Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
File:                     44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa (raw, json)
Hash identifier:          OO5S0KkZHCB3kYtWTbX2hEL1bQicJegaFEyBIv1VKos=
Subject key identifier:   17:2A:07:E7:8C:C5:1D:14:B5:C4:87:5A:DA:82:35:38:73:EE:4F:FF
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584A1B6001965AAEB69B03295500
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     2381
IP address blocks:        198.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:01:96:5a:ae:b6:9b:03:29:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=ba4217d1-b094-462f-b7bd-4a8d41ae5326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:63:80:be:20:1b:7c:82:c6:ca:7e:ca:63:
                    01:7e:fb:85:43:f6:64:27:d7:0e:65:13:38:59:c6:
                    96:a2:f1:a1:43:55:7d:ad:8c:3f:f3:8a:32:68:bf:
                    ef:11:17:19:50:df:ca:1d:60:ae:64:7f:8d:14:16:
                    eb:6c:83:c6:2c:4a:41:4c:12:04:ca:02:ee:0d:d5:
                    cd:8f:ab:82:38:35:00:9d:7f:b5:45:41:20:78:c4:
                    5f:b1:0e:1f:42:9f:e7:80:c3:94:5a:c5:d7:5b:63:
                    18:4f:cb:2a:09:e8:1a:11:96:13:bd:a8:0c:9b:ab:
                    6a:f1:2f:08:25:1e:a0:fb:df:85:29:aa:31:3c:9c:
                    9d:a4:1c:fb:c2:80:2f:9b:70:89:47:1b:b6:39:a8:
                    81:e0:db:58:ed:0d:f6:52:3f:b5:af:ec:ff:2c:8a:
                    59:c9:d2:12:2a:28:b5:31:44:f0:1b:2e:6e:28:98:
                    6a:a0:ca:61:65:a6:68:7a:f6:9d:56:d0:6c:29:dc:
                    7b:9a:66:c1:51:17:90:6a:23:0c:05:1b:e9:c3:ae:
                    9b:69:7c:00:c2:c9:9a:02:ab:53:eb:b9:83:0c:42:
                    88:a6:2e:35:31:a1:9b:35:29:fa:cc:4b:17:03:45:
                    bc:ae:8f:59:c5:1c:a5:61:a2:83:b8:21:30:71:0a:
                    43:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2A:07:E7:8C:C5:1D:14:B5:C4:87:5A:DA:82:35:38:73:EE:4F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:48:8c:c4:6a:88:e3:1e:e8:23:46:8a:28:24:ff:cc:0c:0e:
         cb:98:20:76:1d:4f:d0:c1:d6:75:8a:6f:09:83:ba:f8:28:58:
         6a:c4:87:80:ac:3f:15:ef:d6:7a:58:21:69:c0:c3:ff:3d:4c:
         e5:a3:5f:5e:d7:f8:20:ba:ba:bd:71:a1:6a:2b:ba:e3:37:67:
         96:9d:e1:93:45:8b:93:2e:eb:ae:43:f7:d9:74:5c:cf:30:80:
         05:12:5c:32:ed:0b:8b:22:a7:02:ef:64:a5:ab:1f:5e:8e:a7:
         76:cd:6b:09:15:a7:78:23:0c:3e:07:91:20:74:b5:32:4d:e0:
         76:48:e1:a8:d0:e1:30:90:48:38:91:37:77:a9:b7:e8:78:58:
         9b:76:29:9b:74:71:d3:71:56:d7:36:2e:b1:84:b5:1e:2b:53:
         56:a5:fb:9f:a1:b4:b0:92:d7:ae:5f:7d:64:c1:26:da:f8:65:
         17:8f:5a:bc:88:99:99:be:76:a5:0b:e8:01:14:fd:26:7e:40:
         88:77:fd:c8:54:ed:a9:4e:d1:c0:5b:bb:b2:ef:24:43:08:93:
         bd:64:fd:43:c7:78:d0:47:9c:13:76:bd:61:05:ae:0e:d0:86:
         a4:1a:a6:f3:03:25:de:a8:8d:6f:4c:2d:e0:64:79:5b:7a:bd:
         bc:27:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:30 2025 by rpki-client