Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/bdb6738a-a5b9-35fc-968e-9eeaf4ed41be.roa
File:                     bdb6738a-a5b9-35fc-968e-9eeaf4ed41be.roa (raw, json)
Hash identifier:          1Xvmd86pLtzT2x7Yux43vN5KOLb5BViY5qhg1rQqBeY=
Subject key identifier:   0F:1A:7A:51:DB:C6:BF:B1:46:F4:6C:26:44:10:38:38:D5:83:E5:5F
Certificate issuer:       /CN=27a0a206-0e8b-48c1-9191-51dfb13bd365
Certificate serial:       010D0C9F4328584A0C05722A6CF8448A2889B300
Authority key identifier: 5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/bdb6738a-a5b9-35fc-968e-9eeaf4ed41be.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        167.251.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:72:2a:6c:f8:44:8a:28:89:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a0a206-0e8b-48c1-9191-51dfb13bd365
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=671cb691-7a6a-404c-a369-706256774766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:a5:8e:56:91:e4:1a:73:4f:39:fb:37:38:
                    54:c7:93:0a:fe:ee:f3:1d:1c:7d:fa:3d:26:38:e8:
                    a4:35:0f:91:9d:44:12:e4:65:2c:d7:b7:ab:77:c5:
                    69:33:a9:2d:80:76:ea:5d:89:2f:9b:77:05:7e:fc:
                    77:b1:3f:a4:92:5a:2d:6f:3e:0a:9f:79:20:ea:c3:
                    b4:97:a8:c0:05:96:77:8d:51:d2:14:1d:c0:58:e1:
                    51:80:b8:a3:74:ea:84:c5:27:63:bd:ec:19:1d:f1:
                    5e:46:69:dc:5d:e3:96:90:6d:12:77:fa:eb:24:bd:
                    79:07:1d:4b:35:b5:33:2d:9f:2f:30:ec:11:81:09:
                    39:e1:3f:f7:4f:ff:c8:f7:21:35:e7:28:36:47:ff:
                    2d:74:e8:82:0c:e2:9e:8a:8c:e8:03:42:64:13:c0:
                    50:01:ea:f4:7a:86:f0:e3:dc:d4:98:09:3f:ff:ac:
                    6f:16:ba:a6:82:19:94:4c:df:52:8f:a8:88:44:46:
                    d7:95:6e:c6:43:11:9e:eb:d4:df:b9:ab:2f:41:8c:
                    fd:08:35:37:79:9a:cc:bd:b9:e6:39:c1:f0:81:32:
                    67:ea:4e:42:14:66:f4:27:5f:c3:f5:43:cc:9b:58:
                    d3:5b:8b:37:fc:7c:c3:ef:65:1f:7e:0b:78:c5:c2:
                    20:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1A:7A:51:DB:C6:BF:B1:46:F4:6C:26:44:10:38:38:D5:83:E5:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/bdb6738a-a5b9-35fc-968e-9eeaf4ed41be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.crl

            X509v3 Authority Key Identifier:
                keyid:5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.251.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b9:2f:0b:39:e1:70:cb:88:13:c0:5b:fa:19:9c:2b:f5:e3:
         e6:7f:eb:e1:e8:92:b7:b9:5b:17:53:aa:12:7a:84:ea:7b:3f:
         5c:fc:41:da:0c:3d:15:e8:89:af:35:f9:c0:4d:99:9f:b2:39:
         7b:ae:fb:58:6f:27:d0:d2:39:b3:46:0b:65:37:cd:38:aa:10:
         4e:dc:12:ff:d3:c8:bc:11:00:5c:c8:dd:3a:ff:9b:c3:c6:4b:
         4c:ff:96:ed:d3:54:60:4e:79:f8:a1:e0:4f:05:c3:aa:42:f0:
         49:eb:1f:d7:82:68:81:2f:a4:a9:97:b7:98:e3:58:ff:15:37:
         a3:ec:e9:f3:29:8a:86:f9:80:45:41:a7:8d:b4:73:11:f6:7c:
         a2:3a:b8:a8:0f:ef:19:7f:9c:37:c1:6b:1a:8f:b6:a4:a4:7b:
         03:ed:21:7a:c3:fd:be:c4:e8:34:19:ca:51:9b:af:fc:3b:7c:
         2a:0c:a1:ba:27:a2:c7:8c:91:d0:a9:e3:0e:31:bf:08:b4:f2:
         40:7a:fc:f6:19:9f:5a:c4:e3:b1:3a:5e:a1:af:23:b1:12:ee:
         87:c2:33:82:1e:e5:24:81:5b:54:75:c7:02:a0:fd:3c:4a:fa:
         3f:bd:19:9c:3b:b2:1a:e1:75:8a:67:95:71:f6:c4:f2:61:74:
         e5:22:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:33 2025 by rpki-client