Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4d834632-e4cf-33b7-affe-af1f8fa72096.roa
File:                     4d834632-e4cf-33b7-affe-af1f8fa72096.roa (raw, json)
Hash identifier:          RcHD8oR6yF5beKcgCdsAzcKSPGeU5iqT/LpDn6juSgc=
Subject key identifier:   BC:D4:97:94:64:7C:32:91:C2:46:23:40:22:42:8F:AF:CD:6D:25:DA
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584A46A5B13A2526C400F868F140
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4d834632-e4cf-33b7-affe-af1f8fa72096.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     2559
IP address blocks:        198.241.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:b1:3a:25:26:c4:00:f8:68:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=c14b00f1-16c6-4010-80b7-fc8b25e32f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:09:da:01:4e:f4:41:8f:a5:29:7a:0d:c8:
                    54:8f:9a:b4:54:2f:ab:fa:3d:9e:47:85:b7:54:2e:
                    26:ab:ea:bb:6f:7f:b5:b4:8f:28:87:16:c0:02:a8:
                    6a:3a:a7:73:3e:83:82:ae:be:78:83:1e:23:40:a2:
                    86:ed:41:d2:5c:1b:9e:d1:b4:5a:99:eb:7c:7e:e9:
                    60:9a:da:57:f6:d2:94:e6:34:bf:a8:20:08:28:ef:
                    41:86:8f:09:b6:fb:2a:cc:1e:3e:55:0d:3e:fd:35:
                    5d:64:98:fc:bb:98:48:bb:ec:42:97:db:69:9a:e2:
                    64:e9:f3:98:c2:b4:09:6b:e9:01:d7:0a:79:f9:7f:
                    56:81:9f:d3:fb:1a:c6:40:cc:ea:2f:47:47:19:70:
                    c4:11:68:f5:e4:1b:ec:60:00:9b:93:21:dc:d1:d2:
                    75:13:09:37:63:52:89:93:51:c5:d7:4e:f7:fa:8e:
                    59:3e:95:ab:8a:94:4a:d3:3d:28:7c:35:21:0b:36:
                    78:f4:9b:2f:68:50:a2:41:2c:54:09:31:4f:f2:d4:
                    8a:cc:0b:0b:d3:ef:f2:53:fa:20:6d:3c:de:e9:86:
                    e9:81:ce:2f:27:f9:69:00:4d:ac:f4:43:51:55:d5:
                    67:32:1e:52:c5:1e:6b:bb:c0:2b:42:68:c0:14:99:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D4:97:94:64:7C:32:91:C2:46:23:40:22:42:8F:AF:CD:6D:25:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4d834632-e4cf-33b7-affe-af1f8fa72096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:97:f1:c7:40:fb:f5:c8:fb:23:cb:6a:a3:a5:18:f3:5f:4a:
         b3:c8:29:65:03:bb:b6:03:aa:a9:f4:22:45:13:e7:7f:3d:a6:
         c6:82:2a:26:b4:b0:a1:b3:2f:50:21:b6:a6:34:8f:63:72:d1:
         1c:5d:3a:7f:de:8c:c0:2e:11:34:6e:6e:fe:18:fb:a4:22:11:
         a2:6d:6e:05:0c:aa:75:97:9d:25:89:4b:bf:56:9a:cb:56:2e:
         aa:94:16:34:77:e9:a1:e8:43:09:79:60:e5:eb:88:77:76:14:
         cf:bc:44:b6:ca:25:4b:c3:1b:71:70:58:15:cf:ad:bd:df:10:
         cf:f6:cb:6e:93:dc:ba:fe:4b:27:e3:0e:6c:86:10:bd:45:31:
         9b:e5:33:3f:3e:71:f8:ce:f5:2d:ff:42:a4:3b:22:8d:61:01:
         a7:28:6e:41:43:ac:1c:77:25:67:e6:33:32:a7:08:e2:26:f5:
         7f:18:7d:a7:9a:a4:dc:97:e0:2c:44:50:f8:5f:60:31:75:f4:
         5f:09:96:17:e8:fc:1e:32:1c:a9:d6:c9:14:6a:a8:3c:b1:f8:
         58:bd:99:ed:bf:a4:86:28:51:2e:a6:62:f2:dd:0d:6e:f4:d0:
         e9:4d:a5:17:a9:43:51:e3:64:ed:10:84:c5:6a:a4:62:75:88:
         a4:47:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:50:57 2025 by rpki-client