Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/5e24a212-ff8c-3f99-b45f-f90ef0c7f813.roa
File:                     5e24a212-ff8c-3f99-b45f-f90ef0c7f813.roa (raw, json)
Hash identifier:          RruB9iBzxmTI9FOSNf9riIl5gf4/vLrIDMbcliZbn0Q=
Subject key identifier:   5C:30:7A:C2:D2:77:E8:DF:88:C6:8F:92:8D:2C:1E:A1:B7:39:4F:59
Certificate issuer:       /CN=f8377ba0-d92d-4969-a666-84ce4e67eb24
Certificate serial:       010D0C9F4328584A3B7AF399AA5FFD3F76E74E00
Authority key identifier: FE:5F:C0:80:58:74:0D:BE:B7:4A:A8:60:2D:D3:71:E8:85:23:D1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/5e24a212-ff8c-3f99-b45f-f90ef0c7f813.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     396982
IP address blocks:        149.77.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/f8377ba0-d92d-4969-a666-84ce4e67eb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/f8377ba0-d92d-4969-a666-84ce4e67eb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f3:99:aa:5f:fd:3f:76:e7:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8377ba0-d92d-4969-a666-84ce4e67eb24
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=532f587a-0cc1-4dea-9149-533c51a7b24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:9f:dd:8b:9a:fe:d5:f0:54:e7:9b:90:50:
                    48:e3:d3:90:72:72:7f:e8:6c:57:b1:7a:74:c8:b9:
                    4a:16:82:ef:1a:c8:56:64:99:68:29:81:d8:0f:55:
                    e9:94:59:61:b9:8f:67:3b:93:2d:5b:48:1c:57:55:
                    42:3e:3a:5d:03:77:36:9b:83:2a:fc:c8:86:f8:29:
                    41:05:71:7b:ec:e5:f7:c5:37:f6:42:15:49:03:e1:
                    fc:92:60:b0:17:66:cd:db:1f:67:99:91:a9:bd:4b:
                    75:60:1a:3d:d7:13:70:91:c5:af:8f:ea:a6:3d:ad:
                    79:50:c5:6a:2c:4c:9c:6b:73:50:1c:50:c2:b5:ae:
                    76:6b:be:8e:9e:47:7b:21:c4:16:6a:9d:39:58:5c:
                    e3:47:59:62:de:71:a4:bb:99:de:a0:94:53:09:66:
                    e4:9b:31:6e:33:1b:d4:43:1c:ac:56:b6:53:43:1c:
                    ed:89:1b:c1:49:4b:1b:1e:68:07:73:01:70:e7:45:
                    38:fd:1d:75:cb:42:1d:58:ad:6d:7f:3c:08:50:bd:
                    e1:d0:65:b0:e9:8c:42:19:40:b8:81:e7:e9:7e:22:
                    a7:86:ed:98:0d:d0:0b:db:89:71:54:49:2b:b5:3b:
                    9b:99:bb:c3:6c:25:56:59:e1:e7:3e:bc:cb:3f:33:
                    a2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:7A:C2:D2:77:E8:DF:88:C6:8F:92:8D:2C:1E:A1:B7:39:4F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/5e24a212-ff8c-3f99-b45f-f90ef0c7f813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/f8377ba0-d92d-4969-a666-84ce4e67eb24.crl

            X509v3 Authority Key Identifier:
                keyid:FE:5F:C0:80:58:74:0D:BE:B7:4A:A8:60:2D:D3:71:E8:85:23:D1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.77.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:6f:2c:a9:4c:4f:c9:bb:52:2a:69:02:d1:d7:06:1e:06:50:
         a6:53:c9:46:97:d8:d5:13:88:bd:d1:65:c7:2e:d0:c3:b8:5d:
         31:4b:2a:28:60:54:0a:f3:0b:74:55:8d:ca:35:44:c6:9f:d2:
         ff:29:da:af:db:ab:d4:2e:0c:9a:a6:45:4e:0c:38:17:89:65:
         7c:5f:39:de:8b:ca:eb:68:38:7a:57:94:80:e4:8b:16:a5:56:
         21:af:5a:7a:ee:56:58:eb:3d:70:a7:fd:66:0e:78:03:f5:71:
         fc:fa:a0:e3:3d:cc:8a:e6:8c:ae:06:5b:08:d1:c8:f4:3c:69:
         aa:21:d7:12:e6:eb:19:be:5c:cf:d1:71:37:20:c9:60:64:c3:
         44:d8:2b:2a:d4:87:d5:46:7c:52:c3:d4:ae:7e:69:94:e5:fc:
         3c:3b:fc:61:f3:b4:03:6e:5e:45:da:bb:d2:af:02:63:c3:f2:
         0e:11:e7:82:fe:fd:78:64:b3:3a:32:93:b8:12:9a:15:2d:b0:
         d6:18:cd:ab:be:36:80:a7:04:68:30:9f:dc:c0:50:04:b8:18:
         04:f5:8c:41:20:16:27:dc:af:74:a8:d6:a4:6a:17:de:33:9a:
         30:a1:fc:cd:91:0d:f6:a7:a9:43:50:6b:8b:67:fa:8e:8a:6a:
         ea:3d:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:41:32 2025 by rpki-client