Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/ad6f7b8e-48bc-3b6b-bb2b-b02033f9e3b4.roa
File:                     ad6f7b8e-48bc-3b6b-bb2b-b02033f9e3b4.roa (raw, json)
Hash identifier:          NQHHEX9mDU6byf92k0x+NXmStLH4Ok35v9E3UdWj/5o=
Subject key identifier:   4C:B4:01:25:3F:E9:20:13:8A:0D:37:CC:36:F2:F4:A2:F5:75:D7:D3
Certificate issuer:       /CN=725a4aca-8e03-4420-8745-329c8962b4d1
Certificate serial:       010D0C9F43285849849EF82D0A52D6DEDD861440
Authority key identifier: 49:6F:54:A1:0B:DB:44:EE:36:B9:B9:6D:A2:13:78:5C:E8:68:4B:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/ad6f7b8e-48bc-3b6b-bb2b-b02033f9e3b4.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     401003
IP address blocks:        149.112.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f8:2d:0a:52:d6:de:dd:86:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725a4aca-8e03-4420-8745-329c8962b4d1
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=1cbef58c-8769-4865-8c04-4be6502a6c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:17:6f:a7:7e:e4:b9:e9:b5:b0:fb:4a:09:ee:
                    23:42:b1:58:c0:8f:f9:1e:04:02:82:49:f0:83:75:
                    11:89:c3:3f:08:0f:2b:09:fd:df:5a:76:0b:85:10:
                    56:a2:d3:ac:e6:87:65:8e:6f:ff:a7:bd:06:bf:36:
                    7e:3a:d6:4d:d5:75:41:be:5f:b4:b3:a5:c8:63:cd:
                    24:b8:cd:c0:fe:6d:de:af:43:b1:f7:68:c1:37:3d:
                    30:5e:7a:db:13:80:63:e1:3b:c5:74:10:11:8b:ee:
                    34:94:a0:52:fd:94:42:6b:d1:ca:d7:5e:0d:0c:19:
                    0b:e5:fc:7f:ff:de:61:34:a0:2e:a4:3e:79:0d:f8:
                    71:64:f7:8c:49:1b:74:66:bd:28:ba:b6:63:be:44:
                    af:8b:07:f9:da:a1:b2:91:9c:50:26:f9:a9:61:9b:
                    e4:ba:e9:a4:80:44:35:c9:9e:56:69:f3:00:e5:05:
                    35:0c:cc:00:fb:7b:73:d2:5f:25:03:78:5b:f8:22:
                    95:46:72:36:ce:d0:9d:a5:ae:aa:af:e9:50:2d:72:
                    f1:e2:51:6a:2e:73:08:f1:ec:1b:62:48:8d:d7:61:
                    a1:d0:6e:a1:f9:35:db:eb:d2:b8:cc:04:29:c4:bc:
                    39:29:1e:c2:81:ae:e5:0d:0d:bc:26:5d:69:d0:8d:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B4:01:25:3F:E9:20:13:8A:0D:37:CC:36:F2:F4:A2:F5:75:D7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/ad6f7b8e-48bc-3b6b-bb2b-b02033f9e3b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.crl

            X509v3 Authority Key Identifier:
                keyid:49:6F:54:A1:0B:DB:44:EE:36:B9:B9:6D:A2:13:78:5C:E8:68:4B:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:d1:7f:43:55:ed:85:b2:c7:62:f9:b4:cb:c0:9f:c3:1a:
         90:9a:54:f2:13:bf:33:b4:12:67:e6:7f:ac:98:40:22:18:fe:
         8e:da:94:38:eb:17:84:72:be:b1:74:a8:e9:33:b7:0a:30:16:
         5a:d8:b9:bb:88:b6:2d:ea:47:7b:8b:c6:42:b5:15:8a:68:23:
         70:ae:29:fa:f2:e5:70:ac:76:36:7f:99:27:aa:fe:2e:02:14:
         c0:2b:1e:85:62:cc:96:54:20:c3:91:4b:38:be:57:56:bc:ec:
         c8:01:e0:d0:7c:c1:f1:05:63:eb:3b:b2:de:c5:79:2f:8e:fc:
         d6:1e:dd:9f:d0:c3:74:58:58:44:89:7a:be:ac:51:f0:ac:cf:
         0e:d9:4e:17:77:e4:25:45:63:16:99:88:e1:cd:ae:6c:cb:27:
         38:c9:07:a0:a9:f4:bf:77:9a:22:a4:09:06:0f:b4:09:87:69:
         ee:0d:87:63:18:ac:58:07:7e:a0:5e:7d:9a:c3:53:7d:fc:bb:
         08:e4:cf:4c:df:bc:c4:15:12:4c:fe:aa:7d:5e:80:63:bf:50:
         1f:3b:94:b6:f2:c9:fd:e1:c5:e4:5f:2d:f9:2c:71:19:ce:af:
         92:84:76:9b:5f:94:68:c7:bf:5c:77:70:ed:00:f8:3f:d0:5f:
         e3:8b:d7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:39 2025 by rpki-client