:
         b9:8d:63:3e:f5:74:4c:00:d3:88:82:55:03:38:ab:a7:5d:9b:
         a9:fa:47:06:19:b0:e5:62:03:97:03:e3:98:6e:94:0b:0b:17:
         41:4a:06:4f:b6:05:1a:a6:8d:bd:60:0b:10:2f:7f:c9:00:6d:
         37:a2:9f:38:3d:44:01:05:f7:62:ee:9f:8f:d9:f2:c8:24:88:
         88:40:b9:37:53:d4:0b:23:cd:d2:42:b3:2f:f2:33:45:aa:98:
         3b:ac:19:a3:c8:60:ba:73:77:83:fc:88:02:df:17:8f:df:2f:
         9e:04:24:5a:66:98:29:25:8d:bc:f4:fc:9a:a5:9b:ee:10:07:
         df:f5:ac:93:7b:af:79:67:ba:ff:ca:f6:9e:4d:93:94:69:52:
         b2:1b:55:84:a1:49:07:8e:81:52:25:1f:da:d7:2a:86:c7:bd:
         3c:f8:1e:69:15:fc:fb:1e:9b:b0:69:63:1b:7c:71:7f:93:92:
         7d:43:1e:f4:25:f2:01:f5:6a:ab:66:d3:60:97:36:66:25:4f:
         ac:43:29:e0:44:f9:56:e5:c3:b9:83:9c:bd:2f:7f:88:31:ae:
         a6:d5:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:01:01 2025 by rpki-client