Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa
File:                     1ece9c7d-b04b-3926-9731-b706c26b400a.roa (raw, json)
Hash identifier:          AUW2PZ09qYS16R9WF3tFClfA95+qG6mx53XXASK5elk=
Subject key identifier:   A0:83:91:43:AB:A1:AC:6C:E2:2E:C6:5C:40:4F:6A:59:DF:06:26:40
Certificate issuer:       /CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec
Certificate serial:       010D0C9F432858498E647F4AA1EFF62AAD5C42C0
Authority key identifier: 6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     20169
IP address blocks:        149.112.51.0/24 maxlen: 24
                          2001:504:128::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:7f:4a:a1:ef:f6:2a:ad:5c:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=96923a50-4b77-4bc5-b91b-dcd2515c067f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:f0:6e:ee:ea:98:87:52:4d:91:a9:37:1c:
                    b1:a5:db:41:f4:5e:b1:2e:94:ed:4d:c8:08:20:28:
                    4a:62:0f:4a:5d:05:55:03:f7:15:e0:f6:eb:8a:fb:
                    0a:d4:30:6b:88:f6:60:29:38:04:fd:a0:59:6c:70:
                    e8:60:26:8c:16:f8:12:0a:f8:e5:85:91:a2:eb:c1:
                    59:ff:f2:58:ff:66:3c:a7:83:0b:7f:86:a5:b4:c4:
                    3a:40:0f:d5:54:11:f9:45:3f:2f:ca:69:55:d7:8e:
                    86:0f:14:d3:75:01:bf:21:e2:09:d4:30:54:4a:b4:
                    8d:9f:4e:64:92:32:59:4f:95:66:68:b9:35:a4:55:
                    9f:29:cf:d7:6b:4a:5e:26:de:bf:9d:0b:c7:eb:3e:
                    fb:2b:d3:54:3f:8e:72:35:55:2d:30:f1:f3:cb:25:
                    76:6c:4c:1b:40:f6:9b:ce:86:4c:0a:f5:61:07:ea:
                    09:8f:9a:2e:26:ab:e2:41:a4:13:16:db:2d:24:93:
                    e8:ed:e1:c1:59:bc:b7:8b:9e:ef:e4:67:4f:3e:d7:
                    40:61:56:28:1b:d5:df:01:6c:16:87:4a:30:13:32:
                    93:7d:1b:d2:7a:5b:26:ad:95:bc:04:96:0b:fa:23:
                    7e:de:2c:7a:a6:6e:8a:de:96:ba:56:61:22:93:9b:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:83:91:43:AB:A1:AC:6C:E2:2E:C6:5C:40:4F:6A:59:DF:06:26:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl

            X509v3 Authority Key Identifier:
                keyid:6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.51.0/24
                IPv6:
                  2001:504:128::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a3:5c:46:0e:d1:2b:6b:19:8e:66:47:61:0a:83:5e:87:c3:
         aa:2c:b6:84:17:38:16:2d:8a:17:9a:5a:23:14:69:40:39:98:
         ec:c2:e8:8f:ca:c6:59:f1:0d:1c:9d:4f:97:42:ac:ff:9b:3d:
         9e:72:22:cc:37:85:c5:79:db:4d:ca:66:ae:38:bc:c3:c2:e5:
         d0:24:8f:cc:34:f5:78:b7:6c:7c:67:ef:d8:57:a7:2d:42:5d:
         57:e1:df:35:a9:9e:86:01:6c:ef:3c:66:7a:9e:5c:5c:c5:6a:
         66:5b:ae:14:8e:51:0e:ef:a8:20:e4:28:81:69:dd:ea:ab:ee:
         a5:52:23:b7:e9:86:d3:a3:a6:f7:b2:2c:85:b6:2f:c4:ea:88:
         05:18:4b:0f:68:93:72:1a:18:68:b5:89:29:47:ac:b9:0b:51:
         16:55:68:49:c7:1f:3a:88:51:f4:93:91:08:e2:47:db:7f:a8:
         d7:c8:17:82:a1:5c:ba:9f:fa:b5:22:64:70:64:6f:e5:c2:89:
         11:ee:04:0f:3b:35:49:b3:54:53:e7:78:97:e3:aa:f0:50:dd:
         e8:80:f6:80:7d:b8:f1:89:43:8b:0f:eb:07:1e:aa:c4:a6:db:
         96:0e:6d:8e:92:da:ee:6d:b7:d1:4b:b8:b5:cb:9e:ba:83:94:
         56:c3:4e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:27:43 2025 by rpki-client