Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/b9b9a722-054c-343c-88bd-516515f8b0ff.roa
File:                     b9b9a722-054c-343c-88bd-516515f8b0ff.roa (raw, json)
Hash identifier:          MFa6FyDgydAiT+OXWaY0yAwQzeJi4JYF/H1H2DUDpI0=
Subject key identifier:   3D:66:AF:12:7F:2A:EF:74:C3:9B:F9:D5:96:8B:72:D0:4A:7B:75:A1
Certificate issuer:       /CN=92812057-2309-49c4-a842-f0f0c77f3471
Certificate serial:       010D0C9F43285849CBCF9B795A08FF7C2F723E40
Authority key identifier: F0:AD:25:73:62:F0:08:66:C7:7B:8C:7A:69:03:07:12:63:95:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/b9b9a722-054c-343c-88bd-516515f8b0ff.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     46848
IP address blocks:        198.51.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/92812057-2309-49c4-a842-f0f0c77f3471.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/92812057-2309-49c4-a842-f0f0c77f3471.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9b:79:5a:08:ff:7c:2f:72:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92812057-2309-49c4-a842-f0f0c77f3471
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=71651450-190d-459f-b98f-066432f5a602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:41:e0:ae:2a:90:95:78:3b:84:e9:cf:0a:
                    79:5e:1a:b8:08:79:03:66:ec:dc:e9:a0:3c:ad:89:
                    ae:e8:cf:9c:cd:15:67:37:6f:58:9b:c5:b7:51:30:
                    f5:79:dd:7a:bc:b2:53:b8:67:c9:ef:62:29:45:61:
                    85:9d:44:35:d7:5e:65:50:a2:f4:8a:98:13:f5:43:
                    62:60:4a:77:3c:1d:22:da:6c:54:7a:80:2a:56:92:
                    b2:2a:57:d1:43:93:d5:0f:35:10:cc:d6:04:14:71:
                    a5:50:18:cd:de:db:82:c0:4a:60:9d:c8:6c:d9:5a:
                    cc:5d:c5:c8:29:46:fd:3d:4b:8a:ce:96:32:65:5c:
                    b2:39:87:ac:dc:7f:ed:6e:4d:af:51:66:64:49:1e:
                    94:3e:01:3c:43:5b:ed:0e:cb:1c:e8:10:89:f5:b2:
                    22:d2:f2:61:f8:8b:1c:2b:f9:8b:dd:6a:f4:2e:6f:
                    cf:ea:f0:ee:22:f9:52:7c:ee:f3:2b:14:ac:0e:2d:
                    31:c1:2c:da:f6:91:55:45:59:db:de:ed:43:74:03:
                    ac:7f:2e:a2:64:c2:a9:26:f8:0a:3a:aa:b8:13:fd:
                    e3:17:ea:f9:d5:03:c6:73:3b:e5:a7:17:d2:a1:ab:
                    78:4d:d1:d1:5d:6c:2e:6e:cd:a5:ab:20:a2:9c:12:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:66:AF:12:7F:2A:EF:74:C3:9B:F9:D5:96:8B:72:D0:4A:7B:75:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/b9b9a722-054c-343c-88bd-516515f8b0ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471/92812057-2309-49c4-a842-f0f0c77f3471.crl

            X509v3 Authority Key Identifier:
                keyid:F0:AD:25:73:62:F0:08:66:C7:7B:8C:7A:69:03:07:12:63:95:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/92812057-2309-49c4-a842-f0f0c77f3471.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:89:fc:b9:4d:37:37:0f:72:5f:50:c7:48:41:69:5d:da:41:
         d1:f8:d1:cd:2c:23:69:0d:51:3c:c1:d2:7a:74:0d:87:a9:ee:
         fa:6f:67:aa:52:b0:e0:68:8c:aa:d8:a0:df:ea:85:d7:28:b9:
         ec:21:76:c9:87:1c:d8:fc:36:05:e7:49:80:0e:87:c1:12:14:
         42:24:1a:e5:b9:8a:da:04:c6:1e:53:fa:56:52:11:b3:e2:ed:
         ba:fe:05:d4:70:2e:5b:b8:5a:e1:ee:e8:c2:38:59:6b:10:ab:
         1e:8a:29:a6:ea:fe:90:81:5b:41:4c:19:1c:52:d6:b2:6a:b8:
         5e:da:04:3e:2d:65:2b:17:1e:d7:f9:7a:dd:cd:4f:b2:7b:95:
         b1:f8:34:9a:4b:c6:6a:07:00:a9:cf:33:56:36:fc:bc:55:69:
         fe:7c:04:83:a9:a0:a5:ad:41:36:db:ed:a6:d5:fb:a4:3e:57:
         ed:22:48:82:ce:c6:b6:69:f9:a1:ac:c5:44:84:17:74:c0:43:
         2f:c4:1a:47:0e:f5:1b:cb:6d:b0:90:27:30:cb:48:00:9c:e5:
         71:54:82:36:df:28:6f:0c:22:ac:e3:88:4b:c9:fc:c0:4e:0f:
         2a:04:c8:d7:e3:70:f6:21:1b:56:0f:15:bf:70:d2:00:bc:bf:
         1a:6e:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:24:56 2025 by rpki-client