Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa
File:                     c653b90b-349b-3969-a8b1-e7d98267d38b.roa (raw, json)
Hash identifier:          IEylZfyDWnMIRUwlHLsWDKZXSSfuTsGUmRQYN8BZ8Jg=
Subject key identifier:   1B:D7:26:90:93:FB:BB:D6:6E:1B:24:D0:9F:0C:CB:DB:A1:DB:E2:8D
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584A374ACF1FF05ACDB586242700
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        129.33.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:cf:1f:f0:5a:cd:b5:86:24:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=c87c46b3-cb1f-48a7-b8a3-1cef97c8618b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:84:4b:f9:2c:24:14:1e:63:ca:3a:b2:81:
                    84:b1:5b:7a:d2:30:fd:4f:dc:a1:ed:5c:82:da:32:
                    4d:0e:86:86:bc:0e:de:9c:1b:17:ac:e2:54:ab:70:
                    b5:0f:62:0f:7b:52:46:58:29:e3:bb:c0:e4:b5:f3:
                    05:51:ea:59:9a:21:b2:f6:8f:13:84:c7:44:57:1f:
                    90:12:dd:64:cb:d9:60:d8:55:cf:5b:a1:42:66:85:
                    38:d8:57:86:b8:cc:07:66:d4:13:ed:5c:ff:c1:d1:
                    fd:ed:5d:4c:de:e7:9f:f5:58:31:27:cb:9e:ec:e4:
                    6f:b5:c0:e5:ea:d0:18:67:f7:2f:c3:27:ce:ca:7b:
                    f4:30:30:64:39:79:e9:37:21:08:9b:6b:6d:4c:00:
                    75:40:b0:60:12:0d:70:55:42:65:fb:4c:ab:84:37:
                    da:d6:a5:96:40:83:2c:20:84:87:fd:ba:a8:06:9d:
                    f3:13:32:91:de:7e:68:3d:1d:d5:38:a9:ac:fb:f6:
                    23:77:09:b5:c5:8c:d7:23:76:a9:cf:04:5d:c2:6e:
                    52:2b:a6:b7:f4:9c:75:e8:b7:f4:86:ec:89:a4:3a:
                    16:6b:10:9d:16:24:ba:f0:4e:81:48:1f:4d:3f:70:
                    52:39:14:74:7f:a5:92:ae:ae:7e:8d:1e:b2:9d:2e:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D7:26:90:93:FB:BB:D6:6E:1B:24:D0:9F:0C:CB:DB:A1:DB:E2:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.33.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:14:67:22:ea:60:1b:05:98:ef:3f:6d:98:84:40:7f:c4:21:
         48:95:85:53:60:ca:42:88:82:bf:eb:d6:2f:03:20:0a:84:0f:
         83:39:c4:2f:0a:e4:35:14:c3:3d:5b:bb:5c:6e:de:de:5e:17:
         b0:75:85:49:68:a0:40:84:8e:a2:50:9e:14:6b:38:77:68:c4:
         b8:02:ef:aa:13:8e:d2:c9:a0:76:88:9f:d1:85:af:0c:ad:09:
         97:42:80:21:a8:b4:d5:fc:99:c4:fb:15:87:ae:bd:36:0e:87:
         3e:2b:d6:00:3c:d9:2a:b8:5a:58:79:47:4f:8f:e6:68:ff:09:
         9f:42:eb:99:2e:a2:78:37:6e:8d:59:6f:ea:fd:14:67:ec:6c:
         63:31:f3:54:bf:02:43:cb:c0:6e:ca:58:c7:4c:28:b2:6f:99:
         0a:60:7b:e8:30:f1:c1:c4:cb:d0:24:49:0d:8d:9e:a4:6f:3c:
         0a:96:f3:9f:36:3f:57:2d:06:2f:c6:d3:87:68:7e:5e:96:a5:
         f4:72:98:32:9b:28:85:88:4b:57:c9:f1:13:2b:26:7f:cc:53:
         be:de:77:5a:e2:fc:94:b9:d8:26:f9:fc:81:25:3e:d9:4c:43:
         9a:c3:86:77:73:39:52:8f:20:15:97:0a:58:1f:9f:34:8d:72:
         6a:f7:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:54:28 2025 by rpki-client