Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa
File:                     ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa (raw, json)
Hash identifier:          Gt2K3AQ3xcKm3zxYW0HNJMaAx3WGUmgULHO0gR34nyk=
Subject key identifier:   2D:B7:63:1F:44:61:8B:A3:36:8A:27:1A:82:A0:B5:1F:FC:BE:CB:17
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849F0FDA371C4E301DDBAD43400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa
Signing time:             Thu 22 May 2025 20:38:53 +0000
ROA not before:           Thu 22 May 2025 20:38:53 +0000
ROA not after:            Wed 20 Aug 2025 20:38:53 +0000
asID:                     149440
IP address blocks:        168.93.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:fd:a3:71:c4:e3:01:dd:ba:d4:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 22 20:38:53 2025 GMT
            Not After : Aug 20 20:38:53 2025 GMT
        Subject: CN=bbd86801-59b3-4451-a1d1-32df10d8961f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f9:11:bb:6d:8b:e3:b3:bd:62:c9:97:ec:5f:
                    6b:fd:86:d8:20:c6:d9:43:7c:32:cc:80:60:ba:2a:
                    75:cd:81:12:12:6b:d7:fa:4a:f1:83:07:b0:a2:a6:
                    bf:d7:64:8f:96:4c:b6:bb:28:f8:2a:1c:8b:53:31:
                    4d:73:c9:3c:84:ed:ed:6e:f4:ad:69:44:32:7c:95:
                    0b:aa:47:f8:76:4e:1d:40:ce:18:83:42:13:7b:77:
                    be:f3:c4:b5:ff:86:e2:68:d4:6c:7a:f1:d6:8c:7e:
                    c0:3b:48:f8:0a:af:f0:72:05:24:9f:c5:8b:b3:cb:
                    fb:37:91:ab:f3:0b:d9:e1:80:c0:eb:0b:af:da:72:
                    7d:82:ac:f5:22:b7:03:aa:1a:c5:e7:33:93:ff:8d:
                    67:2d:a1:1c:9f:53:bf:1b:e9:6a:61:7b:b2:57:5e:
                    6e:8d:04:6d:08:95:9a:3a:62:d9:9b:3c:eb:1e:78:
                    b6:b3:79:8c:3d:34:7b:99:54:d2:f2:d7:6b:d2:1e:
                    c8:bc:59:d9:59:b0:de:fa:39:a0:90:23:31:46:b9:
                    6f:14:fa:74:af:87:46:8d:9c:8b:2a:8f:1f:5c:62:
                    41:1f:19:ed:a3:9e:77:7a:63:0e:c3:ca:8f:90:11:
                    64:90:8d:88:c6:a5:3a:6c:5e:f9:18:b5:65:f4:08:
                    31:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B7:63:1F:44:61:8B:A3:36:8A:27:1A:82:A0:B5:1F:FC:BE:CB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:60:2c:95:00:d2:1b:e4:20:2b:3b:23:8d:09:a4:5d:be:e3:
         69:aa:a8:31:b8:ae:ce:f4:ed:b7:a4:75:dc:2b:23:f0:6d:70:
         69:d1:26:ba:2c:06:75:8c:62:61:65:28:d3:38:9f:94:d7:5b:
         69:02:0c:5e:03:5b:0b:f4:9e:0c:72:0b:8e:5e:32:2a:b4:21:
         1a:b8:b3:99:51:04:d3:d3:32:82:5e:52:f3:e7:ea:2a:22:b9:
         6f:4c:e7:3d:2a:a7:14:65:1d:08:a9:da:18:5e:27:fc:84:bc:
         e4:94:0b:c8:81:0a:0c:e6:ed:2f:ea:f3:80:2d:d2:e9:3f:bf:
         bc:67:47:75:3e:10:b8:6d:bc:60:e5:8a:8a:8e:15:02:db:e0:
         c4:83:73:cf:1d:c9:d7:92:f3:11:42:e4:58:bd:9c:e9:0f:21:
         ef:93:27:f0:1e:c6:0c:16:70:c6:8e:98:d2:95:23:68:89:dc:
         a2:66:7a:f9:ec:ac:c6:b1:43:9e:0f:5d:2b:0a:4b:49:4a:3c:
         6b:f8:cc:1b:12:1b:ee:72:fe:c5:a2:54:e3:66:69:7f:96:3f:
         03:67:91:04:39:68:80:71:0a:6e:c8:b0:1a:77:3e:97:65:09:
         d4:f8:c5:b9:a8:81:51:b9:15:6e:62:2c:85:c2:4f:bc:c1:47:
         62:9a:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:16:21 2025 by rpki-client