Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1eb1c17a-efc6-3a59-ac32-1476395adafa.roa
File:                     1eb1c17a-efc6-3a59-ac32-1476395adafa.roa (raw, json)
Hash identifier:          /qizYlDa9QbHC+n2fjTzF4U4jBlX3oLAsllIfmbWqgo=
Subject key identifier:   27:AA:B8:B3:55:9B:A2:9C:1A:67:DE:33:7B:67:8A:A5:70:CB:A2:B5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A38B2E9294E63269831E9B400
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1eb1c17a-efc6-3a59-ac32-1476395adafa.roa
Signing time:             Tue 17 Jun 2025 13:06:31 +0000
ROA not before:           Tue 17 Jun 2025 13:06:31 +0000
ROA not after:            Mon 15 Sep 2025 13:06:31 +0000
asID:                     22516
IP address blocks:        199.250.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:b2:e9:29:4e:63:26:98:31:e9:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 13:06:31 2025 GMT
            Not After : Sep 15 13:06:31 2025 GMT
        Subject: CN=4a194cb4-14c7-4a58-af7d-f9aa5c8f4a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:b8:4f:a8:50:2b:e5:27:50:09:5b:de:30:
                    4e:ae:54:25:8a:70:e6:ff:5c:00:54:1d:da:d6:83:
                    0d:34:20:39:d6:d9:cc:a6:10:71:c4:7e:c0:7e:19:
                    c7:0c:ed:5f:50:91:83:79:af:f6:5f:f0:80:57:2a:
                    70:bf:dc:43:d4:1c:8c:65:23:ec:9b:a0:62:29:0b:
                    e3:24:df:c5:c3:a1:e5:da:e8:76:40:e5:77:09:35:
                    29:41:ac:f8:3e:f9:e1:2b:6f:aa:e1:6c:57:c3:b1:
                    8b:c0:e4:ed:04:d9:07:5d:6c:a6:18:1c:d2:bc:46:
                    67:60:bf:89:79:a4:28:f9:f3:14:c8:89:06:fd:4f:
                    64:f2:23:4d:8b:19:17:6c:0a:90:b6:6c:bc:c8:42:
                    ef:7d:f5:a9:b4:57:61:68:2c:a4:19:77:c1:19:31:
                    ec:1f:39:79:81:0f:ed:0c:4e:8b:d7:34:2a:74:45:
                    64:8b:dc:ae:7e:5a:a3:40:f3:48:08:8c:56:67:1c:
                    a5:80:34:81:38:2f:78:31:4d:4d:07:ef:52:4b:ac:
                    57:89:33:af:2a:40:35:a8:66:f8:8b:a5:40:22:e7:
                    1a:36:fa:5d:f1:8f:42:02:84:27:a5:3c:11:da:53:
                    e8:ac:f9:d4:d1:67:5e:a4:a9:a9:4e:8a:30:26:b6:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AA:B8:B3:55:9B:A2:9C:1A:67:DE:33:7B:67:8A:A5:70:CB:A2:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1eb1c17a-efc6-3a59-ac32-1476395adafa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:fd:0e:17:65:a1:2e:26:f5:21:65:92:13:dc:93:5d:48:
         da:5d:cf:0e:1c:4f:fc:9d:5a:af:63:84:3e:8f:ba:89:7f:45:
         80:27:f8:50:db:68:72:04:25:42:89:80:03:62:18:f6:7a:dc:
         12:ef:a7:ed:23:84:10:18:2e:32:29:61:31:28:6b:3f:61:14:
         85:1a:d5:62:3f:0d:00:e0:c3:e5:b4:6f:1f:4e:d1:dd:55:c9:
         c8:23:75:fe:bb:a8:b9:3c:0e:cb:77:a7:db:06:50:7a:13:84:
         60:85:42:56:4a:b6:0c:49:00:ec:e8:39:8f:e0:04:55:fd:df:
         65:e9:23:94:db:c1:73:2d:a8:58:2b:55:12:ca:57:3b:62:91:
         ad:5b:09:28:2b:21:34:2a:05:a1:75:97:66:46:d1:02:a6:f5:
         f8:dc:e1:c1:c4:53:05:f5:4e:a8:8c:6d:d1:ea:69:03:1c:6b:
         36:44:12:8f:60:69:37:f2:ac:4a:a5:c1:10:90:5a:87:e1:71:
         a3:c4:e2:6f:96:54:ff:c2:38:ce:4b:91:38:71:7a:4b:62:76:
         ad:9d:79:a1:f6:14:97:9c:88:6f:b5:ca:5c:39:d3:40:80:0e:
         a5:dd:3a:19:1f:e0:1d:16:e6:f9:25:c8:4c:f0:8f:2e:99:1b:
         7c:33:e6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:35:23 2025 by rpki-client