Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/dfd226e3-da83-35a1-9603-d0ce85afa89e.roa
File:                     dfd226e3-da83-35a1-9603-d0ce85afa89e.roa (raw, json)
Hash identifier:          XVWTxRW8vuRQhAK9R6PeJEsQApF6BlPIixJ2pHsJenQ=
Subject key identifier:   BB:97:3F:56:9D:B4:C4:84:96:F6:18:19:DE:11:A6:53:73:88:7A:3B
Certificate issuer:       /CN=63fffcba-054d-4823-8758-62bf6dab2ffa
Certificate serial:       010D0C9F43285849912F317374831666B5A9F4C0
Authority key identifier: 83:F7:70:45:78:5B:74:58:27:04:FC:3A:06:BB:7D:99:F4:1A:DE:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/dfd226e3-da83-35a1-9603-d0ce85afa89e.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     21699
IP address blocks:        199.188.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:31:73:74:83:16:66:b5:a9:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fffcba-054d-4823-8758-62bf6dab2ffa
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=1ad4e4fa-da46-445f-a63b-4d3a14035981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:a2:e9:9d:7f:53:a8:c8:34:65:b0:4d:9b:
                    c6:b9:95:33:58:f1:14:ce:57:5a:ec:4f:94:b5:9d:
                    b7:4e:a1:52:bf:63:3d:76:3b:68:47:18:d6:7c:b8:
                    93:94:b6:bf:14:24:40:ff:65:fa:94:c6:6d:f9:19:
                    5f:72:87:0b:26:ee:b2:bd:89:02:fb:34:a1:39:5b:
                    9a:81:f3:0d:e7:a9:b1:9f:82:c8:a5:1e:33:c5:a6:
                    6b:99:19:d1:df:97:08:1a:13:81:3d:53:9e:03:f9:
                    d6:bf:f0:f1:ae:5e:69:c0:d2:8b:30:99:2f:0e:61:
                    68:80:7c:c1:79:42:d8:7e:61:b4:5f:b0:3f:03:11:
                    eb:c6:d8:23:72:b8:9e:29:d8:c8:71:ab:00:d2:23:
                    8e:5d:cd:5e:54:9a:a2:9d:82:ca:cf:db:b5:5a:ee:
                    89:2e:0c:96:40:11:38:5d:80:fe:74:81:ea:cd:f6:
                    24:b8:5d:d9:78:e9:8f:1b:9b:ba:94:ee:8b:f2:ce:
                    33:13:37:70:d8:20:aa:9a:64:bb:c2:5e:5e:8d:59:
                    fd:03:dc:81:1c:5a:96:c4:48:16:b6:71:33:34:9e:
                    95:7f:dd:66:43:25:64:62:f4:be:95:e6:88:c5:37:
                    b3:ab:a9:27:13:db:c9:e1:1b:7a:92:bc:0e:9e:87:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:97:3F:56:9D:B4:C4:84:96:F6:18:19:DE:11:A6:53:73:88:7A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/dfd226e3-da83-35a1-9603-d0ce85afa89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.crl

            X509v3 Authority Key Identifier:
                keyid:83:F7:70:45:78:5B:74:58:27:04:FC:3A:06:BB:7D:99:F4:1A:DE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:85:16:ab:b6:ff:28:3c:27:8f:bd:ac:63:52:53:64:b6:16:
         86:d9:66:02:e7:35:eb:66:e9:99:3f:d5:5d:5e:32:b0:75:72:
         05:41:d9:00:5b:a9:63:80:13:45:d4:2a:44:06:99:7e:4a:fe:
         53:5f:11:7f:20:79:43:47:9b:55:d8:0b:53:43:a9:0d:3b:b3:
         e7:a0:67:c7:a7:6a:78:be:2a:fb:ff:4d:2a:40:25:f5:3a:bb:
         b4:30:10:84:c7:3e:de:db:ff:f3:c2:b9:02:cc:ff:9e:37:c1:
         7e:1b:e7:46:82:7e:5f:02:93:67:4b:2d:d3:b5:0d:09:62:07:
         81:79:eb:5a:b2:a3:66:d0:7a:8f:98:91:06:01:a5:da:0e:95:
         aa:75:bf:e3:fb:79:89:39:c1:65:31:d4:fa:c5:7a:38:99:eb:
         d6:12:bd:0b:d7:7b:00:05:45:a0:9d:84:1b:89:64:5c:85:f2:
         15:35:03:ea:7b:0a:41:da:09:14:e0:49:6d:6a:55:29:01:29:
         68:35:da:76:c0:17:68:e7:f0:e2:53:71:c8:9c:15:3d:0a:02:
         0e:b0:76:d4:55:60:45:94:8f:5d:97:53:f9:22:cc:d1:e8:ad:
         3e:a0:63:aa:d5:49:3c:52:32:23:07:50:33:72:2c:3d:8f:c4:
         0b:51:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:57:30 2025 by rpki-client