Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/30fa26f6-7cb1-3846-8766-59afe66328ca.roa
File:                     30fa26f6-7cb1-3846-8766-59afe66328ca.roa (raw, json)
Hash identifier:          ZTEMeri3LJhJMMy7trkAgdHtXvpJOWK5fNpeTC7/0BM=
Subject key identifier:   0A:24:E4:FC:25:03:1E:61:32:31:98:1F:B0:8A:BC:BB:92:D2:2A:5A
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F432858499D59D81DF93D57B593172180
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/30fa26f6-7cb1-3846-8766-59afe66328ca.roa
Signing time:             Tue 22 Apr 2025 21:36:46 +0000
ROA not before:           Tue 22 Apr 2025 21:36:46 +0000
ROA not after:            Mon 21 Jul 2025 21:36:46 +0000
asID:                     16509
IP address blocks:        167.17.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:59:d8:1d:f9:3d:57:b5:93:17:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Apr 22 21:36:46 2025 GMT
            Not After : Jul 21 21:36:46 2025 GMT
        Subject: CN=a7d68860-76e8-4986-888d-15cf3e088198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:af:60:ca:e0:0a:90:2f:42:73:b6:c3:a2:
                    7c:f7:d7:66:22:59:c0:6b:09:f5:ec:f5:9d:42:f5:
                    79:cf:50:46:b6:7a:58:6e:17:96:b0:ab:6e:5f:12:
                    d5:57:d0:05:e9:ef:77:f2:c4:47:d9:b6:0e:b7:27:
                    51:6b:0e:8b:74:2c:6c:bb:b1:7c:4c:ee:50:d4:51:
                    82:85:54:30:de:09:2e:b7:7e:b8:32:a9:6a:33:a3:
                    05:b1:f4:82:f3:8f:16:2f:6d:61:49:de:3f:ac:46:
                    13:1a:9d:67:53:1c:ac:89:1d:e4:de:2e:18:af:c1:
                    17:d7:93:67:f4:ed:c9:11:db:9f:ed:9d:7b:c1:23:
                    3e:5e:9b:da:6b:a8:20:a2:a3:32:68:09:ee:70:4b:
                    7b:3d:56:97:6b:c4:4a:9b:d3:40:6f:25:0d:86:3c:
                    83:ee:d9:c8:d6:fc:b9:db:0e:9b:ed:fe:95:79:9c:
                    0d:86:86:b1:3f:3a:5a:f1:34:b6:ee:37:eb:18:2a:
                    67:72:d9:9c:02:78:03:67:a0:f5:39:13:80:db:3e:
                    c7:92:14:4f:8a:a0:18:23:f8:8d:03:44:d4:ca:c2:
                    8a:91:93:de:8d:3e:2f:cc:84:40:81:ab:34:1a:6e:
                    28:ab:e8:3d:90:34:72:6c:52:6e:e9:82:73:55:ba:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:24:E4:FC:25:03:1E:61:32:31:98:1F:B0:8A:BC:BB:92:D2:2A:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/30fa26f6-7cb1-3846-8766-59afe66328ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.17.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:57:06:83:cd:cc:96:c9:00:91:5c:c5:8f:b3:31:c6:d4:73:
         1b:85:e1:24:e8:4d:3e:98:ad:01:0a:51:01:67:30:fb:8b:97:
         38:71:79:43:2c:fb:33:58:7f:4f:88:c9:57:35:71:bc:26:41:
         ba:46:c9:5d:14:e9:7f:bd:2c:45:79:01:5b:27:e0:9a:c5:62:
         81:c1:c1:8b:0e:30:9f:0c:28:47:20:19:12:fb:58:f4:50:80:
         69:bc:f0:c2:94:f7:5f:5e:29:fe:dc:6d:aa:4e:7e:21:4d:67:
         bc:63:b5:ef:19:e0:c2:6e:00:94:7c:63:96:f0:c8:d4:d7:ce:
         35:06:62:d4:5f:2d:2b:4e:4d:88:b8:e6:bf:c6:9f:a5:2c:2f:
         83:28:af:34:5f:5c:d7:98:cb:5c:35:dd:b5:10:b7:2d:32:ff:
         4a:55:40:43:58:d8:58:66:21:de:8f:eb:7c:2e:2a:d5:fe:55:
         f8:ab:d5:be:6e:94:a4:2c:35:21:49:b1:bc:a0:d3:53:0c:40:
         49:97:7b:52:a1:46:32:74:c2:c4:b1:f2:52:94:0c:9e:e7:f1:
         b1:40:9e:c8:29:20:23:90:cd:b2:ba:29:0e:ac:b7:14:5e:dd:
         54:fd:bb:e3:4e:16:f1:84:f9:29:f4:f6:0c:0f:27:76:14:75:
         32:c6:a9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:53:29 2025 by rpki-client