Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5503f1bc-b934-3420-9985-dfb62f4a1612.roa
File:                     5503f1bc-b934-3420-9985-dfb62f4a1612.roa (raw, json)
Hash identifier:          WTeWFIfTZs8COz3gFiCDBOHmgb/LSXU8IQnHVg/qHoM=
Subject key identifier:   B8:56:78:F4:27:16:B4:A7:34:37:9F:A2:24:C7:02:78:41:4D:31:C7
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A506AEC4D6CEF2566438BEFC0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5503f1bc-b934-3420-9985-dfb62f4a1612.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     5769
IP address blocks:        216.113.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:ec:4d:6c:ef:25:66:43:8b:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=ffef1a7f-871d-4d11-a741-c3688bf1dbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:01:b8:b5:4c:4f:44:ad:88:4b:96:a6:ec:
                    52:6c:42:79:c2:8f:57:06:0f:0f:c3:c1:53:8a:88:
                    97:d8:e1:c6:e2:53:4f:bf:ed:77:1e:69:09:17:7c:
                    eb:08:b6:9d:b1:da:05:44:6a:1e:f3:2a:df:f6:30:
                    cc:a2:db:f7:27:84:d9:ba:ff:1d:52:20:32:9d:fd:
                    c6:6f:3e:2b:83:f8:59:02:70:7e:68:1d:14:cc:69:
                    38:5e:2e:c1:a0:ac:3f:4a:6e:cd:97:c8:ce:19:f0:
                    1c:55:71:13:4b:a7:02:11:87:bf:d3:eb:3a:4c:2f:
                    cd:17:b2:21:10:f7:9d:2e:25:6c:b4:cc:30:37:b9:
                    58:22:58:55:bd:1c:0e:1d:03:25:9a:16:a5:12:a7:
                    22:65:c1:43:a6:5c:7a:10:22:bc:08:1a:a8:72:ef:
                    e7:b2:37:ec:1f:ea:3d:83:4a:0d:21:1b:8c:7b:f8:
                    d0:fa:26:a1:a3:94:54:03:ec:3e:e9:ca:a7:54:75:
                    dc:15:6b:2c:a9:31:b6:69:4f:48:d4:3b:7f:e4:33:
                    48:81:46:7a:7b:ef:06:36:7a:8d:48:e8:5e:f0:d5:
                    3d:72:03:92:7a:d3:09:99:e9:c6:80:28:ad:53:f3:
                    43:6f:89:f8:f8:86:9e:44:34:66:f4:4c:d9:e5:b4:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:56:78:F4:27:16:B4:A7:34:37:9F:A2:24:C7:02:78:41:4D:31:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5503f1bc-b934-3420-9985-dfb62f4a1612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:40:90:3a:05:9f:f4:67:95:bb:6b:8d:bd:d9:9d:7f:c0:0b:
         8d:47:9b:02:75:fd:69:c1:52:53:f8:3b:44:4b:32:4e:e4:5e:
         a1:6a:bd:52:db:47:07:b7:1f:33:a1:8e:07:e0:04:a6:dd:b3:
         cd:f4:0e:c2:b3:27:8c:53:f3:06:4a:34:33:5f:26:77:98:b4:
         fe:5c:29:b1:5b:1a:c5:a6:a1:d0:2e:ea:15:fb:5a:72:df:02:
         12:39:fa:12:7d:84:81:0d:5f:2e:bc:25:59:de:0a:f5:cb:a6:
         bc:8b:32:75:5b:e5:cc:98:91:66:4a:76:59:36:d8:0c:a6:2d:
         63:b1:02:9f:b7:be:99:e4:ff:68:fd:e7:00:88:75:e9:20:d2:
         2a:67:c9:3d:a0:84:a2:7a:af:82:49:89:b6:8a:3b:45:fc:e5:
         1d:ad:ad:7c:b5:00:fa:5d:00:dc:a4:c6:28:53:c6:73:99:2a:
         04:39:cc:d6:f4:da:3d:c2:99:ea:ff:70:01:7f:bd:1c:f6:70:
         d6:d2:1e:12:43:70:30:aa:a8:aa:ee:7f:b2:09:7c:94:30:9f:
         e6:7c:cf:a7:af:0a:3c:be:fe:a2:48:3f:d2:86:88:11:51:88:
         c9:14:5c:fd:2b:4b:e6:37:77:26:93:13:76:9c:71:43:69:33:
         11:35:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:37:30 2025 by rpki-client