Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa
File:                     d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa (raw, json)
Hash identifier:          elP4of6wPShqlIAErV3UuFeaN/S8I8WWvbr1mBLKl68=
Subject key identifier:   66:68:1D:79:3E:0C:AD:0E:21:54:65:18:4F:A9:EE:64:4A:0D:62:E8
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584A1465610A178201A16D7DDA80
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     30132
IP address blocks:        149.20.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:61:0a:17:82:01:a1:6d:7d:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=33fbe35a-b7de-4d5e-a111-bd415303802b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:93:12:c8:e9:41:a4:02:17:38:c3:25:02:03:
                    0d:78:e7:d1:d3:0e:ab:e8:04:7b:ec:c3:d4:58:61:
                    3b:6b:52:46:a1:16:55:d3:8a:e3:a4:7b:31:31:88:
                    48:af:dc:af:9d:31:07:57:b9:56:e0:20:88:b4:45:
                    73:ad:d3:9a:75:f5:06:d8:71:e4:ff:fd:f5:73:2c:
                    66:95:54:0d:5e:2f:5c:64:6f:58:1f:5a:82:4f:60:
                    2a:57:0e:f9:d6:e3:67:0b:cc:8a:c6:a7:08:71:ad:
                    b1:15:7d:e9:dd:40:4a:00:eb:d0:bc:d4:89:bf:d9:
                    f5:24:8f:13:63:db:65:2e:b9:85:c9:f0:d1:ce:6e:
                    6a:19:ac:ae:59:d4:0b:24:dc:b6:b4:83:3c:37:44:
                    7e:f4:7e:0f:15:92:22:00:67:e5:cb:5a:f2:5e:94:
                    3a:cc:94:23:26:81:42:e9:cb:41:fd:5e:87:58:21:
                    0a:0c:48:97:3d:2a:b8:7d:9b:45:28:7d:f3:aa:ae:
                    09:c3:08:da:a2:06:e3:49:4b:6c:e7:f5:a1:5f:31:
                    50:bf:05:bb:e7:09:c4:eb:e2:6d:5b:fd:98:37:d8:
                    8d:79:af:3f:79:0f:2a:16:00:35:42:ac:f3:f3:be:
                    d8:9f:60:e8:e4:39:00:44:d7:3f:27:99:fb:cc:e7:
                    fa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:68:1D:79:3E:0C:AD:0E:21:54:65:18:4F:A9:EE:64:4A:0D:62:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d9dadca9-e1ce-3069-b7ea-dd090ba66171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:28:56:14:d0:df:95:80:71:0f:8e:78:de:01:0f:3e:c6:7b:
         b9:36:b1:70:2b:d3:82:b1:83:46:bf:11:17:5d:3e:31:bc:1d:
         0f:10:ea:f0:22:f7:23:0c:95:5d:03:d0:1d:f4:4d:1c:23:40:
         7a:bf:33:fa:bc:5b:8f:c2:24:df:0c:4d:40:10:3b:36:54:e0:
         bb:25:0a:96:76:6f:70:03:50:20:cd:38:45:d5:a2:53:11:57:
         e2:6a:a9:1c:4c:bb:e0:0b:03:04:4e:50:ff:16:da:2e:97:01:
         22:e2:b4:f0:e2:81:30:c8:4f:94:8b:4d:aa:fa:dd:dc:e2:b3:
         e1:90:70:d0:2d:a6:3c:5a:4c:d6:99:79:40:09:cc:a8:e0:8a:
         df:bf:82:84:ec:e5:7e:0a:6b:7e:66:d4:bb:4a:63:0c:da:6a:
         ca:bf:9e:2f:84:de:97:0d:18:55:35:1c:17:9b:6e:ba:9d:f5:
         3f:77:6c:2b:86:d4:83:d8:b9:25:19:42:9c:40:b9:63:ec:be:
         6c:97:55:e1:da:df:c9:d4:ed:62:92:10:c7:0b:1d:5e:43:64:
         28:1c:25:3d:93:7c:c3:d3:26:0d:50:bf:d4:c4:12:b7:69:e1:
         7f:e9:2d:6c:43:57:d9:56:9d:69:ea:af:5f:4b:af:e4:0b:09:
         ef:13:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:02:46 2025 by rpki-client