Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/d4e588c8-ebe8-322c-a6b2-e2c82b0835e3.roa
File:                     d4e588c8-ebe8-322c-a6b2-e2c82b0835e3.roa (raw, json)
Hash identifier:          68fizVW03Wfuc94s0Ri4HPPcJNpMl55AjOCdsxPCEG8=
Subject key identifier:   72:2F:CD:7F:0B:BD:E2:ED:AE:79:46:F7:74:F7:A8:F5:EA:BE:FA:2C
Certificate issuer:       /CN=998ce6c6-de76-4028-a6fe-ea03cffffbcb
Certificate serial:       010D0C9F43285849C4D4CD829FD6D71B6F6900C0
Authority key identifier: D7:CE:46:2F:71:0B:CD:F0:D8:75:3D:83:D8:EA:23:47:94:6A:7C:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/d4e588c8-ebe8-322c-a6b2-e2c82b0835e3.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     20383
IP address blocks:        199.83.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/998ce6c6-de76-4028-a6fe-ea03cffffbcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/998ce6c6-de76-4028-a6fe-ea03cffffbcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cd:82:9f:d6:d7:1b:6f:69:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998ce6c6-de76-4028-a6fe-ea03cffffbcb
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=dc20b0b8-296c-4392-aed9-bd974087b257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:51:02:2a:c0:8f:a8:b7:ed:1d:31:e2:c7:
                    24:93:11:39:13:f3:2e:b7:83:b8:98:a0:02:d2:80:
                    9e:29:97:41:d8:2f:20:a3:01:5a:82:31:41:86:2d:
                    92:f5:c9:98:05:36:8c:3f:33:96:3f:17:20:3e:4f:
                    ce:0a:c8:02:24:58:67:93:da:23:a0:bd:e6:b5:a7:
                    fd:2b:c3:79:74:30:13:02:20:44:33:98:de:70:cc:
                    d3:a6:2b:e8:0a:05:7d:e0:86:27:71:52:6a:b6:fb:
                    99:f0:5a:78:c7:b0:27:e0:8b:f4:1e:28:75:56:d9:
                    ae:4e:8a:c9:a2:2b:ae:26:ec:8e:c7:9d:db:1d:09:
                    db:fb:89:ad:9c:db:cf:99:1f:f2:3e:1c:07:91:25:
                    b2:c6:96:b5:90:d2:b9:69:50:f1:82:7d:f4:bb:10:
                    7b:c3:f0:25:18:40:00:6b:8b:34:2c:90:61:6b:d6:
                    0e:89:a3:d2:3b:fc:a7:a4:8b:3c:82:c9:de:0b:bf:
                    87:4a:20:da:52:47:d0:61:b1:e7:71:9b:43:6e:14:
                    7f:c9:86:0a:f7:44:99:9f:53:41:27:a7:40:c6:10:
                    f9:69:2a:ef:f5:0e:fe:b4:7a:cd:bf:aa:a9:49:40:
                    e3:59:f6:58:cb:6b:a7:f1:06:d7:d5:4d:51:53:9d:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2F:CD:7F:0B:BD:E2:ED:AE:79:46:F7:74:F7:A8:F5:EA:BE:FA:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/d4e588c8-ebe8-322c-a6b2-e2c82b0835e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/998ce6c6-de76-4028-a6fe-ea03cffffbcb.crl

            X509v3 Authority Key Identifier:
                keyid:D7:CE:46:2F:71:0B:CD:F0:D8:75:3D:83:D8:EA:23:47:94:6A:7C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:83:76:4a:31:8e:ca:b3:b9:ef:5f:2a:ed:7b:de:3f:1e:aa:
         df:a4:3a:5a:7d:36:ac:f4:22:13:61:d1:9b:ea:51:06:59:bf:
         0e:d8:08:5b:4c:c8:19:49:5e:ad:db:51:82:f2:31:ea:80:0c:
         c1:9f:de:86:ef:56:3b:1d:2d:6e:c0:27:c8:47:6d:86:53:db:
         1a:07:53:9d:dc:c7:66:b5:aa:18:1c:63:e3:3c:51:b8:6c:ab:
         14:42:9f:8f:c0:31:03:98:2b:92:85:9f:e0:81:2c:e7:67:d3:
         aa:f2:b0:d0:3b:41:5f:e1:88:51:50:47:18:ca:36:af:ff:35:
         f1:44:0c:57:12:eb:7a:4e:43:cd:98:61:f6:cc:4a:42:2a:bf:
         ae:90:3e:43:c1:e7:4e:6b:1c:9a:86:12:ce:cc:af:68:14:93:
         88:e3:06:ef:2f:8b:37:7a:77:c8:46:bd:6c:d6:88:2e:d5:ca:
         a7:f8:9a:c2:47:4c:b7:6d:84:b4:af:fc:d1:11:62:3e:fa:de:
         a1:7e:8c:b8:52:38:97:e8:bb:e5:62:16:ce:a6:ea:2d:4c:a2:
         6f:1d:1f:0d:af:15:4e:05:a9:8b:7c:b0:75:c2:2a:66:e1:e0:
         ea:eb:71:44:1b:ae:37:91:af:3b:e9:30:27:88:95:be:0d:14:
         00:b4:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:59:20 2025 by rpki-client