Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/324edc91-ce19-3b74-87c2-49408a273b64.roa
File:                     324edc91-ce19-3b74-87c2-49408a273b64.roa (raw, json)
Hash identifier:          WOxUZRA8RgcoCaHM1R7g8+tNyLtZ+ZadjIJTJmokRvQ=
Subject key identifier:   82:EF:DB:3A:19:D1:5F:B3:1F:9A:10:26:74:93:36:5A:5E:0F:1E:CC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A549B14DFA31D4FC63BD15600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/324edc91-ce19-3b74-87c2-49408a273b64.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        216.108.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:14:df:a3:1d:4f:c6:3b:d1:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=567d16c3-749e-4253-92cf-40c9bb3f3a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9d:88:3b:8f:3b:37:cd:a7:69:ba:3c:d6:c8:
                    7d:3f:d2:9e:4e:7e:e1:e9:3e:6c:95:6f:94:4d:5a:
                    9d:07:0a:66:0d:ec:93:8c:3a:34:6f:8d:a5:7e:af:
                    f4:fb:18:42:25:e3:56:65:cc:4a:d7:af:a1:1c:92:
                    e7:8d:7a:24:a9:b7:c2:cf:01:5e:e3:a3:37:7c:f1:
                    3f:a5:0a:f6:44:a6:05:ed:55:f4:9c:33:ee:3d:ff:
                    ab:d0:f8:fa:5f:a5:fb:33:d9:b2:6d:8d:3b:d5:ec:
                    78:3c:41:0a:fa:80:35:b2:0e:56:49:c8:69:23:00:
                    97:be:f1:16:c9:09:f0:95:67:f0:ab:4d:e7:77:d8:
                    0a:4f:cb:51:64:10:9d:5d:2e:33:6e:39:92:3d:a8:
                    79:34:3e:d1:61:1e:34:da:f4:f6:c5:fb:73:5b:07:
                    e3:2c:91:8f:84:6e:0e:7d:da:ce:45:af:bf:6f:ff:
                    30:73:16:a9:a6:ae:26:80:60:22:68:41:90:7a:77:
                    42:27:72:e3:ae:8e:a2:43:f2:29:bb:c2:e8:c4:6c:
                    93:67:10:83:37:ab:f9:31:bd:1d:bc:66:e5:57:06:
                    96:99:37:07:50:da:8a:13:47:67:35:5c:1a:4f:95:
                    7f:e5:f8:00:73:d9:af:cc:cb:50:48:2e:32:03:ae:
                    e2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EF:DB:3A:19:D1:5F:B3:1F:9A:10:26:74:93:36:5A:5E:0F:1E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/324edc91-ce19-3b74-87c2-49408a273b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.108.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:41:b8:28:69:f8:1a:bd:75:ba:81:7d:e8:aa:8a:7c:d6:
         aa:96:a3:01:af:4d:e3:69:04:68:dc:67:d3:a5:3e:22:60:84:
         ca:92:40:1d:70:db:ad:ed:01:3a:db:bb:e9:1d:fc:c5:9b:c9:
         33:30:84:13:38:dc:22:8c:9b:38:1f:a9:47:c1:6d:38:20:83:
         25:ff:7d:cd:1d:b0:c8:5c:43:73:0c:9b:ed:5b:04:30:7a:b6:
         1a:bb:24:e0:e8:13:eb:f5:50:63:a6:d3:4b:54:d5:00:04:f1:
         49:0e:92:9c:38:c0:09:26:18:ef:40:4e:d0:a3:d2:be:c3:4d:
         ae:fc:e8:6d:4f:b2:83:e5:be:5d:0d:11:01:74:5d:0f:07:02:
         cb:be:06:d8:6b:0a:5a:0b:61:9a:23:8d:ec:5a:10:23:d8:58:
         4f:0a:66:9a:86:53:e9:58:f4:cd:63:03:4a:fe:6d:5a:09:09:
         ce:1d:84:30:ba:5f:1f:3e:aa:fa:f9:8a:de:9a:18:e4:0d:fe:
         6a:ac:4c:db:27:39:fd:80:80:0a:d8:27:ac:0b:f3:34:f2:9a:
         71:2b:a2:21:c8:55:d7:2d:ad:9b:56:25:73:c2:4b:1b:71:25:
         fe:02:c2:df:ff:f0:47:cb:85:d9:6c:e7:89:5a:9a:e8:c2:7f:
         9b:49:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:07:12 2025 by rpki-client