Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/0a1836da-cda9-343f-894d-83a386a7f1c0.roa
File:                     0a1836da-cda9-343f-894d-83a386a7f1c0.roa (raw, json)
Hash identifier:          r8Jv8C4H5XjCPjMqjLWhghHG3QuiKPtUYRUZ/CMHk0g=
Subject key identifier:   B9:33:98:1D:14:7A:11:D2:1E:5F:94:D2:E3:07:00:19:57:6C:F4:78
Certificate issuer:       /CN=27a0a206-0e8b-48c1-9191-51dfb13bd365
Certificate serial:       010D0C9F4328584A0C0571F91DD4C2FBFA240D00
Authority key identifier: 5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/0a1836da-cda9-343f-894d-83a386a7f1c0.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        167.251.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:71:f9:1d:d4:c2:fb:fa:24:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a0a206-0e8b-48c1-9191-51dfb13bd365
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=37d61588-ca24-4b06-8192-8f3e19e76142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:02:92:79:a8:a1:83:56:65:c6:9c:70:79:6d:
                    b1:58:1f:00:5c:b7:d2:54:d3:21:3a:ee:9b:0d:20:
                    86:ce:16:37:3a:c6:dc:01:07:8c:d4:27:07:cc:2e:
                    62:52:20:41:2f:13:1b:29:df:4b:1f:89:02:61:c6:
                    dd:69:27:ac:09:1a:9c:44:af:80:ef:a8:cb:57:53:
                    64:f1:58:3c:8c:13:04:51:9d:0a:29:67:9c:be:66:
                    21:94:66:74:98:61:c5:8e:6f:cd:1f:cd:0a:ee:b3:
                    fb:93:49:32:d8:35:8d:a0:bc:0f:21:a0:36:74:fd:
                    4a:ff:cb:e8:e3:32:0e:90:30:99:ff:55:98:e3:63:
                    06:0e:44:76:11:7c:88:ac:e4:23:53:d7:48:c9:46:
                    5a:91:a3:dc:3b:ab:c1:2b:b8:33:d5:ee:60:b3:bf:
                    a0:bc:c1:b3:d2:63:30:f4:5e:d0:91:96:fe:d2:f4:
                    cf:d9:4a:1e:85:0f:b6:54:4e:f6:1b:73:38:ad:0a:
                    21:b5:8a:ab:a1:89:46:cf:7e:24:71:d9:d5:06:f4:
                    af:1e:31:bf:bc:30:74:0b:eb:bb:5a:aa:f6:d0:f4:
                    2c:c3:e9:24:64:79:04:aa:d7:a1:64:6b:95:e0:76:
                    29:81:2c:aa:08:0b:e2:74:56:32:58:61:8a:5a:c6:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:33:98:1D:14:7A:11:D2:1E:5F:94:D2:E3:07:00:19:57:6C:F4:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/0a1836da-cda9-343f-894d-83a386a7f1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.crl

            X509v3 Authority Key Identifier:
                keyid:5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.251.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:ed:59:d1:4a:b3:5f:74:ca:29:93:64:a9:52:65:f5:4e:
         c5:ab:a3:23:52:2a:57:ef:0c:19:10:dc:54:92:25:5e:4f:57:
         0f:4d:cb:7e:60:9c:b2:ce:b6:02:d2:f9:b3:58:88:c9:6b:3f:
         56:27:86:c5:0f:63:77:43:53:3a:3d:91:41:a7:64:21:28:f7:
         84:31:93:41:f4:27:f1:43:02:80:a0:c0:fa:d5:ba:08:6c:d6:
         5a:52:02:53:65:80:09:16:c3:02:67:fb:71:6b:18:69:8a:59:
         ee:4f:4b:8a:24:33:c8:08:e0:d1:1d:a6:19:d0:79:fc:4d:80:
         4b:eb:c8:bc:7b:95:25:5f:4f:f9:bc:ba:9c:57:a7:19:d5:41:
         87:c9:a7:8b:1a:bc:7b:ff:9e:54:8f:61:c7:37:9f:e4:24:6e:
         83:1a:d7:63:94:46:06:d0:5c:8f:1e:cc:2e:58:60:2b:07:bb:
         6a:d0:d1:71:0a:c0:96:33:d1:d7:77:8b:c8:0c:de:c2:10:ad:
         9d:73:35:ce:51:91:98:cf:ac:25:ad:19:99:31:30:45:17:31:
         d5:ca:e8:24:b0:99:f2:24:71:fc:59:ea:08:72:26:ca:45:41:
         82:c9:83:56:cc:2b:16:e6:e4:65:89:38:b0:d0:ce:38:b9:0b:
         ca:2a:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:33:16 2025 by rpki-client