Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa
File:                     9b1c53d7-a055-3051-9111-c6f8e5def468.roa (raw, json)
Hash identifier:          MOyEhNGipkC832dt/FPCXI0wgK7WgkJfGPLwEGmYjJw=
Subject key identifier:   F1:1E:2A:EF:36:03:F1:91:BE:AA:27:19:1B:6C:68:CE:26:A7:4E:FE
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C012567D17848C399E1A50
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        24.149.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:12:56:7d:17:84:8c:39:9e:1a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=e4121eba-3ddb-4d56-93dc-8dfebc2be91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:67:89:f3:75:c1:c6:94:5c:27:4d:00:f6:a6:
                    83:11:c3:55:f1:aa:e1:46:bc:c6:43:73:ba:44:33:
                    89:76:d0:3e:86:7f:13:fe:9c:49:99:46:00:ed:eb:
                    0c:ff:c9:cd:a0:9b:9b:31:30:c8:09:7e:c9:1a:35:
                    35:bd:e4:90:dc:75:b7:20:49:af:36:78:d7:46:2f:
                    da:97:64:34:e0:21:a2:8e:6d:f4:56:73:5f:98:18:
                    67:a7:30:1a:79:e1:fe:92:fd:40:f5:dc:1f:e7:0c:
                    5c:69:8e:a0:39:5f:bd:ac:bf:38:b2:bd:1b:c3:78:
                    64:c1:49:bd:8c:d7:5d:e5:f1:14:78:dd:ce:38:ac:
                    1a:38:42:40:88:97:22:fa:f9:26:4e:f8:78:e4:d0:
                    2a:98:c1:78:73:b3:f6:49:ca:ba:c4:bd:e3:a5:8d:
                    49:7d:5f:d4:2a:33:91:97:ba:9c:fc:6d:02:16:a2:
                    7f:5a:f0:ed:be:2a:16:6b:83:6f:f6:fa:2f:32:19:
                    5e:c4:14:c1:e8:6f:ec:0d:76:b5:bf:24:5b:2c:40:
                    c5:86:0d:9a:42:27:37:cf:b5:27:1b:50:ac:6b:c5:
                    15:97:15:75:8f:8c:e6:d1:ec:a6:9d:8e:dc:33:f9:
                    39:92:21:3b:e1:13:86:82:62:0c:d1:26:ea:e7:4e:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1E:2A:EF:36:03:F1:91:BE:AA:27:19:1B:6C:68:CE:26:A7:4E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:2c:d3:6c:72:ea:dd:b9:06:6b:b9:e7:6e:a5:3c:6e:ad:
         91:96:6e:78:0a:3a:f7:22:24:d6:3c:bd:90:f0:f6:b8:a8:f4:
         00:79:5f:ab:f5:af:04:fb:ad:0c:6a:46:2c:f7:02:17:35:b9:
         29:c5:d6:d1:16:ff:1e:21:c8:58:0c:49:96:03:9f:95:cd:73:
         3a:b2:32:d6:a2:0a:fd:69:1c:8e:97:58:e4:b0:89:7e:23:77:
         47:25:f8:6d:3c:c8:0a:b2:6f:39:71:27:ae:a3:b0:43:fd:b7:
         b2:2c:e8:27:69:3b:81:73:f4:48:cd:8f:d2:37:62:cb:0f:6f:
         d5:aa:6c:0a:90:46:97:11:40:05:42:d0:2a:ff:c3:4c:a6:ad:
         39:b4:da:e5:e4:9c:26:1f:99:17:38:39:02:e2:ef:a9:46:65:
         82:d2:28:ca:9a:cb:59:37:10:b3:b0:68:fe:ee:de:8d:7f:be:
         66:e9:7e:85:70:5e:bf:ee:27:3f:0d:20:31:e9:6b:da:a8:15:
         71:56:b5:8c:fd:02:1e:82:8f:09:7f:29:18:97:50:60:b1:de:
         9a:c8:06:d6:21:d0:66:a1:da:87:17:64:78:14:b8:1b:cc:9e:
         e7:84:44:b8:dc:97:72:15:0f:7a:10:0a:c0:0f:ba:40:99:a5:
         10:bb:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:15:45 2025 by rpki-client