Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/121682d9-0042-3d35-9285-843fe168fa1e.roa
File:                     121682d9-0042-3d35-9285-843fe168fa1e.roa (raw, json)
Hash identifier:          B4Ph7dY8vlKOBewSk5v4Jweykng8LilnVj1e9opxbvY=
Subject key identifier:   0B:5F:55:BB:B0:48:DF:72:6B:F5:A9:9F:05:FD:13:9C:95:18:97:64
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584A2D857FC129B56DF2D44F7180
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/121682d9-0042-3d35-9285-843fe168fa1e.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     46562
IP address blocks:        198.145.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:7f:c1:29:b5:6d:f2:d4:4f:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=07786bdc-e564-4aea-b092-920f7a54cb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3e:b6:77:e4:bd:34:67:4c:60:ce:da:f5:1b:
                    b8:8e:45:45:56:23:7e:25:00:92:e3:18:46:8e:3b:
                    f9:55:4a:34:23:87:8b:5e:64:dd:d0:1b:65:09:90:
                    d9:d7:3d:03:01:18:6e:ad:65:cb:7c:c6:15:fb:b6:
                    a3:df:99:f9:68:26:b8:7c:d3:1f:ad:83:ae:c0:c5:
                    21:d7:6b:ec:17:d0:68:76:76:49:4c:6e:60:e6:30:
                    6d:34:89:4e:9d:ed:42:4d:b5:b5:82:39:cd:05:b2:
                    09:b4:c6:d8:a3:52:3d:50:9a:dc:4f:83:15:42:6c:
                    a0:74:f2:8f:47:07:81:81:92:cd:a5:b7:f6:94:c5:
                    ad:9e:c8:ce:f8:d0:2f:8c:03:71:32:57:b4:b3:90:
                    d7:f3:eb:07:00:1b:c8:7d:82:79:55:58:8b:88:fa:
                    dd:15:41:22:10:04:0c:8c:98:09:f9:e7:35:2e:78:
                    3d:79:a7:d2:3f:17:c0:b2:86:66:c4:38:1a:86:d5:
                    ce:82:22:64:93:a4:bb:87:33:dc:04:8d:b8:a6:38:
                    aa:00:7f:fa:21:e4:b2:12:c1:9b:d7:61:f7:92:6c:
                    68:02:b1:7c:21:39:21:1e:55:ce:b3:f9:a8:b6:a8:
                    90:50:e2:d4:72:03:d7:a9:a4:c2:d7:4d:bd:92:ad:
                    a8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5F:55:BB:B0:48:DF:72:6B:F5:A9:9F:05:FD:13:9C:95:18:97:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/121682d9-0042-3d35-9285-843fe168fa1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:90:e5:3a:7e:2a:6b:e3:28:9d:e1:8a:63:ce:51:a9:84:91:
         ed:3e:00:76:8c:b4:cf:7d:72:b8:a0:55:28:a8:78:35:4a:18:
         61:8e:0e:4e:d4:42:b9:1e:f8:0a:83:32:59:59:59:36:86:75:
         91:7d:d7:c2:55:3c:0e:c2:e4:6c:42:af:23:cf:10:f4:cb:6a:
         2e:da:35:8b:15:ec:8f:f2:ca:76:6b:03:63:84:31:bc:da:2a:
         a5:6e:11:6c:8d:7f:68:e8:b5:54:d6:e0:ae:f5:68:ab:b3:e8:
         d5:7d:2d:1f:f0:c2:9d:70:c4:d6:5a:35:3f:96:66:65:08:7b:
         5d:9d:0f:c7:73:cf:c2:4e:b4:e0:c0:7b:ff:1b:13:76:6c:23:
         4d:4e:04:bf:e1:2b:74:66:11:bc:13:b4:67:c2:fe:b6:c0:61:
         c1:e7:11:30:31:fa:f2:80:07:82:db:86:80:a5:04:f7:6f:74:
         56:d7:0c:78:f9:33:82:ed:c8:7a:fe:12:14:1f:89:e6:4b:70:
         4a:23:ef:b1:80:b8:cd:fd:60:42:ee:e1:24:1e:fd:81:c5:16:
         6a:73:02:83:7a:40:a5:c5:ef:f7:b5:82:be:5c:49:32:f7:dd:
         45:50:11:1f:fa:06:5c:e8:96:58:c0:f5:dd:34:c0:db:b8:06:
         f8:62:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:26:02 2025 by rpki-client