Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/2eb533dd-af48-3036-afe1-a1d4ebc0f702.roa
File:                     2eb533dd-af48-3036-afe1-a1d4ebc0f702.roa (raw, json)
Hash identifier:          PiTNaCrLvD4NBvVwuTr02kNSQrRQj0719oPEOl5GCv8=
Subject key identifier:   34:1B:38:AF:B3:69:DD:83:44:1A:FB:2B:5A:FB:BC:45:C9:D3:0B:51
Certificate issuer:       /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Certificate serial:       010D0C9F4328584A30503FBF08D20660383FFC80
Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/2eb533dd-af48-3036-afe1-a1d4ebc0f702.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     26277
IP address blocks:        216.108.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3f:bf:08:d2:06:60:38:3f:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=04683db1-42c8-43ac-b0a2-f781037c509b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:ef:21:5c:40:62:b4:7e:46:e6:4b:b9:a0:
                    bc:bd:18:21:24:05:25:db:44:41:23:49:93:fa:b9:
                    ee:3a:9f:d6:ef:cd:94:e4:d3:28:f6:28:8b:e9:fb:
                    e1:d4:13:59:8b:5c:9b:d8:cc:82:d8:ef:72:90:00:
                    ec:69:9e:d4:38:9b:1d:5e:be:9c:ec:fa:5a:15:6a:
                    4c:cc:44:7a:f0:8b:fd:ce:f5:8b:09:fc:ff:86:e4:
                    35:e3:8c:9e:97:3e:10:be:60:a2:68:dc:b8:aa:dc:
                    16:08:02:2c:db:ee:4d:59:55:36:3a:13:2c:e4:0a:
                    4e:1b:ff:f9:5c:01:11:dd:c1:b8:98:2f:05:62:fb:
                    ab:b2:c7:a6:1b:d5:c5:c6:25:88:9e:8c:d1:d4:3c:
                    7f:c4:dd:0d:be:a5:fb:be:b8:4d:77:ae:18:7d:53:
                    a2:38:c4:ae:84:76:a1:c3:0d:8a:1b:c8:1a:f8:67:
                    a8:b1:52:48:2e:e6:c5:ff:a1:05:1a:fd:cc:da:13:
                    34:78:5a:8a:80:94:61:a7:3c:60:93:4e:f0:13:46:
                    bc:23:47:58:22:b9:f9:11:c8:3e:1d:10:98:ee:d9:
                    9b:3f:54:e5:59:5f:1f:1b:81:01:52:9c:61:70:fc:
                    32:49:2a:c2:fc:b1:6b:ae:c0:ed:dd:35:56:ec:83:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1B:38:AF:B3:69:DD:83:44:1A:FB:2B:5A:FB:BC:45:C9:D3:0B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/2eb533dd-af48-3036-afe1-a1d4ebc0f702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl

            X509v3 Authority Key Identifier:
                keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.108.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e4:ba:a0:ad:e7:7f:28:8d:3e:73:cf:cd:6b:a7:a0:03:5c:
         08:b6:1d:87:8f:f3:8b:35:12:a5:c2:bb:64:eb:62:a4:86:e9:
         37:b0:e4:19:d4:10:7b:15:9a:19:26:e9:56:81:a2:9a:6c:ee:
         e9:1f:d3:e7:f8:8c:15:19:34:c8:8c:25:39:10:14:5f:bf:35:
         51:3a:99:0e:f0:82:4b:80:99:38:4f:02:25:27:00:cd:55:ca:
         9d:35:94:67:dc:cd:30:cf:62:6b:e8:90:7d:71:4e:df:d3:cc:
         e6:5e:b9:8d:62:9f:f0:aa:00:6d:80:90:18:fa:26:ee:a5:24:
         d6:3b:c2:c0:3b:54:a1:38:c7:d5:79:ff:57:6f:8f:d1:cb:ed:
         c2:0d:0f:be:ee:a8:62:9f:6e:a9:4d:c5:97:84:de:66:80:93:
         42:7e:90:23:0f:44:b9:3b:9f:f2:84:0d:63:dc:02:6d:4c:74:
         5a:31:a9:cf:e3:4c:8a:61:e9:63:47:22:b0:97:16:ce:98:a8:
         dc:13:cc:6f:0f:e2:cf:dd:9d:e3:b5:59:c9:61:00:8e:b8:71:
         c4:01:17:2f:b3:62:c7:1a:ed:8b:86:f3:16:a5:5a:00:b0:17:
         f0:8b:9d:1f:25:29:65:8d:9b:a9:b9:c9:0a:f4:d8:c9:28:9b:
         45:41:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:35:16 2025 by rpki-client