Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa
File:                     c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa (raw, json)
Hash identifier:          bMrrN+2XRy+OeqHEXyZh9x7YzPBXeYdk2u0O6WX0Pa0=
Subject key identifier:   4C:FB:B0:7B:1D:B3:78:9C:CB:D9:BA:CB:9B:09:B5:F8:63:FD:72:A2
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F43285849F17FD2608A546DD2E4B53380
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     394177
IP address blocks:        170.75.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d2:60:8a:54:6d:d2:e4:b5:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=1e1b7f89-fdf0-4ad7-94c7-4d775d8c6ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:62:8e:32:c1:f9:8e:55:2f:52:40:9c:59:
                    77:33:2a:30:65:02:ac:45:43:e2:a9:95:ce:83:c3:
                    99:d6:1a:64:a4:5c:7b:00:20:7f:6b:1b:ba:b8:af:
                    be:e8:b4:6f:65:e6:ab:7b:f9:37:da:c9:49:f6:41:
                    3d:96:a3:03:99:71:b0:32:a6:e5:50:52:0f:f6:5c:
                    6f:d1:e2:e1:68:95:fe:ab:84:a8:f5:dc:48:57:1c:
                    6e:a1:8f:96:da:d1:e7:11:0f:c3:2b:c2:1b:d3:fc:
                    3f:a8:24:09:26:c5:1a:00:ae:bb:cd:cf:02:28:f3:
                    72:1c:1a:e4:d9:29:bf:96:b0:74:cc:0e:ff:4d:90:
                    a9:20:7d:5d:4b:00:2b:2f:8e:ae:d6:32:41:d7:8d:
                    78:fe:8d:a5:65:c4:09:c4:08:6a:84:fe:62:8e:2f:
                    8b:18:80:11:2c:22:84:b9:c1:0e:03:4f:40:4e:36:
                    1a:e5:5e:c0:40:60:a8:9c:ff:cf:ba:45:78:d7:c1:
                    8a:01:55:8c:73:7d:76:1a:e9:e8:fd:8a:97:5c:f4:
                    f9:84:9b:08:ca:13:48:4e:fc:70:95:9c:64:b4:84:
                    98:ce:14:e5:e0:db:07:98:17:a3:a9:31:5b:57:46:
                    37:92:71:7a:5a:17:76:eb:74:07:7e:f0:86:85:fd:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FB:B0:7B:1D:B3:78:9C:CB:D9:BA:CB:9B:09:B5:F8:63:FD:72:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:28:a9:c6:1b:10:6f:75:38:ea:9c:8b:a7:62:b3:bb:64:71:
         03:80:b7:9f:1d:b5:0f:ae:1c:30:be:03:71:ce:d8:4e:87:b4:
         eb:11:5f:38:9a:4b:52:68:37:f9:1d:17:ae:e1:5d:0f:32:d2:
         ed:0c:bf:53:01:63:d3:e9:aa:78:20:1f:3d:18:45:78:53:c5:
         61:15:08:4b:d8:e5:f5:2a:04:e0:2e:2c:41:5e:19:23:2d:eb:
         26:d3:cf:f2:90:9a:ae:fc:58:11:ce:71:03:3a:d8:bb:b5:a8:
         55:1b:db:fb:f4:2a:93:bc:81:dd:22:51:41:d4:a9:80:10:0d:
         c6:6a:bf:e3:20:8c:fb:c4:69:aa:7d:2d:78:1c:05:08:fd:c5:
         d3:50:d4:0c:4b:17:b6:f7:a0:20:21:df:5c:6b:2a:bf:9a:cb:
         49:e5:9d:c9:98:14:78:d5:6c:59:e1:f2:d6:48:c0:80:e9:40:
         a2:a8:ed:9c:86:0f:2d:b2:fb:c5:4e:35:b2:a5:e7:79:cf:2d:
         38:79:38:ac:1f:b4:da:7b:5d:7f:bb:6c:51:5f:17:33:5b:50:
         2d:6a:b0:f4:86:04:9f:be:fb:45:52:38:e4:d9:43:ed:88:09:
         8f:14:2e:ba:cb:ac:c7:24:08:85:89:8d:fa:2a:fb:57:cf:ed:
         dc:33:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:41:16 2025 by rpki-client