Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/9b11998f-c03e-3565-b33d-908b5f9e5a87.roa
File:                     9b11998f-c03e-3565-b33d-908b5f9e5a87.roa (raw, json)
Hash identifier:          KoXd2xFtajZ+QwGpJjsnhX4uuu8aZn7qq2jJP+j/jvI=
Subject key identifier:   2B:E1:5E:A1:74:9E:F7:00:59:E0:0B:72:5C:E4:72:C3:8E:57:9C:42
Certificate issuer:       /CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
Certificate serial:       010D0C9F43285849F17FB560755D47F3E9657800
Authority key identifier: B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/9b11998f-c03e-3565-b33d-908b5f9e5a87.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     13984
IP address blocks:        205.149.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b5:60:75:5d:47:f3:e9:65:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=e985064b-db76-4e1c-a166-59ff45eb8a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:17:70:2f:a9:79:f5:ab:7d:bc:c3:f4:84:
                    ac:cc:4b:7b:e0:bd:63:c8:ea:4f:80:f9:88:7e:57:
                    7a:fd:d1:a9:5a:d8:be:10:37:3b:21:d6:02:96:77:
                    a1:3e:e8:12:44:0c:21:41:84:26:31:80:3c:d9:8e:
                    e0:2f:c8:8b:05:37:eb:93:aa:84:c8:26:c3:25:83:
                    b9:71:0a:26:9c:c4:8c:cc:c8:ab:0c:1f:db:60:38:
                    b1:2c:5e:bb:ee:b4:b4:de:a1:1b:ca:f9:83:61:c8:
                    8b:a0:17:3b:47:54:9c:ba:83:9c:64:e5:7d:b5:53:
                    42:0c:54:45:34:04:2d:d6:c5:93:79:6c:c2:6a:b3:
                    18:22:ad:2a:36:c9:28:06:11:3a:d5:7c:33:80:d4:
                    3f:d7:4c:4e:6c:5e:40:b2:5e:40:c2:af:05:69:df:
                    8d:03:48:78:43:d5:3e:83:1b:a1:70:db:5c:9b:24:
                    7e:70:25:e1:20:71:eb:46:6f:17:1c:12:29:a5:83:
                    7a:35:94:a0:2b:8e:fa:f1:70:a6:09:d9:8c:7a:b7:
                    8e:d8:7e:1b:2b:a0:95:56:a6:6c:61:f1:5c:9b:0c:
                    c2:d7:15:1a:2d:de:ed:17:00:cf:dc:e2:53:45:ea:
                    80:7f:9c:7e:7f:ea:a2:b7:ba:de:eb:50:71:db:63:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E1:5E:A1:74:9E:F7:00:59:E0:0B:72:5C:E4:72:C3:8E:57:9C:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/9b11998f-c03e-3565-b33d-908b5f9e5a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl

            X509v3 Authority Key Identifier:
                keyid:B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.149.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b7:44:53:2f:5a:30:9f:aa:56:77:da:6d:a0:68:4e:95:e6:
         60:e0:da:7f:73:3d:50:53:06:14:59:cc:40:8e:9a:aa:da:c2:
         42:42:97:48:bc:bd:1b:75:e9:e5:bf:11:43:cb:a6:6f:c8:ac:
         27:75:9c:61:f8:18:65:74:89:7e:82:17:de:44:e5:5f:a3:a5:
         da:ad:a9:07:37:3f:53:7f:4c:29:e3:e8:a4:4f:fb:e1:82:67:
         78:26:65:af:04:dc:cb:c6:da:19:23:03:92:40:14:0b:9d:1a:
         d9:14:04:ea:72:3a:0d:98:78:40:2d:44:75:46:c4:2e:d0:df:
         73:2f:52:ec:8c:67:1d:60:3c:4b:e5:65:65:30:d7:0b:50:52:
         3c:b8:f8:78:f7:1c:3a:5d:53:01:05:01:98:f6:d4:0a:57:2f:
         0b:50:22:0e:5a:46:4e:ab:10:73:0e:d6:0c:59:14:75:d1:0a:
         5b:86:0e:90:b5:96:7f:05:94:dd:46:d6:e0:cc:11:e3:3f:f9:
         2b:ee:f1:c3:13:49:7b:61:0a:5a:5a:ce:c9:84:1d:d2:e9:70:
         93:f8:34:00:f2:9c:d0:cb:46:77:2e:68:c7:ae:e3:6c:13:fa:
         94:57:36:a8:a5:09:f3:a3:f6:08:eb:9f:cd:f8:4a:45:4e:bc:
         60:ed:ba:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:33:15 2025 by rpki-client