Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa
File:                     db249113-d187-3685-b1cd-e35d0bc9ece7.roa (raw, json)
Hash identifier:          4S+iZCMCVQ9JMienDx8vFRWumLnaYZIAsO9L6z0vu8w=
Subject key identifier:   B8:61:53:F2:EB:6C:24:9D:68:CF:7A:4C:4C:71:D3:C5:A2:2C:49:6B
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F4328584A1E2AAC2028E157C0CED73F00
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     715
IP address blocks:        216.21.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ac:20:28:e1:57:c0:ce:d7:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=d837ffc2-71b7-497e-8544-40e2632bd018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:91:4c:4d:41:b7:73:01:b3:5f:c4:7d:8d:4f:
                    03:77:88:c3:3d:9e:c6:61:45:6b:24:83:78:e1:73:
                    61:74:ef:f6:f2:2d:4b:b7:44:b4:a3:c2:04:d4:69:
                    e6:f8:d3:1b:29:65:a2:f3:1b:0a:6a:ee:c8:68:2f:
                    a7:6b:af:5c:78:f8:38:b7:67:a8:cd:52:40:d4:b2:
                    68:fd:6c:1a:b0:a6:2b:0f:99:5e:37:e0:2d:8b:ea:
                    f2:94:1b:2b:e3:08:7c:5d:54:55:78:82:b8:4a:eb:
                    a6:8a:fe:02:5c:3f:23:ed:1f:a4:fc:aa:b9:d6:31:
                    40:56:e1:8a:a3:92:3a:82:76:85:73:58:1c:aa:a3:
                    d7:60:4c:39:3c:30:8b:4d:25:e9:d0:65:2d:d5:8c:
                    0f:2b:88:db:a7:11:3b:07:c0:29:89:7e:2a:98:de:
                    1b:4b:08:ff:ab:00:55:d0:7a:b3:af:e3:6d:25:69:
                    07:e0:02:bc:2b:df:37:eb:b5:d5:29:e8:f8:99:55:
                    61:de:c5:a0:93:5c:26:9b:73:a0:80:5d:17:bd:79:
                    50:76:c0:88:bd:21:42:3e:43:09:52:d7:d9:1b:d0:
                    73:d6:31:37:95:90:fc:b4:dd:a1:93:f8:73:78:c0:
                    99:3b:85:0c:40:85:2b:eb:09:2a:21:ea:f7:9c:d2:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:53:F2:EB:6C:24:9D:68:CF:7A:4C:4C:71:D3:C5:A2:2C:49:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:90:a5:e1:3d:93:a3:67:d2:b5:e0:8a:1c:bd:0a:15:c3:08:
         43:a9:28:d7:29:e2:1d:42:8c:11:44:8a:af:61:78:07:b4:19:
         95:82:6c:59:f2:2b:81:9b:92:99:1e:cf:24:31:37:a7:39:18:
         9e:63:95:39:cb:81:d3:53:21:5f:79:99:ff:4c:e5:c3:98:86:
         49:f4:c1:c5:68:9a:16:85:a3:80:63:f6:8d:35:88:fb:75:f9:
         ff:7e:8b:6a:e5:5e:7a:8a:e6:29:85:57:ff:30:ae:80:14:9a:
         f8:8d:38:d3:48:0d:82:a3:7a:16:f3:0f:a6:04:c3:63:18:7d:
         9b:ef:16:52:c3:fc:59:6c:ca:68:30:b0:a4:2f:1e:9c:af:5e:
         13:8c:70:16:42:1f:4e:71:51:b6:e7:cc:3d:ea:83:2b:6d:a3:
         03:99:5c:6d:1b:5c:82:cf:b9:18:9c:ff:86:1f:0f:95:97:10:
         e3:26:b0:1b:14:b4:d2:cd:12:06:09:fd:d5:53:cd:42:dd:49:
         b8:2e:c1:6f:58:41:f5:9c:fe:34:52:94:ff:dd:7f:f4:c1:23:
         c3:a7:a8:26:fe:18:e0:4d:47:e8:0c:95:42:26:5c:bc:5c:aa:
         8e:33:cb:9c:bb:f6:00:f2:17:33:cf:d2:3e:39:81:16:7b:c6:
         fd:10:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:34:00 2025 by rpki-client