Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
File:                     e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa (raw, json)
Hash identifier:          Vvo5ZXtuHsM+NJBCrf1HJPxHZcDHaDS8ARVGf1Fi0iA=
Subject key identifier:   68:2F:2F:50:81:97:AD:09:18:B0:6C:CB:6F:5B:BC:50:62:40:D5:FB
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F43285849E91FA5C24BB2534BDF07B360
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     394437
IP address blocks:        198.35.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a5:c2:4b:b2:53:4b:df:07:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=c607ec03-2546-4db2-a287-5673eb5d524c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:dd:49:19:48:01:b0:d6:89:11:da:e6:b9:
                    47:4e:0e:96:5a:e3:b6:1c:57:2f:2d:67:30:9b:48:
                    77:37:fe:82:b4:fa:f9:b8:8d:f0:64:0a:fd:9b:c6:
                    20:16:29:38:ca:04:60:48:a6:57:c1:b6:1a:ce:79:
                    78:55:cb:ee:b3:e7:85:7b:f2:f3:db:04:c6:50:0a:
                    a3:6e:39:d4:bf:58:1c:33:29:7e:c9:76:77:ce:06:
                    12:0f:9b:95:96:5e:b2:93:60:8a:2c:8a:cc:0f:49:
                    12:6a:6b:90:6a:03:b3:66:f3:4e:73:82:d4:a3:23:
                    d4:31:14:f3:b0:1a:23:6a:52:3e:9a:37:37:6c:5a:
                    52:f5:5e:94:cd:8b:4e:12:4c:c8:c2:4b:2a:42:90:
                    68:9f:49:2a:cc:12:10:ab:47:21:60:84:ff:7c:67:
                    8a:16:bf:45:e4:e9:da:a0:9c:fc:b5:00:44:57:2f:
                    8d:b6:1f:56:e4:93:74:d6:72:6d:60:e9:d2:76:e6:
                    b1:5f:1f:f3:e3:b3:b3:b2:39:90:dc:f3:e2:a4:67:
                    c8:b8:02:8b:71:d3:16:d5:2a:81:b8:a5:fa:91:2f:
                    27:4e:0e:81:05:88:85:08:94:f5:69:b3:26:e2:99:
                    90:fc:12:84:60:0c:6a:1d:e8:64:75:80:5a:e9:1f:
                    31:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2F:2F:50:81:97:AD:09:18:B0:6C:CB:6F:5B:BC:50:62:40:D5:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:25:0f:47:5b:d7:cc:a5:1d:c4:a5:fb:c8:9a:bc:3c:d7:
         e6:79:90:b9:96:09:c4:f5:b9:b3:c3:0f:fa:30:a7:d1:7f:05:
         f3:76:63:74:14:21:14:66:d8:54:4a:81:bb:06:bd:79:26:cd:
         ba:9e:da:1a:dd:3e:7f:50:60:8e:06:7e:76:3c:4f:40:90:e6:
         b9:89:dc:58:ce:91:9f:50:0a:69:38:60:a9:a2:5e:52:95:6f:
         ee:b9:5f:f4:8e:a9:1f:2a:5a:96:22:8d:f8:f1:1e:99:a7:21:
         7c:25:f0:6f:b4:b1:6b:bd:91:5c:3b:97:bf:e6:43:ea:55:aa:
         d5:01:78:65:34:e0:60:b8:ac:82:09:07:5a:1a:56:ac:ec:70:
         db:2a:0f:8a:89:72:41:16:4f:27:4d:ee:8f:70:1e:d4:45:87:
         48:12:9c:67:85:93:93:22:d5:62:f4:1d:44:cf:ef:82:31:4f:
         e3:d1:71:f6:05:a9:c9:53:24:02:fa:50:24:34:a1:7c:de:b0:
         40:a8:91:f0:78:96:da:1c:83:f5:0f:90:f5:36:41:16:1b:59:
         a1:23:1c:00:c1:d8:ef:78:eb:79:3c:69:45:ad:de:1c:61:cc:
         b1:1c:c9:70:24:5c:98:f9:39:12:1c:07:de:c6:30:02:0d:74:
         69:b8:59:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:48:40 2025 by rpki-client