Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
File:                     b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa (raw, json)
Hash identifier:          0wYLnNLDDD2EhPJCldeqAcz7f7PxCghAhI49mgGM5/4=
Subject key identifier:   CD:79:7C:04:3E:7E:AD:56:0E:6D:27:6E:D1:E2:DC:C2:76:B5:C6:D1
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F43285849C0A4DAA7E8DD1BD3371D96A0
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     53334
IP address blocks:        216.59.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:da:a7:e8:dd:1b:d3:37:1d:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=85c9eb28-def9-4d61-8acc-cf0786edbe53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:ca:5a:30:4a:08:42:bb:e8:09:02:22:3f:
                    f0:bd:07:2b:59:0f:cb:ed:4a:6a:c0:84:ab:f2:ac:
                    d0:52:3c:f1:9e:0a:2c:25:0e:8e:54:3d:b9:ba:97:
                    77:ea:1d:58:ed:f4:64:c7:ed:9d:a4:1a:20:8d:9d:
                    c8:89:17:e1:0a:1e:1a:a3:1a:56:1a:d9:8f:de:89:
                    d6:a3:45:bb:84:c2:70:a8:93:29:f9:99:b5:b9:df:
                    00:48:b6:0d:ee:6e:11:d3:6a:8b:83:44:f2:28:5e:
                    bc:d4:85:7e:38:67:d1:fc:5b:30:a9:2f:13:6d:f4:
                    b1:d7:57:44:ce:91:56:8f:d0:7c:ae:de:b1:75:11:
                    cc:e8:9c:7e:83:b8:16:79:8b:ec:56:c0:87:2f:6a:
                    7c:47:62:2f:06:07:c0:46:3f:93:e4:fe:12:22:25:
                    75:5c:3c:19:14:b5:36:df:75:1f:aa:45:4d:77:4e:
                    9c:e0:13:20:30:9d:07:45:e5:02:e0:65:2d:41:23:
                    2b:2d:fe:0a:1d:f4:18:e4:4a:b6:e4:6f:23:28:5e:
                    7e:a6:33:73:d2:ed:9b:24:7b:00:9f:db:2c:c9:6c:
                    b1:3f:36:b1:8d:42:ba:75:e0:a7:58:9a:71:f0:11:
                    97:42:fb:3f:77:03:5c:9b:50:c7:f0:ca:81:64:d0:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:79:7C:04:3E:7E:AD:56:0E:6D:27:6E:D1:E2:DC:C2:76:B5:C6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6f:68:dc:db:f4:92:b0:69:31:b1:dc:fc:5d:a9:51:41:4d:
         63:a2:25:5b:31:77:e2:cd:13:89:dd:46:de:07:20:79:8b:48:
         68:99:f9:ee:d6:bf:49:99:7a:1f:41:c4:4e:e2:13:7f:cd:79:
         25:06:c4:47:ce:9c:c5:10:7d:34:ad:3e:cf:f9:68:6e:30:8f:
         35:19:21:5b:25:80:b6:42:7a:54:65:d5:56:8f:e3:97:5b:86:
         44:bd:a8:ab:b3:69:6c:48:84:25:8b:3b:2c:e6:8b:72:17:cc:
         e6:42:e4:3c:c4:82:b8:ee:97:e3:71:5a:6f:15:2d:37:77:25:
         13:f7:30:14:5d:7a:7e:34:2f:2e:19:db:57:5b:f8:52:98:a4:
         00:f6:3c:e1:a7:6c:03:da:f0:9e:c8:6f:15:d5:81:45:9e:6e:
         9f:c1:e5:ea:e5:45:3f:05:64:f1:89:ed:e7:f6:31:17:ce:5b:
         2a:e4:0c:e5:e4:81:71:f7:ee:3f:63:d2:0e:83:91:c0:df:cc:
         80:c6:f2:04:2f:74:1c:f5:58:34:dc:8c:d0:4a:d4:1b:37:a8:
         7d:8b:b3:76:90:f0:0f:db:76:fd:d8:bc:3c:a7:a9:b5:df:9e:
         db:69:fb:4e:19:2a:7c:b4:61:f2:87:c6:8a:44:4b:66:c4:2b:
         4d:74:46:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:03:57 2025 by rpki-client