Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa
File:                     0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa (raw, json)
Hash identifier:          B5Skv1GsN4kRalMMgoV2kv2TWm+qzFeRcqs+SWRMEg8=
Subject key identifier:   58:E4:20:B2:40:25:B2:0F:F0:F7:F6:47:A4:0C:B3:BF:42:80:E7:D2
Certificate issuer:       /CN=ebe4e372-a81b-4281-b3fe-19178dec0235
Certificate serial:       010D0C9F43285849CBCF9EA11808AE44299FF880
Authority key identifier: 0C:58:64:9B:CB:6F:FF:34:45:70:9D:A2:B8:5C:8D:E0:FC:9F:F5:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16954
IP address blocks:        209.54.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9e:a1:18:08:ae:44:29:9f:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe4e372-a81b-4281-b3fe-19178dec0235
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=a9ea4230-d6ed-456c-9306-e5bf1ad85f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ab:f7:6f:4f:f6:d3:6b:42:4c:16:86:4a:90:
                    85:8d:b7:81:55:02:2b:f3:a3:ef:76:d5:20:1b:67:
                    68:ac:0f:bb:39:cb:3e:87:ce:93:77:f4:24:bd:ba:
                    96:94:99:bf:ec:c6:fe:fe:bb:d2:99:13:a8:57:d5:
                    49:87:23:12:32:6a:5d:7d:ba:fe:b2:8a:ad:b3:25:
                    51:38:41:f9:c9:0f:5b:29:71:bf:eb:2b:8b:b3:12:
                    2f:bb:ad:6f:ff:9c:6f:b7:b3:44:4f:24:7f:4f:54:
                    7c:28:d3:7a:43:e3:58:a4:4e:ed:8f:c8:87:d3:9a:
                    7a:55:17:ff:87:f5:ee:00:2e:b2:b0:1f:73:01:89:
                    11:ec:1d:b6:d6:08:b0:44:9e:9d:b2:94:26:e4:79:
                    52:17:30:78:fb:cd:42:70:6b:aa:64:df:ba:1d:83:
                    fb:13:15:0a:e0:01:b9:aa:90:3a:47:62:14:4f:66:
                    5e:c4:f9:6c:c8:1f:81:0f:ae:fd:89:ac:4d:94:6f:
                    75:a4:0b:15:ed:3a:86:97:77:95:bf:e7:3d:d5:7a:
                    89:98:40:21:82:d5:47:ae:0e:5d:74:d4:22:f3:a4:
                    f5:5a:b2:a3:1c:33:36:95:65:aa:49:87:79:2d:f2:
                    9b:81:58:b8:a7:2a:16:03:9b:58:c2:b0:41:fb:78:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E4:20:B2:40:25:B2:0F:F0:F7:F6:47:A4:0C:B3:BF:42:80:E7:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.crl

            X509v3 Authority Key Identifier:
                keyid:0C:58:64:9B:CB:6F:FF:34:45:70:9D:A2:B8:5C:8D:E0:FC:9F:F5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:60:c7:6e:11:87:d0:d3:9e:0b:60:9b:a8:69:16:6c:e7:
         9e:7d:25:2f:7d:07:3c:8a:bc:ec:39:9b:66:84:7f:3a:47:20:
         87:80:56:12:1d:29:e4:33:ef:df:7c:e2:08:e5:8f:52:fb:5c:
         55:ba:35:fb:86:f7:8d:b7:e9:89:a8:bf:c8:07:c8:7f:6f:48:
         a2:62:47:94:87:91:52:0a:91:fd:6f:28:b4:74:27:e5:b5:11:
         77:d4:9f:33:da:2e:43:0e:fc:6f:36:8e:8e:67:4f:cc:fa:71:
         f3:a7:f2:9e:aa:64:8b:6a:1b:b7:5e:6e:e9:45:47:ee:0a:ca:
         b5:39:a1:22:28:07:2b:aa:19:5c:db:16:a6:fb:c6:93:48:e0:
         49:19:ff:e3:61:43:d5:00:89:7f:7e:e5:72:41:67:bb:bd:57:
         7b:bc:51:3e:c8:05:c2:c1:e6:98:47:62:71:65:11:b2:a8:29:
         55:c2:72:12:ad:6e:42:a3:3a:2a:1d:2a:6b:45:c7:90:b5:a4:
         a9:56:2a:ab:11:a6:09:35:61:8f:f2:7f:61:09:1d:5b:56:6b:
         72:95:47:14:81:a0:32:5f:6b:e9:44:2b:cb:78:a1:00:50:bd:
         24:c0:72:18:4d:d5:01:fb:e1:3d:df:89:6e:a2:7c:01:15:93:
         ec:64:d2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:56:31 2025 by rpki-client