Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3bfc0a2a-05ea-3bd8-82da-45d481a89eac.roa
File:                     3bfc0a2a-05ea-3bd8-82da-45d481a89eac.roa (raw, json)
Hash identifier:          xXD483r2uWzyzLV18Gxhoj+zy1toGSBc/rb4QbRW6ao=
Subject key identifier:   A2:A8:B0:91:93:3E:EA:A3:A7:C4:35:91:74:39:AC:43:A1:A0:01:83
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A1B5FECC098D059E15C67FAC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3bfc0a2a-05ea-3bd8-82da-45d481a89eac.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     393336
IP address blocks:        149.19.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:ec:c0:98:d0:59:e1:5c:67:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=fbbfb770-81c8-475e-b98d-c9f1fcb44790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:57:1a:e4:e4:84:28:9f:4b:3c:35:e0:49:
                    7f:2b:b8:01:3d:60:00:8b:19:66:bb:26:ac:8c:b8:
                    42:21:32:a4:78:eb:59:32:e0:b3:08:a9:85:c7:5d:
                    15:14:82:ee:c8:fe:7c:10:63:de:5e:b0:1e:ab:cf:
                    b4:7a:1d:2e:ed:28:8a:1b:df:03:98:1d:1f:71:34:
                    47:db:bd:66:03:83:77:90:55:83:b9:ec:01:5e:8b:
                    ae:3d:50:c5:f2:b1:ac:58:da:92:ed:e2:3e:39:e1:
                    f1:f9:94:23:e3:2a:f3:d6:fc:fb:f4:5b:fb:9a:7f:
                    e6:42:9b:76:1a:d7:90:e6:8c:ea:ed:45:e4:ab:9a:
                    fc:ad:70:ca:e5:bf:42:67:d3:87:fa:6a:e6:a0:e7:
                    b7:9c:ca:53:ab:fc:d7:ca:97:34:c8:e4:d2:b3:2d:
                    7b:45:5a:95:27:66:fa:24:ee:d0:19:eb:39:61:89:
                    50:84:11:c0:df:f6:be:1c:e2:80:48:a8:9d:ce:9c:
                    5c:fb:87:ce:6c:84:a2:7e:de:76:17:8d:a6:ac:4b:
                    21:c1:4d:a1:8b:38:1c:6d:4e:6e:76:56:9e:b5:0d:
                    fd:9d:b4:93:55:64:de:55:1a:b5:97:7b:52:6c:0a:
                    7b:ef:54:30:0e:7b:5c:5c:1e:a1:1d:bb:a3:9e:54:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A8:B0:91:93:3E:EA:A3:A7:C4:35:91:74:39:AC:43:A1:A0:01:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3bfc0a2a-05ea-3bd8-82da-45d481a89eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:eb:f9:f2:59:de:42:62:14:b6:4a:fb:54:36:72:3b:d5:10:
         b2:bf:96:75:9c:9d:73:2f:d8:0e:44:29:8c:d7:4d:23:50:ce:
         44:53:e7:f3:1f:9c:6f:87:07:79:4b:ff:fa:e2:84:29:33:c8:
         bd:bf:1c:42:fb:8c:12:c5:8c:cc:7c:4d:44:ec:33:86:9f:4d:
         ef:33:2c:b0:19:82:0d:a2:6a:db:f4:40:d8:9a:b2:c7:90:84:
         ca:d3:6d:db:80:8d:50:81:aa:2f:a9:15:1b:29:9c:87:c9:ff:
         9b:7f:36:90:43:cf:69:eb:dc:72:8c:1f:27:ab:f0:23:55:ca:
         fe:90:3e:a4:b0:22:78:2b:a0:64:5f:52:08:1e:05:1b:ac:f3:
         bd:de:a2:74:1d:45:4f:4e:ca:1b:43:45:6c:df:88:03:52:6f:
         d5:61:17:b9:0a:c5:09:61:4e:17:a8:97:ff:d4:54:ab:2e:54:
         c5:c0:da:a2:d9:c0:6e:18:aa:93:6b:29:df:13:ce:05:f1:74:
         26:9f:ce:34:16:fb:38:c3:8e:92:27:64:6c:5e:b6:99:98:76:
         15:95:e6:98:c3:f6:a9:9f:2d:00:c4:53:e1:d2:19:a2:e6:0c:
         19:f0:b0:02:6d:6c:71:a6:35:bf:8c:3e:74:3f:ce:64:dc:78:
         30:ac:05:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:49:00 2025 by rpki-client