Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa
File:                     6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa (raw, json)
Hash identifier:          qLSuZaAdPbdNNgN1lCMcjRsYZhBfCNSOKv94hL0/5PY=
Subject key identifier:   34:F2:33:D3:7D:2A:9C:80:B1:22:F2:9C:25:B4:D5:F7:EA:43:41:7B
Certificate issuer:       /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
Certificate serial:       010D0C9F43285849B14A0B13F7028B66C5C1B958
Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     198949
IP address blocks:        198.51.243.0/24 maxlen: 24
                          198.51.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0b:13:f7:02:8b:66:c5:c1:b9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=7c6bd899-e029-448d-86a1-ebc698cf335a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:06:d4:2c:71:f0:72:6d:9f:8c:9c:66:89:a5:
                    df:41:36:73:20:73:8a:28:39:70:0f:db:89:3a:c9:
                    68:08:67:fa:a2:47:86:f9:9c:03:85:83:b4:3f:c0:
                    9e:c9:98:6e:62:36:5e:0f:39:e2:09:b5:90:cf:a2:
                    98:6f:32:62:0c:fc:32:cd:8f:e6:48:d1:e6:97:32:
                    52:f5:22:ac:a6:da:89:e6:57:a9:ee:9e:6c:30:23:
                    de:67:d9:c7:09:9f:22:3d:0f:70:c1:f7:ba:d0:3f:
                    49:99:cf:49:6f:3f:59:f0:22:e3:fa:3e:05:78:de:
                    d7:97:15:ad:3f:33:b6:ac:f0:45:0c:60:de:1c:79:
                    3f:9b:83:d1:4b:d3:c1:6b:a6:87:1c:a0:7c:3c:0d:
                    f9:f3:8c:22:12:ef:91:e6:f4:b9:e2:39:43:d0:61:
                    a2:60:37:a6:98:0b:b1:6c:44:2f:c8:3c:ea:97:5e:
                    a0:64:86:af:a5:1b:63:bc:78:e6:e5:df:1f:91:b0:
                    0a:f9:62:9f:87:a9:f6:58:28:c0:54:ff:de:6e:1f:
                    c5:4a:d2:61:d1:0c:cc:15:99:ea:e0:db:2c:37:e0:
                    16:6b:d0:c3:01:bd:47:8e:35:29:10:24:17:8e:00:
                    67:4d:b8:b3:b6:48:a9:15:46:bb:73:4b:dc:e0:18:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F2:33:D3:7D:2A:9C:80:B1:22:F2:9C:25:B4:D5:F7:EA:43:41:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl

            X509v3 Authority Key Identifier:
                keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.243.0-198.51.244.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5e:70:a1:0d:a0:51:52:d5:5d:b2:c2:cf:11:c1:f6:8a:d9:
         07:cf:f8:f9:a0:91:e6:61:b4:fe:3c:31:c2:bc:84:48:b7:87:
         7d:d4:04:d1:b4:f2:8f:04:98:a8:6b:f3:ad:e8:75:b6:f1:22:
         64:e7:49:ac:b9:3b:ca:48:cc:31:a7:6c:4b:28:f9:ad:a2:b0:
         e5:d6:9b:6f:23:33:45:3a:fa:34:ff:b5:a5:04:02:3a:63:ae:
         24:6d:82:8b:e8:58:e6:65:22:c8:3d:ea:17:20:49:2e:1c:ec:
         98:1d:cb:f0:08:c0:6c:7d:30:ed:9a:71:6c:96:86:a6:96:0d:
         03:7b:ec:5c:fb:84:6d:b6:f5:82:a3:ff:07:43:b6:57:70:3c:
         a7:e6:7e:ce:0a:84:b7:f9:a3:83:9f:09:ef:65:85:e7:d2:37:
         f0:55:1c:fe:18:56:c4:b4:81:57:50:34:3b:9f:d3:03:d4:b5:
         35:0b:bf:40:3b:3c:52:74:8f:b1:60:dd:3f:e9:12:af:32:a2:
         2a:95:0e:48:2a:d7:1c:62:1d:4b:39:cc:3f:b2:b9:03:c5:7c:
         a5:b4:5d:39:53:fa:33:11:5b:11:ea:da:7d:10:5a:3c:bc:5a:
         ed:8c:53:b9:c1:1b:62:06:81:56:11:7c:29:1a:e8:cd:47:ea:
         73:6f:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:33:04 2025 by rpki-client