Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/bdb6738a-a5b9-35fc-968e-9eeaf4ed41be.roa
File:                     bdb6738a-a5b9-35fc-968e-9eeaf4ed41be.roa (raw, json)
Hash identifier:          Jw0fTKi8XuVShwtCypNBhEoSINaF+wtRyLqrNcPANTw=
Subject key identifier:   C6:A3:8D:27:E1:5F:4F:86:8A:A7:4B:E8:E2:74:FC:FE:E2:20:9B:A6
Certificate issuer:       /CN=27a0a206-0e8b-48c1-9191-51dfb13bd365
Certificate serial:       010D0C9F4328584AECC14A05133B00296DFB1100
Authority key identifier: 5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/bdb6738a-a5b9-35fc-968e-9eeaf4ed41be.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        167.251.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:4a:05:13:3b:00:29:6d:fb:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a0a206-0e8b-48c1-9191-51dfb13bd365
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=89f6fdf9-f842-4015-a776-faea9bb2a79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:88:a7:93:79:26:7c:44:65:4e:35:89:1a:76:
                    41:38:ea:35:27:59:be:8e:58:b5:bb:0c:c6:9f:26:
                    9f:40:29:81:74:04:57:ed:9a:9b:fb:80:b7:bb:00:
                    c7:cc:13:fe:02:57:f6:8c:cd:48:26:c4:f5:5e:ec:
                    62:61:ff:65:d9:e3:77:7a:6c:e7:15:6d:07:d5:90:
                    e1:dc:7f:b2:3b:f3:3e:6c:47:a0:58:cd:9d:95:d2:
                    85:60:75:87:a3:a0:91:7a:e2:77:2d:c2:82:5e:2c:
                    e1:aa:ac:71:2d:73:bb:d9:f0:85:ed:8c:de:47:da:
                    bc:de:cb:a6:71:cf:48:df:83:cc:91:3a:35:95:2e:
                    c5:2d:2c:d8:23:d5:9e:d6:3d:06:39:77:f1:cc:46:
                    5f:4f:65:5d:61:ec:6b:f5:c0:a1:9c:37:1a:94:2f:
                    31:a3:3c:6d:e5:a9:b2:79:c2:69:21:b9:ee:41:c1:
                    88:d3:c1:8d:92:6c:fa:b2:ea:75:ab:d3:da:fb:2e:
                    b5:bf:d5:62:44:4b:c5:30:17:57:43:59:9b:66:19:
                    c7:b9:19:12:a0:b5:39:93:99:c2:ed:9d:be:88:12:
                    c6:5f:9c:3a:f7:c0:c1:f5:14:17:0f:cd:86:ea:a2:
                    01:49:62:45:d0:50:4c:c8:2e:8e:57:1a:df:19:34:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A3:8D:27:E1:5F:4F:86:8A:A7:4B:E8:E2:74:FC:FE:E2:20:9B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/bdb6738a-a5b9-35fc-968e-9eeaf4ed41be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.crl

            X509v3 Authority Key Identifier:
                keyid:5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.251.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:0a:75:ea:47:ad:35:54:41:db:db:ec:1a:fb:a2:cc:d9:c7:
         81:32:59:ca:83:8d:11:6f:c1:3d:fc:33:27:21:dc:b8:0a:0c:
         e7:3f:17:ff:7d:8c:4c:47:e5:89:f7:5e:a2:9d:77:51:fa:5e:
         33:ff:29:2a:60:55:c5:ab:76:1b:03:6f:01:4a:90:a8:6f:c6:
         a9:d7:f5:87:24:96:1b:29:f3:d8:75:fe:06:24:22:fc:a3:d6:
         cd:f2:06:2b:81:37:79:b8:2b:93:da:9c:3a:41:c0:1b:18:84:
         82:35:9d:40:5e:b1:ab:9a:f2:45:d3:d2:05:cb:1d:7c:c1:01:
         41:a5:d9:ba:2d:1c:23:4f:6a:63:02:a0:db:49:33:fb:57:33:
         68:97:3b:0d:0c:01:e5:eb:b5:46:92:8a:cc:5e:b5:16:d0:19:
         3c:17:72:5f:9e:4a:4c:67:d9:34:24:a1:71:96:20:18:66:ae:
         ef:16:36:6b:5b:70:64:51:e9:5a:3a:1b:81:8e:39:14:2d:e4:
         fe:b2:8e:ca:7d:54:62:33:67:7c:b1:09:c2:60:7a:6c:6d:2c:
         72:9c:14:ee:ca:c2:62:f8:c3:08:cb:2e:7f:32:4a:b1:b2:aa:
         f9:ab:72:7e:3b:d7:ef:37:ab:37:89:3d:72:ed:5e:72:06:20:
         78:3a:c9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:58 2025 by rpki-client