Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa
File:                     4847252c-0d24-3537-a84b-ad62cb2938b3.roa (raw, json)
Hash identifier:          pjQZqXITEPMqV21J9Iva4EE2SyNHnCkTWb87Z7medRw=
Subject key identifier:   A4:9C:09:0E:77:E6:59:B0:CA:6E:9C:93:0E:11:C6:C4:09:8E:15:D9
Certificate issuer:       /CN=24c594b2-08c8-4864-afae-a607d79beb73
Certificate serial:       010D0C9F4328584A331AF9AD616A42096B880D00
Authority key identifier: 82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     398178
IP address blocks:        138.43.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f9:ad:61:6a:42:09:6b:88:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c594b2-08c8-4864-afae-a607d79beb73
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=d541a69b-4584-441d-93c2-a0554483c422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:96:40:fd:a1:15:ef:01:7f:e1:8c:77:69:
                    53:8b:c5:8c:dd:0b:30:ee:e9:fa:ea:6b:4c:dc:58:
                    ad:2d:0e:e2:e2:78:fd:1a:dc:89:0b:8b:db:f6:8b:
                    4d:d8:ac:00:f3:6b:e4:b9:50:cc:03:60:6d:99:c1:
                    37:bc:2a:b8:e1:c5:12:ba:c0:c5:6a:58:bf:76:4f:
                    89:3a:e5:bf:52:1d:d1:a1:d0:4c:85:67:58:ba:2e:
                    df:e0:37:af:7c:98:10:81:32:6f:d6:6c:7d:ab:cb:
                    52:75:e4:c5:2c:1f:2e:11:9a:3d:0a:d1:d7:95:00:
                    aa:5b:40:d0:b3:7b:38:4b:37:5d:22:71:a8:d3:f4:
                    80:07:b1:8f:39:7d:bf:93:08:0f:0f:05:01:3a:c5:
                    c9:61:08:d0:0a:ed:d4:d0:ba:a2:13:6b:1d:e8:8b:
                    5c:33:1f:8e:a0:c0:3b:49:f9:dd:4b:e5:42:c4:a8:
                    d0:d9:e9:89:e8:03:fa:5a:34:78:b3:d4:0b:97:41:
                    1f:0c:64:24:fd:66:39:26:08:63:93:02:c8:f2:78:
                    ce:23:08:82:1a:d6:b0:dd:f7:cf:5e:f4:2d:07:b1:
                    c9:ba:64:70:15:13:b3:e1:40:b1:f6:68:c3:23:04:
                    4e:61:c0:3f:e2:a3:3f:d2:9a:5a:0d:a2:39:26:84:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9C:09:0E:77:E6:59:B0:CA:6E:9C:93:0E:11:C6:C4:09:8E:15:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl

            X509v3 Authority Key Identifier:
                keyid:82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:7e:62:79:23:32:99:db:19:da:f0:5a:ac:20:10:81:72:
         ac:0e:72:a7:fd:c2:c7:9e:09:e2:2a:60:cd:6e:1f:0a:76:27:
         a0:fd:4a:9e:94:e9:67:af:26:e5:4d:c5:6d:1f:d9:06:ca:b0:
         fd:04:18:88:96:a6:a4:22:bc:bc:90:90:2c:0d:09:8e:a3:79:
         86:c4:e8:97:7d:8c:36:fe:ca:bf:95:56:bf:54:24:86:52:ab:
         5d:fc:bd:1b:ed:0e:f7:ec:6d:ea:79:02:0a:d0:65:6f:ac:83:
         40:4a:88:a8:f6:76:26:ca:f2:ca:fc:f1:c5:f3:ff:19:ad:bd:
         1b:14:57:2e:9e:93:0b:20:4e:5e:08:2d:90:f9:67:65:c5:bd:
         c2:f6:52:c0:f0:bd:3a:71:b7:e2:64:72:fd:6f:17:c2:fd:d6:
         bd:5f:c9:49:8a:f1:0b:6c:33:fc:9b:c5:36:ba:3a:87:93:fb:
         5d:9c:11:7a:36:ec:a0:63:2d:2b:12:b9:32:5a:8f:51:0f:59:
         22:69:11:5b:36:d6:16:f2:e2:d0:b6:0f:3b:b4:1c:20:f2:f5:
         40:46:ab:53:0b:89:a6:1e:93:f6:ea:5a:bd:42:0e:9b:ac:aa:
         33:5a:8a:00:0b:14:14:04:81:95:e3:2c:76:86:5f:b3:ed:e3:
         59:17:d8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:33:26 2025 by rpki-client