Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa
File:                     149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa (raw, json)
Hash identifier:          sCoWN8SO2nvv+86UPoh2KSKcC9Mi2ZOPRgVQHSr2WaM=
Subject key identifier:   66:F6:58:AE:9B:B4:EE:1D:91:9A:89:12:F0:F3:CB:52:F1:48:0A:3E
Certificate issuer:       /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa
Certificate serial:       010D0C9F4328584A331ADF96B2084A0E2C817400
Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        192.135.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:df:96:b2:08:4a:0e:2c:81:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=05071f31-05a1-403c-b1f3-c6f3579030bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:04:08:48:9d:ce:2e:76:73:ed:89:76:22:d6:
                    5f:98:94:59:66:9e:af:0d:c3:24:cb:a7:b9:ac:8f:
                    25:ec:94:83:a0:e4:91:5a:d3:ba:2b:5f:4c:9d:34:
                    bb:69:d3:48:f6:e7:e7:7e:32:b4:f8:81:b7:4f:8c:
                    8c:f9:51:e3:a1:54:5c:80:81:cd:f6:84:f0:89:50:
                    30:1f:36:bf:85:3a:7b:df:88:82:46:93:fc:d0:cc:
                    79:ce:56:8d:14:b3:ba:a0:a5:41:8f:c7:15:d5:f3:
                    15:2e:2b:6b:51:08:55:a1:2a:32:1d:3b:49:e4:f3:
                    6a:aa:64:8d:b7:8a:2c:69:55:c5:d5:77:2d:6e:88:
                    32:1e:28:03:fe:9d:8c:2c:15:67:4f:58:ad:19:18:
                    49:33:55:3c:60:21:2d:8b:54:9f:59:42:a3:27:c5:
                    b7:98:44:df:e9:38:1d:ff:de:6a:36:73:52:35:1b:
                    37:61:36:26:98:d0:e1:10:aa:57:d2:54:3e:ac:b6:
                    e4:33:97:97:d6:42:98:c5:f5:0e:50:d7:77:ec:fb:
                    2b:67:00:d7:75:9b:03:d2:6a:a9:04:5a:25:91:31:
                    f3:40:f1:71:eb:a9:c0:fc:5b:16:9e:0d:e9:5e:dd:
                    ae:a3:9d:19:4c:a7:16:13:03:f6:e1:2b:87:19:42:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F6:58:AE:9B:B4:EE:1D:91:9A:89:12:F0:F3:CB:52:F1:48:0A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl

            X509v3 Authority Key Identifier:
                keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:9b:39:d4:cf:4a:ed:07:17:45:df:eb:a0:99:49:da:b5:
         4e:68:35:83:4f:30:77:f3:1b:e2:8f:9f:23:58:b1:d0:43:ef:
         e3:cf:ab:a5:71:d3:78:2f:67:36:00:e7:d6:dd:b3:3f:15:d8:
         ff:73:3b:cd:15:ba:3e:3e:69:2e:8a:11:2c:24:56:75:84:a5:
         17:b4:93:ab:50:0e:94:88:c1:e2:79:96:0d:ca:94:df:1a:0a:
         93:bd:11:44:f5:1c:8d:df:11:5c:ff:7f:c5:14:89:ba:27:79:
         05:f1:0e:22:b2:cf:76:c9:51:17:8c:49:dc:8d:86:a0:d1:31:
         f5:e4:ae:7a:b2:cb:6e:c1:2b:c6:b6:e5:b7:a9:b0:0e:c2:1b:
         02:fd:05:b9:7a:89:c3:2e:2d:ec:47:b5:41:83:ec:9b:50:56:
         fd:e8:e2:9c:15:69:65:57:92:96:1a:25:22:72:43:c7:58:2c:
         a7:97:2f:ef:05:33:60:52:7a:ec:bd:ba:e3:df:77:b5:ce:50:
         70:3b:fb:43:34:6f:51:ed:dd:60:2a:d7:95:5b:5f:ac:3a:4b:
         ae:1d:25:54:8d:3f:56:c8:c2:2e:d6:82:e3:35:d9:0a:d3:d5:
         24:ac:ef:a4:f0:4e:34:1f:d1:77:3e:e0:f0:c5:21:61:67:48:
         28:95:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:19:56 2025 by rpki-client