Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bafc4ab0-5fdb-3e3d-8afa-ff6c07e34287.roa
File:                     bafc4ab0-5fdb-3e3d-8afa-ff6c07e34287.roa (raw, json)
Hash identifier:          WjBThTPlLsIO2vwslDpLqWOCkWBroYoXl9ZJGZ+aIKo=
Subject key identifier:   54:B1:D2:A1:F8:1C:1D:0A:B3:D8:C5:DA:B6:8E:E7:E8:35:40:F2:3C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B25FC39CF1E3A2D0E2D43CD00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bafc4ab0-5fdb-3e3d-8afa-ff6c07e34287.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     20115
IP address blocks:        150.224.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:39:cf:1e:3a:2d:0e:2d:43:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=8ad3776f-569f-48b8-93cd-8cde2a2ac06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:ea:b0:bc:0e:e9:c6:56:67:6d:7b:ab:a2:
                    55:60:8f:f1:5b:99:ef:f4:4d:ca:34:ce:11:22:66:
                    8d:e4:ad:c5:8c:8c:57:5b:bb:47:13:84:27:b3:1c:
                    6c:fa:d2:61:cf:7f:c8:7d:26:cb:0c:9f:f3:70:47:
                    55:df:bf:d8:16:33:0b:d5:e1:3b:55:2b:c1:ac:07:
                    4e:a8:83:24:53:1d:6c:30:c3:e9:82:dd:ba:03:f3:
                    12:e5:1c:b7:f8:3d:95:e4:d1:6c:fe:1e:32:1d:4a:
                    ce:48:87:c6:fe:78:b0:61:1e:bb:55:14:d4:75:63:
                    98:ac:72:ad:9a:3e:67:7f:78:f5:b8:14:e6:ac:d0:
                    46:c6:10:b4:33:9f:09:78:d2:ff:4f:6a:3f:ba:fe:
                    8f:2f:f9:ae:25:b7:80:77:c2:7c:08:f8:1e:2e:3e:
                    c4:97:a8:38:30:36:af:bb:8c:87:dd:f6:f8:90:d9:
                    32:c2:ea:f3:bb:b2:f3:5f:6e:bc:e9:ac:54:c8:cb:
                    96:58:48:5c:73:c2:9f:d5:ee:dd:25:c0:e7:5c:c0:
                    29:34:ca:0a:46:24:30:4b:cc:07:16:ab:2b:ec:cf:
                    87:60:3d:a7:41:21:53:4c:7a:78:ae:5d:33:5d:0c:
                    96:db:e3:e5:2a:b2:54:c7:a0:89:21:48:f7:9e:12:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B1:D2:A1:F8:1C:1D:0A:B3:D8:C5:DA:B6:8E:E7:E8:35:40:F2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bafc4ab0-5fdb-3e3d-8afa-ff6c07e34287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.224.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:6c:bc:0c:93:d6:e0:83:5f:47:c0:e0:9d:1a:60:2c:40:14:
         9a:8a:60:23:14:2e:f8:e9:1f:19:65:2d:68:bb:78:ac:83:c4:
         36:d2:16:95:b3:ee:82:1c:ae:ae:90:80:33:76:d7:76:9a:ce:
         35:f3:e4:9b:a0:8a:5a:43:36:18:8a:bf:4e:d1:64:a5:69:64:
         10:24:cf:fa:82:0e:e3:16:d6:ad:33:26:2a:7b:e5:d7:4b:ae:
         ea:9e:ec:d7:79:5f:e2:f5:56:de:81:b1:85:0f:5d:e7:ce:22:
         92:2d:9d:15:7a:c6:35:d9:5a:77:b8:3c:72:32:57:68:60:85:
         1d:a3:66:aa:94:3c:95:73:0c:1e:ca:cb:63:7b:78:24:ca:38:
         2a:20:33:30:3d:05:81:f1:97:77:7e:23:e7:18:e5:a3:dd:34:
         d3:0a:d1:c7:db:3e:c6:83:21:9e:4d:35:6f:11:97:bd:c4:5e:
         67:36:db:cf:f6:b9:51:95:2a:46:ea:84:e4:5f:dc:b0:54:8a:
         67:b5:f6:e2:bc:0d:3a:99:26:c1:ac:b4:dc:16:52:67:1a:0b:
         4a:a8:80:34:dd:08:82:1e:1c:99:ce:0a:c9:42:f8:92:f5:0a:
         1b:1e:20:6a:26:e0:f4:ab:28:e8:fe:7c:4d:b0:9a:cf:26:06:
         00:cf:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:30:07 2025 by rpki-client