Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa
File:                     cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa (raw, json)
Hash identifier:          OArTuj8L6Hbw+pP64kSFX/vJPPF7xAXxNH5BgI8mw8I=
Subject key identifier:   3F:71:3E:97:05:C1:A3:A1:4C:89:1A:E5:F8:CA:C8:08:CA:F5:39:16
Certificate issuer:       /CN=481fd97a-d501-4297-871e-0024fbe50fc6
Certificate serial:       010D0C9F43285849D85FA1E76C4CDD3952264500
Authority key identifier: E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     35866
IP address blocks:        117.18.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a1:e7:6c:4c:dd:39:52:26:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481fd97a-d501-4297-871e-0024fbe50fc6
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=93b1f1d5-5c16-4b52-a615-987ef04bb2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e9:52:ff:17:3f:99:75:26:36:29:15:ba:61:
                    40:bc:7d:da:01:e9:76:57:5c:22:13:0b:8b:c2:f7:
                    e3:8c:c0:7e:42:02:69:cd:05:17:08:79:9e:76:5e:
                    a2:60:ce:0f:75:87:42:8d:69:35:8a:d0:68:5b:62:
                    1e:0e:3d:a0:58:92:cc:f4:86:ea:60:8a:38:07:9c:
                    84:c2:1c:c5:46:e2:a0:22:04:07:4a:49:44:3a:11:
                    15:08:9c:dd:9f:6c:5d:4e:ee:eb:64:e6:67:b6:80:
                    e7:f2:bf:01:86:f0:fb:5f:58:f3:f6:11:03:ba:6c:
                    9c:58:fd:1c:75:61:92:62:5d:30:f6:ba:bd:88:36:
                    a7:9c:ab:0b:12:d7:b0:8b:f2:63:cc:f5:eb:22:ca:
                    67:c9:4c:a2:88:1c:6a:20:67:0b:9f:5d:97:0a:19:
                    32:04:3b:91:8f:6c:48:bb:d1:b1:0b:2f:c2:1b:61:
                    05:bc:b2:38:ff:8d:c4:27:4f:d1:ef:a9:fa:0c:57:
                    ae:cc:57:22:45:2b:14:b9:a1:9f:d3:a9:c3:4b:7d:
                    6a:04:b1:87:cc:5a:28:4e:5d:66:e3:6d:c3:ec:21:
                    d1:ff:7a:27:e4:2c:69:69:e9:e5:b0:8f:62:ee:64:
                    55:c9:84:ae:f1:c0:97:0d:2c:fe:14:43:47:7b:6d:
                    84:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:71:3E:97:05:C1:A3:A1:4C:89:1A:E5:F8:CA:C8:08:CA:F5:39:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl

            X509v3 Authority Key Identifier:
                keyid:E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:64:be:9a:ad:e2:3f:c6:05:81:53:b2:19:e7:f9:ab:cb:21:
         43:df:96:de:74:7b:14:b6:f7:9c:99:37:d0:59:ee:1a:a4:f0:
         06:a3:db:ef:bd:1a:35:21:36:b5:b1:52:03:4c:80:9d:36:a8:
         e4:5a:f2:74:1b:98:64:99:db:ea:e1:88:53:c8:41:fb:2f:98:
         b2:a2:53:5c:3e:5b:a0:cb:6c:38:13:57:a7:f8:a1:d3:cc:50:
         78:eb:de:d9:77:e8:c0:f5:7c:2f:b6:ff:6f:5f:82:6d:06:48:
         e4:6d:bb:80:75:a5:1a:22:e6:14:52:5a:b9:f1:4b:bc:e7:93:
         6e:d1:4e:90:2b:1d:53:e0:c9:03:6b:9f:ed:68:af:7b:c9:c1:
         62:d3:53:45:f0:50:c5:c1:0f:82:6c:9e:bc:20:67:c7:a5:45:
         18:ab:5a:e0:b7:54:9a:90:25:94:8d:d4:be:72:82:08:4a:34:
         5b:51:dc:bf:8d:8b:86:92:4b:62:df:61:f7:37:01:05:40:84:
         04:9f:cd:70:1f:34:6f:f0:f4:fe:a0:9a:e3:76:f9:f7:0b:43:
         70:f5:c5:03:3f:79:63:7c:f8:52:87:d6:56:ac:59:f4:3e:8c:
         54:f4:d4:5a:f0:ca:b3:6d:e6:7a:44:23:8c:1b:4f:ee:fd:38:
         24:2b:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:17:23 2025 by rpki-client