Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fc4f4230-fe2b-3bab-bf6c-257b6d355b75.roa
File:                     fc4f4230-fe2b-3bab-bf6c-257b6d355b75.roa (raw, json)
Hash identifier:          odGa/0ubjpK+bm9ttYXPUusz+0KsZQmKHsZW4MDrFdA=
Subject key identifier:   BD:C1:97:91:E6:B8:89:A8:22:3A:A7:98:42:C1:15:3A:F5:83:73:E0
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F43285849D85F8A56EBDE40A2F6098A00
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fc4f4230-fe2b-3bab-bf6c-257b6d355b75.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     1280
IP address blocks:        149.20.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:8a:56:eb:de:40:a2:f6:09:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=8a3d77a2-1737-4214-a4c5-d8d1701b7fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:e5:98:f1:fd:ea:00:06:3b:07:3e:ed:7f:
                    74:ab:13:43:48:91:d5:1b:f0:25:59:02:39:24:aa:
                    13:9b:b4:86:43:f2:d6:05:72:fa:ef:8d:20:cc:56:
                    bc:dd:ac:37:fc:35:d8:2a:4b:1f:bf:cd:9d:57:1c:
                    e9:1e:ed:3e:5c:d0:2e:b3:0a:40:a1:0e:16:97:af:
                    40:d6:7c:35:74:b5:c2:00:55:b0:d6:94:be:b7:9b:
                    42:31:08:a6:34:70:2b:13:82:af:59:71:1e:73:29:
                    a2:3c:2a:5b:9b:90:60:56:fe:73:98:de:a8:ba:44:
                    63:ea:5f:66:db:1f:84:48:cd:e9:cb:54:6c:52:08:
                    bb:05:d2:e3:18:07:09:d4:0b:b2:91:df:d5:2d:6d:
                    2e:a1:73:7e:42:bf:4d:e4:8c:b1:3e:e8:6c:f3:24:
                    13:84:d8:9f:ed:62:4f:25:5f:c4:44:09:02:a7:91:
                    35:5a:bf:a7:cc:59:90:2a:6b:f8:51:a8:e4:1e:a6:
                    95:3a:45:a6:4c:a5:b6:4f:fc:4d:72:73:05:b8:18:
                    5f:d8:cf:cf:1f:0c:94:4e:ba:71:b9:22:54:63:6e:
                    23:7a:ad:1b:7d:54:d8:17:18:53:96:22:bf:ba:d9:
                    53:2d:b1:dd:93:ff:13:db:b2:ea:33:14:a5:d1:1b:
                    f4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C1:97:91:E6:B8:89:A8:22:3A:A7:98:42:C1:15:3A:F5:83:73:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fc4f4230-fe2b-3bab-bf6c-257b6d355b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:69:df:1d:6a:11:d0:a1:b1:b8:0b:f3:63:05:3c:3c:cd:4f:
         b3:c3:0e:bb:64:44:33:51:7a:6b:9a:ba:6c:d1:9e:25:14:2a:
         f1:22:ea:95:be:a6:5f:29:06:a1:9d:50:d2:27:59:9e:03:27:
         e5:9a:dd:b9:5b:19:c5:05:71:0c:df:0e:bb:c5:00:9a:34:e8:
         f9:74:81:41:04:ae:d3:a9:aa:b1:17:f3:79:48:33:c0:ca:03:
         ee:40:e5:89:c2:c7:95:a7:1d:61:75:a1:8d:9c:2a:77:bc:cf:
         ac:d4:58:4d:71:5f:73:e0:f7:74:5c:e9:64:d5:6a:84:96:f1:
         d3:b3:57:6c:fb:75:8d:4c:6c:f2:51:16:8b:5b:03:5c:4a:2f:
         43:e0:fc:2c:22:f9:f4:d0:e5:1b:6d:b6:ac:59:c8:24:61:56:
         3d:9e:d4:96:00:23:7d:aa:a7:60:89:9a:19:41:e9:9f:e1:08:
         85:42:0d:c3:b8:c9:a2:c4:38:62:43:c3:42:ee:a1:17:9f:20:
         84:5f:f1:06:a1:a3:fa:e4:8d:2f:da:cf:c6:5b:77:cc:19:e1:
         9e:42:61:4e:fd:88:f5:ad:b7:4c:1a:4d:55:01:0e:43:fe:f6:
         2a:57:1f:ea:f4:4d:bd:cf:83:f1:30:fe:b5:f1:57:41:eb:d5:
         d9:08:76:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:54:44 2025 by rpki-client