Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ebef965b-a823-305c-8254-d724e3200797.roa
File:                     ebef965b-a823-305c-8254-d724e3200797.roa (raw, json)
Hash identifier:          LdSH8U9NjljLdEqdcNW5MCYgzuz87mTwyxaAmG1Xh2Y=
Subject key identifier:   84:1D:3B:85:D0:91:B5:DA:22:65:BB:10:D1:9B:6D:97:F2:85:98:C8
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584A093AA0FF9CBE1EA0582BBA80
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ebef965b-a823-305c-8254-d724e3200797.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     395963
IP address blocks:        198.150.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a0:ff:9c:be:1e:a0:58:2b:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=d9bb2cc9-f1be-4bf7-b98f-35b38ee93c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:85:92:0a:cd:60:1c:c6:fa:d6:ac:38:d2:2b:
                    c1:50:dd:25:05:3b:86:9d:7b:8b:00:3b:91:00:9b:
                    13:99:59:f3:77:74:c1:98:f9:25:30:01:38:3a:21:
                    ac:df:d3:22:5f:7c:2c:ed:d1:a2:6a:3b:b2:67:0d:
                    84:b2:05:ce:cc:85:ae:98:9d:0f:11:ff:19:bd:4e:
                    4a:80:7a:64:53:13:67:7e:1b:ff:68:08:07:3f:0d:
                    54:80:71:9c:02:85:f0:af:83:dd:90:28:be:8d:9f:
                    ed:7a:12:ca:2c:a1:bb:29:65:0d:b6:21:7a:f8:a2:
                    e8:7e:47:1d:f4:5d:5d:d2:d0:09:5f:fa:13:1b:8e:
                    36:99:1e:2c:af:73:e5:22:7f:15:ce:4d:67:f3:88:
                    66:9d:23:a2:07:bf:7b:2f:a0:c4:e7:d1:de:e1:71:
                    21:a7:30:a8:cd:45:06:95:aa:bc:5e:75:07:52:67:
                    5c:5e:eb:25:a6:18:dd:8d:c5:ee:56:b5:99:72:40:
                    3f:42:51:c3:8c:b7:3e:36:b8:3a:e6:d3:3e:ae:51:
                    19:ad:6f:d2:00:9b:e4:e2:e4:1d:96:9d:8f:72:da:
                    77:18:8a:d9:43:f5:c4:14:a4:1e:a4:48:d6:2e:0c:
                    49:06:0c:88:37:64:fc:bc:25:a5:02:c2:82:08:ef:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1D:3B:85:D0:91:B5:DA:22:65:BB:10:D1:9B:6D:97:F2:85:98:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/ebef965b-a823-305c-8254-d724e3200797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:37:d8:f0:5e:b4:17:a3:c3:65:4c:df:5d:27:a3:be:21:39:
         2e:e4:c4:16:93:18:74:94:2f:02:29:dc:ae:2b:92:2f:c6:7a:
         66:7b:a1:ba:48:15:9f:2a:e3:34:31:f0:be:ff:6f:63:1e:1b:
         23:2d:4a:f0:43:29:19:54:81:c1:67:ff:aa:f1:8e:4b:83:4f:
         ca:3d:04:76:3b:7d:14:c0:cb:c0:f5:ad:c0:e7:98:73:91:38:
         5b:0a:bb:63:23:f3:28:70:cc:51:3d:e1:91:ef:ed:de:53:e8:
         84:7a:d6:e8:53:05:62:84:15:48:76:a1:47:52:06:cf:9b:c1:
         9d:e7:a2:0c:62:2d:53:d4:11:88:60:8e:63:3a:e5:52:b9:df:
         55:cb:38:6a:65:e6:c5:ac:ce:25:c0:06:c7:e8:a3:59:8e:64:
         41:2c:e1:9e:3c:19:5b:84:85:c4:29:7f:46:2a:de:8b:59:18:
         d8:1e:fe:e7:39:bd:4e:f2:0a:14:ed:6a:c0:91:1b:76:93:41:
         41:e7:f4:08:9b:e5:62:34:52:85:e4:19:4c:dd:10:d8:ba:e4:
         ed:6f:f5:50:db:f8:65:0c:40:2f:64:74:70:88:b6:cf:0c:85:
         ac:6d:d6:09:02:6d:6d:54:c2:04:ed:b4:a5:fd:c3:be:7f:f5:
         16:c7:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:36:34 2025 by rpki-client