Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/146f50cf-fa1c-302e-8097-8ff5fda89373.roa
File:                     146f50cf-fa1c-302e-8097-8ff5fda89373.roa (raw, json)
Hash identifier:          BGntE4qhRRcbU2gVAhaNvRYKBN3fe2E/1wLah7bPIhg=
Subject key identifier:   D0:80:36:5C:F2:08:CE:89:AD:52:53:E4:FB:66:62:58:9C:B8:29:40
Certificate issuer:       /CN=dc49520f-d0a0-4d00-a42f-35a1023569ac
Certificate serial:       010D0C9F4328584A14655A6E27860E51FAD791B0
Authority key identifier: 63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/146f50cf-fa1c-302e-8097-8ff5fda89373.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     16922
IP address blocks:        192.35.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5a:6e:27:86:0e:51:fa:d7:91:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc49520f-d0a0-4d00-a42f-35a1023569ac
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=079f7a7b-9265-400f-b058-7c89429a720c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:1c:fe:1b:28:35:1d:f9:8e:a2:59:6b:40:
                    3b:ad:5d:e8:9b:c4:0e:29:f5:21:1e:45:d8:57:a6:
                    92:17:9d:b9:ea:18:b8:69:ac:2e:95:40:e2:f6:80:
                    c8:4f:7f:25:ea:43:30:92:cc:96:74:d7:69:8d:70:
                    3a:0e:b4:5a:9a:44:47:ab:88:fa:3d:93:97:00:58:
                    cb:fb:72:9a:82:ed:cf:21:c6:d3:f2:b8:9f:6e:c3:
                    76:5d:da:4b:fb:76:0a:ee:03:3a:db:5a:72:10:12:
                    40:f7:c8:42:d9:65:12:05:4e:a3:e3:d3:10:0a:2c:
                    8b:7e:c6:86:cc:15:4a:b0:30:32:64:8c:37:f0:3a:
                    9d:52:fe:d6:ed:5d:17:3e:c8:0d:01:a4:b0:52:a0:
                    4a:a9:f6:f4:37:f7:c5:4e:74:9f:d6:80:f4:e6:7a:
                    22:3c:43:87:c2:f6:46:54:20:62:9a:d2:e6:92:e8:
                    f4:7f:5b:f6:7b:b5:c0:61:6d:b5:a7:15:79:02:6b:
                    e7:3c:82:ae:d7:03:74:d6:a0:02:a8:93:b9:f7:f6:
                    a8:fa:ac:02:e1:e1:3b:41:81:f0:ad:83:29:4e:cf:
                    c6:fc:6d:98:fe:e3:9e:83:26:7a:1d:6c:f2:0b:cf:
                    41:70:6d:ea:4b:bf:5e:97:ef:65:cf:ab:ca:cd:d5:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:80:36:5C:F2:08:CE:89:AD:52:53:E4:FB:66:62:58:9C:B8:29:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/146f50cf-fa1c-302e-8097-8ff5fda89373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl

            X509v3 Authority Key Identifier:
                keyid:63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:80:e6:5e:a8:61:ad:55:fa:01:16:b6:af:d7:71:b7:be:04:
         ad:59:08:67:ee:7c:d1:8e:84:48:51:06:a9:fa:0b:78:0b:ff:
         9b:46:e7:fd:00:37:5d:4d:6d:b5:ae:d7:4b:c0:b1:2c:62:fc:
         33:fa:25:98:9b:80:37:dc:81:72:f3:ba:30:05:4a:05:49:97:
         b1:36:4c:7e:9c:98:3c:2d:f1:37:22:5a:90:0b:e0:32:d0:8c:
         74:34:34:56:34:ec:83:8e:86:ac:f5:6b:20:e6:d6:4f:08:46:
         8c:49:4e:1a:48:85:aa:81:77:8c:42:19:60:28:17:fa:92:66:
         5e:13:d5:f5:ff:7c:12:99:bd:15:dd:bc:4c:b5:19:7b:93:a6:
         d7:c2:ef:93:88:a4:7d:34:be:d5:57:8f:72:9f:85:aa:32:ec:
         45:bb:4d:17:88:9c:58:c3:92:7d:5f:74:d9:e1:f4:45:38:1b:
         9b:b7:75:00:a2:d4:3f:53:c4:46:a0:3e:b8:69:0f:ed:81:66:
         46:2c:a7:d7:dc:3d:61:55:8e:5f:62:7e:15:7c:07:0f:e9:ab:
         59:c2:44:4d:7d:e5:58:7d:5e:a0:6c:d9:05:c5:73:45:da:75:
         26:2e:21:a9:0d:13:80:bd:7e:73:41:63:69:d9:0d:c7:83:0f:
         2b:25:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:17:51 2025 by rpki-client