Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa
File:                     1c6d454f-eff3-36c5-a242-1155de42889c.roa (raw, json)
Hash identifier:          fmb6udhW9DdbtrUIbf+vYFr64mXAhRknXXWTUd3lMJY=
Subject key identifier:   0F:02:02:D7:D0:97:74:08:16:1C:6C:06:1C:72:99:A9:10:DF:36:DF
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285849CBCF9B36B1A5698E207B3080
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        129.41.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9b:36:b1:a5:69:8e:20:7b:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=ef2f95d6-3961-4948-95f9-e151bc49e7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:08:9a:79:7e:8f:8a:a7:de:44:b3:a2:51:
                    e6:df:2f:28:51:d8:19:e3:34:03:c9:4e:fd:9f:c3:
                    03:3c:01:d4:1c:e7:a9:8b:df:ef:4c:0c:98:b9:8b:
                    41:95:b5:52:d4:87:38:94:c7:83:4e:92:40:43:c5:
                    27:62:b9:c1:d8:0c:09:a9:72:26:27:d9:fc:c5:69:
                    a6:a2:af:8a:be:86:1f:f5:3d:dc:2e:f2:12:fe:dd:
                    91:58:03:71:4f:ee:f6:d2:8d:c9:c2:5d:fc:1a:05:
                    ce:d8:c6:d7:32:a6:f9:6c:94:d0:82:db:ed:8a:8c:
                    7d:a3:13:02:9a:ee:e1:eb:20:f3:e5:b0:95:34:ba:
                    a0:a6:b0:6f:ae:7f:c0:27:f0:b4:a8:1a:2b:53:68:
                    7f:32:d4:53:c2:60:f9:9b:8c:b5:a1:5a:87:2a:50:
                    68:8c:48:0c:ff:97:df:ca:3d:52:e9:55:eb:1b:72:
                    3b:cd:4e:ee:0b:44:1b:67:f8:1d:67:e1:96:fe:60:
                    09:43:34:8a:4b:e7:37:3d:f1:5f:82:e8:0f:43:9b:
                    8a:75:fb:f4:27:67:bd:c3:1b:34:81:9a:d0:66:99:
                    13:ae:b8:36:eb:6e:82:66:27:42:56:c8:aa:ea:43:
                    71:d4:c0:bc:11:8c:09:8c:90:98:95:2a:c1:60:da:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:02:D7:D0:97:74:08:16:1C:6C:06:1C:72:99:A9:10:DF:36:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:04:25:30:11:43:c4:50:77:dc:80:77:52:81:d3:1f:e4:9f:
         e2:7c:97:1a:d5:0d:2a:cf:a5:43:d6:f8:fa:52:b2:13:a5:ab:
         7c:a1:0b:ff:f7:29:ca:b3:75:a3:6d:d4:07:b7:7a:3c:5b:21:
         6e:e6:a3:5d:f3:cc:d6:61:c1:18:89:e5:00:a2:57:f3:b5:3a:
         79:10:09:5d:ab:fe:6f:00:b2:0a:85:60:dd:12:21:cf:cb:41:
         97:a9:ef:0c:01:95:49:ae:54:ab:46:d5:1e:76:f4:06:a1:1f:
         4b:66:1c:12:32:ed:40:8d:5d:94:13:15:fa:ed:32:58:13:7d:
         bc:3b:5e:62:11:25:59:27:83:01:a1:3e:17:08:eb:da:f9:00:
         8b:aa:08:38:45:1a:60:ac:b5:dd:47:dc:07:2b:be:07:15:1b:
         cf:6d:72:2a:21:55:fb:46:89:c0:0a:fc:01:f5:9e:df:6f:1d:
         7e:86:c3:cc:0a:20:7c:76:03:7a:37:b1:df:8f:95:d9:87:ec:
         cc:fd:bc:a0:ab:37:81:34:e4:94:90:83:20:dc:9f:6b:3a:8e:
         3f:df:db:e3:09:ed:91:21:17:67:c0:28:1d:c6:ca:ab:74:ec:
         a0:73:cf:fd:70:50:8a:92:72:72:78:33:68:c4:d5:8c:f7:f9:
         8b:ba:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:15:09 2025 by rpki-client