Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/9ac8cc80-2679-36a4-9d5f-742cb766ebd6.roa
File:                     9ac8cc80-2679-36a4-9d5f-742cb766ebd6.roa (raw, json)
Hash identifier:          8r9oHTWezFzFccc2J9HBIIH0FTKriJneFDLtCkaKoLY=
Subject key identifier:   E3:09:70:98:67:7E:17:C1:C5:AD:E7:37:E8:B6:54:C1:8E:9A:AC:66
Certificate issuer:       /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
Certificate serial:       010D0C9F43285849DC8FB90623D2300FA170BD80
Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/9ac8cc80-2679-36a4-9d5f-742cb766ebd6.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     14587
IP address blocks:        216.99.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b9:06:23:d2:30:0f:a1:70:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=41f1b1dc-554d-48a6-b339-49037f1f8e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:6e:14:a3:67:9f:53:9a:02:47:9e:61:b7:
                    cd:e3:2e:5f:11:93:0b:43:81:4c:88:f0:d3:44:79:
                    83:28:4f:6c:72:ca:68:28:7a:71:64:83:cf:7e:13:
                    02:d4:ca:2f:eb:d8:6d:03:ab:77:2b:44:2f:96:18:
                    11:ac:12:d2:0c:b9:7d:31:ae:dc:81:b0:b6:7a:bf:
                    83:ca:3d:e4:bd:d5:f2:3d:8d:94:93:6c:fe:8a:ee:
                    0a:24:3f:6d:aa:87:61:81:b7:c6:be:e4:73:0c:99:
                    22:ce:5b:7a:66:be:fe:8b:48:45:94:25:ba:f9:70:
                    4d:ab:bc:75:f7:de:b1:b3:f7:75:46:b0:68:5b:e7:
                    5c:22:a2:49:58:c2:59:94:e8:8c:25:4e:5e:8d:75:
                    9b:c7:64:af:09:ba:1a:87:72:eb:44:cc:f1:c0:71:
                    9a:27:a6:84:ea:a3:c6:b9:59:63:5e:9d:1c:47:6f:
                    a0:6e:83:7e:6a:83:2d:64:ba:2b:af:c8:c9:04:fb:
                    6a:9f:15:11:ac:87:81:45:b7:b3:53:47:f8:59:9d:
                    8b:cd:62:2c:c0:46:40:99:e7:f1:d7:e2:28:dd:ba:
                    39:77:5c:db:aa:4b:39:ce:71:32:63:a3:c8:58:98:
                    20:58:cb:9b:42:7e:6d:05:54:7e:43:66:bf:6b:25:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:09:70:98:67:7E:17:C1:C5:AD:E7:37:E8:B6:54:C1:8E:9A:AC:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/9ac8cc80-2679-36a4-9d5f-742cb766ebd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:cb:7e:0e:25:1e:7d:0c:cf:0f:c9:7f:e9:f2:fd:67:2d:
         9c:4e:c4:c8:d5:82:ad:a2:22:9b:b8:2a:d4:f8:c5:94:a6:ec:
         b2:5c:5b:82:d5:03:39:fa:26:f1:bc:14:05:85:7f:97:ac:94:
         c6:55:fe:71:b9:e8:9e:3c:47:d7:ef:3b:68:82:d7:11:f0:f2:
         5c:ec:7a:c6:f6:f6:ab:3d:35:ba:8a:46:be:4e:0b:fd:72:e1:
         77:73:27:8b:b4:34:e8:b5:52:f6:9b:94:c4:59:d9:23:04:ed:
         b1:c1:1a:98:d9:05:81:46:79:b2:7e:aa:5f:11:31:07:de:77:
         e4:7f:c1:eb:02:66:52:89:42:eb:61:43:02:61:fc:25:02:f3:
         96:c9:d2:c6:4b:8b:12:ca:23:18:4d:2e:48:ca:eb:a9:1f:f6:
         24:f6:ba:e9:18:5d:ab:f2:42:2f:d7:08:f9:95:9e:81:f4:ad:
         43:f0:f8:43:38:a4:cc:5f:2f:4c:6c:11:ff:1c:24:f6:e4:82:
         27:a6:a4:f8:40:b2:53:7c:8b:1f:e3:47:d3:fc:06:c5:e4:9d:
         37:86:4d:aa:c9:1c:1d:b9:9d:ea:40:7c:93:a9:5c:06:60:4c:
         8e:59:21:33:0b:d1:8b:92:a8:6d:93:76:03:5c:39:6b:e6:f6:
         c7:a3:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:03:49 2025 by rpki-client