Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/a1a52061-9be5-3c50-9f2c-54703dba1bab.roa
File:                     a1a52061-9be5-3c50-9f2c-54703dba1bab.roa (raw, json)
Hash identifier:          mrw8C1yq+x+xGePqJRKx/rRYM5elKANCAq/qY3nbrlI=
Subject key identifier:   CB:F6:50:13:FA:88:13:01:E4:AC:83:87:A0:47:BC:2A:F1:FB:39:E5
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F43285849B9AA043021C1A9351326B540
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/a1a52061-9be5-3c50-9f2c-54703dba1bab.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     19281
IP address blocks:        216.21.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:04:30:21:c1:a9:35:13:26:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=f71b8ffe-42b9-4692-9bd2-bed796a2f69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:aa:c4:27:13:1b:41:b9:59:fe:5c:85:82:
                    81:88:eb:3c:0e:d3:8b:ba:9b:c3:32:d5:5d:56:0e:
                    d1:a8:6f:df:ba:e4:10:bf:04:8f:83:52:3c:60:6c:
                    86:2a:36:04:31:46:93:6f:7b:01:45:a0:4f:8a:65:
                    ff:6a:a0:9e:20:f1:57:b8:d7:cd:8c:25:59:fd:f9:
                    db:c9:f2:fe:0a:3c:b8:20:d5:32:9a:39:82:de:58:
                    b4:ea:e1:56:bd:cc:24:75:31:35:96:1b:e1:55:c3:
                    16:72:c0:c8:f6:52:c2:3b:12:50:e8:ac:b1:f6:8b:
                    df:29:a2:ae:df:b1:47:6c:03:e3:c9:48:a8:5d:a7:
                    a1:ed:a6:a5:fc:24:71:42:4a:5d:9f:2d:59:c0:3c:
                    61:6f:b0:14:b2:92:1d:e1:4b:01:9c:d5:7e:00:c5:
                    db:6f:55:f9:d3:16:b8:d7:e3:3b:fa:e7:d9:10:30:
                    a0:c6:4a:eb:99:75:ab:79:03:22:83:a9:0e:ee:bc:
                    e5:fd:38:93:e9:79:61:79:d1:f6:01:7f:c5:f6:5c:
                    24:cb:65:f4:57:6b:05:a7:b5:f0:49:f1:8a:3b:2e:
                    e7:84:61:4b:9b:02:15:5f:e2:de:c8:a3:71:a8:56:
                    a5:56:d6:3b:46:c2:05:10:ff:f7:41:e9:8a:c3:b0:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F6:50:13:FA:88:13:01:E4:AC:83:87:A0:47:BC:2A:F1:FB:39:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/a1a52061-9be5-3c50-9f2c-54703dba1bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:9b:f4:9b:d0:a7:bf:be:ef:f4:fa:fd:ea:8e:d9:0c:d1:
         f3:0a:46:06:5d:42:4f:19:fe:0c:91:9b:2a:bd:18:5f:03:07:
         4a:db:00:ce:c8:f7:c5:e7:be:8a:d7:07:61:69:d0:5b:83:a5:
         57:20:48:0e:7d:b8:78:84:1c:37:51:cd:cc:04:4a:20:dd:d5:
         dc:5b:b9:c7:30:9a:6d:62:c1:70:ca:a2:26:12:3e:73:9c:7a:
         8e:70:62:d0:c2:11:a0:2a:da:3e:ea:33:d8:7e:e7:02:e2:01:
         50:ec:4e:19:0d:df:60:e1:d0:93:a8:a3:6b:0d:50:7e:39:78:
         ad:11:1d:ed:85:30:db:42:29:72:cf:21:c7:b9:0b:5f:45:e1:
         09:b8:c4:a1:ea:a4:70:71:71:25:dc:56:69:21:f0:2d:eb:3a:
         ca:60:3f:84:96:df:57:95:b5:08:4d:27:cd:39:d7:a9:48:72:
         70:e4:b7:cc:14:67:44:e6:78:ab:9d:9e:33:c9:92:76:84:89:
         3b:28:a0:a8:b2:eb:66:37:4d:bf:92:aa:36:f7:e3:46:82:fa:
         52:b2:c8:ac:65:74:e0:79:5f:56:88:07:97:9e:00:58:9a:a0:
         c9:3e:06:d4:58:86:3b:70:fd:b2:66:e2:cc:71:59:e2:8f:f7:
         5b:5e:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:59:57 2025 by rpki-client