Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/d94134d0-5663-317e-8778-97627723b481.roa
File:                     d94134d0-5663-317e-8778-97627723b481.roa (raw, json)
Hash identifier:          Oj0klku8KtBwSp6qu4FmGedIlp/7WQEl5/bEvP5j1jQ=
Subject key identifier:   99:95:ED:B4:1B:9C:6B:25:74:08:1D:13:D3:BC:43:2B:1F:CD:46:AD
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F43285849BDDA26DF4AF4CD7722FD3DC0
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/d94134d0-5663-317e-8778-97627723b481.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     14977
IP address blocks:        137.86.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:26:df:4a:f4:cd:77:22:fd:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=c9b076ae-e5b3-4d66-a7a1-756c2e9c4925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:00:ca:02:50:92:bb:c1:a6:9b:6b:88:07:
                    51:8c:6e:e3:e7:1f:60:c7:1d:61:b2:44:90:d3:2e:
                    ef:ea:f3:1a:e2:dc:65:be:19:0e:a0:4e:0c:2c:b9:
                    a6:74:78:e7:72:70:8c:3f:f4:f7:bd:36:4d:d4:47:
                    a1:21:94:7c:b9:b1:b2:06:18:82:59:15:36:fe:54:
                    09:59:47:f4:98:23:d9:f5:0e:a1:04:e4:00:ce:45:
                    0f:5b:8c:9f:48:93:1d:22:8b:69:d8:c7:df:ff:bb:
                    a3:59:88:a2:c2:7a:86:ad:dc:dc:5b:cb:c4:dd:0e:
                    14:9e:1b:f4:75:28:25:0a:e6:89:b2:84:65:04:b0:
                    c3:cf:fe:c2:28:fc:03:4d:56:9f:f9:08:11:04:0d:
                    6a:8f:c9:30:6e:c1:3b:13:05:6d:9e:43:ac:43:62:
                    c3:f8:4a:ac:09:40:a5:2f:8a:5f:05:2d:cb:0f:13:
                    d5:00:52:e7:2a:d6:10:67:18:c0:b2:aa:f0:64:97:
                    5e:59:8e:4d:1b:77:11:38:73:f5:74:e0:92:00:51:
                    ce:2d:53:65:ae:e7:7d:fc:cd:a8:a6:06:ce:a1:ff:
                    15:30:60:44:65:76:ef:7d:b2:b9:89:2c:8b:09:fa:
                    18:19:66:14:6f:25:27:d9:7f:fc:0c:fc:62:ae:4e:
                    ec:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:95:ED:B4:1B:9C:6B:25:74:08:1D:13:D3:BC:43:2B:1F:CD:46:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/d94134d0-5663-317e-8778-97627723b481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:ab:55:60:cb:94:25:a7:66:3c:d0:bd:46:72:a2:a3:a9:68:
         bb:26:a9:36:50:24:3d:30:71:43:bc:72:6f:cf:aa:42:83:dd:
         a1:3d:38:74:5d:41:ba:e0:9d:f8:58:04:33:db:1d:cd:da:36:
         69:7f:5c:47:d2:ce:9e:ea:10:c2:98:59:85:c7:b9:88:23:de:
         7b:e4:ac:59:da:3b:46:0f:b0:59:64:89:23:27:82:08:97:85:
         4f:c2:2f:60:ad:03:9e:9a:f8:ae:25:db:af:ab:ea:f9:5c:2a:
         1e:0f:b5:77:f6:49:8e:39:ae:3f:92:3c:4c:a4:53:fd:b1:b3:
         2d:ac:86:02:4a:27:eb:ab:ca:12:55:09:a2:01:56:bf:60:ee:
         5f:2f:fe:43:bd:4e:93:0d:f3:2e:9f:78:a3:bf:a8:df:1c:66:
         f3:14:3b:3d:a7:9c:5b:ae:b2:3f:ca:85:1b:3d:ff:95:d4:aa:
         2b:15:b0:8c:bc:9c:eb:de:9c:8f:84:ce:33:5d:69:80:cf:ab:
         75:ba:30:86:77:14:ab:d2:97:eb:fc:b5:fb:12:70:89:2f:00:
         6d:c4:1a:8d:9c:de:1e:23:3d:db:d8:d8:1d:27:0c:5a:c0:01:
         10:33:f9:8c:9a:3e:be:b8:d4:ad:a9:72:c2:79:95:eb:cb:6f:
         fc:7b:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:57:00 2025 by rpki-client