Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa
File:                     0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa (raw, json)
Hash identifier:          3PtuHx4McvE5b6xKS87u8rWNSDDMb/83fjRH8gqFv1M=
Subject key identifier:   30:40:4E:50:29:09:C2:86:3C:B9:85:A1:7B:37:6F:78:53:AC:68:84
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584A14657225B2BFC756EEA74E40
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     33392
IP address blocks:        208.103.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:72:25:b2:bf:c7:56:ee:a7:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=2723c182-c28d-46c0-bf6e-795d330db797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:63:f5:c3:4c:83:a2:a2:be:89:97:ad:cb:c0:
                    10:ae:7f:0d:b6:8f:3e:5c:f6:2a:a1:90:1d:6b:78:
                    6d:48:59:79:ce:d1:1e:43:f9:a4:0b:03:a3:f4:3f:
                    41:07:54:ed:58:ba:8b:9a:87:01:bd:09:52:3e:39:
                    13:62:3f:d4:ba:69:7f:b6:7f:79:76:3b:25:80:d5:
                    09:17:94:c1:37:b7:07:f4:26:fb:37:ea:23:fa:cb:
                    26:ae:67:f2:41:cc:95:1c:8e:7d:64:69:21:10:b4:
                    35:02:8e:e0:2d:26:39:13:97:2a:e9:ee:fd:82:4a:
                    5d:0a:ff:86:ad:bc:ba:42:7d:a4:69:59:eb:59:df:
                    45:95:61:0b:79:83:8a:23:dc:bc:d4:04:9e:67:7b:
                    fc:9e:85:80:19:98:ed:b5:85:f4:e9:c8:b5:0d:7d:
                    fd:a0:6f:ff:de:cb:06:de:26:67:b9:8d:d0:a7:4d:
                    df:63:09:88:9b:3d:09:a7:81:13:3b:b9:28:c5:21:
                    f3:4e:f5:12:c8:0e:18:d7:45:f1:b0:c1:71:57:d1:
                    2d:67:aa:9a:fb:5f:7f:29:c8:78:72:97:17:78:1d:
                    fd:6e:c5:28:c9:2b:6c:2b:b3:cf:27:54:da:ff:ed:
                    91:5d:86:1c:10:22:d8:5e:96:65:27:98:24:29:e0:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:40:4E:50:29:09:C2:86:3C:B9:85:A1:7B:37:6F:78:53:AC:68:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c2:2d:ae:db:f6:8e:05:10:d3:cb:b7:ac:ca:8d:e1:a7:d6:
         4d:ff:9a:04:4f:dd:ec:9c:29:fd:5f:b7:41:a8:22:92:b0:f2:
         40:01:dc:09:d9:c4:7c:b9:11:14:48:1e:67:a8:a9:64:ad:79:
         dd:d9:41:23:5e:28:32:c8:31:23:35:ce:ec:b5:13:3d:0f:24:
         69:83:1e:ec:1c:85:c9:b1:b2:0c:3c:f2:8c:01:41:9a:56:6e:
         d5:a0:68:16:46:98:da:86:cc:ed:a3:bd:1f:17:64:37:f1:b3:
         f3:9f:15:fa:e5:5c:10:57:f8:20:f6:d7:df:33:99:c3:1d:15:
         cc:c2:c5:81:03:85:d3:21:4b:19:a2:fd:ce:29:96:10:95:8f:
         a5:27:3b:ec:c5:54:58:57:39:81:d3:58:f4:47:4b:cf:ba:cb:
         70:7a:64:9f:c9:3d:e7:cd:a0:9d:d9:27:f4:bd:f5:ef:a5:0b:
         87:9d:4b:09:73:d0:02:fc:dd:e9:23:59:90:d0:08:8c:eb:8f:
         23:2f:28:02:5b:99:11:c7:c6:b7:68:e1:53:3b:f4:50:6e:d0:
         e7:26:eb:5e:28:5b:17:7a:58:e3:37:0b:7f:ae:86:dc:49:23:
         0f:4b:eb:68:58:e8:b9:e7:19:d9:02:f5:60:74:b9:cb:dc:d2:
         3a:15:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:37:24 2025 by rpki-client