Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/97b05dc1-de1c-306d-bae8-1f880fad5d0d.roa
File:                     97b05dc1-de1c-306d-bae8-1f880fad5d0d.roa (raw, json)
Hash identifier:          ZtWRWBPiFkILwycmEil1pUAB+W3mKhbfqeEcBDMktRo=
Subject key identifier:   E2:A6:69:02:F4:D8:71:53:06:B3:6F:5B:83:AA:CD:B5:62:6A:56:72
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849DB2A2F3474CD5D1B8D6BA880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/97b05dc1-de1c-306d-bae8-1f880fad5d0d.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     19955
IP address blocks:        216.119.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:2f:34:74:cd:5d:1b:8d:6b:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=1bf507b9-0d62-4b07-b5b4-e9424621259e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:9a:d7:ae:66:22:c7:83:c0:a4:51:8e:d9:
                    e7:a6:a7:17:90:d5:aa:f6:81:a6:16:4e:12:fa:40:
                    d2:8a:e8:77:c1:56:4f:09:be:9b:38:40:bf:cb:29:
                    91:ea:be:b8:5c:03:d1:21:5e:7b:5f:20:ee:4f:c3:
                    23:0e:82:d0:8a:0a:f7:ec:3f:44:05:14:0e:86:5d:
                    68:ff:05:20:be:b0:cc:8d:6a:db:85:05:3c:b1:bc:
                    55:05:39:6d:e7:e1:5a:f4:9d:ea:3c:ae:e5:72:5c:
                    08:a8:25:e6:0e:c8:15:a6:1c:99:5e:f6:6e:ee:da:
                    d1:ab:92:e4:62:7d:eb:52:53:8a:1c:18:14:80:39:
                    08:d7:3d:c8:cc:55:93:f8:1b:4c:46:29:26:48:99:
                    9f:88:94:1a:eb:17:93:47:65:85:46:3d:c5:03:30:
                    25:e5:85:38:3b:e1:0b:07:76:35:ad:30:63:b0:66:
                    44:98:d2:f3:02:66:5b:94:a6:3b:91:d4:f7:d8:7f:
                    2a:82:34:4e:93:42:a2:5a:aa:dd:bb:d2:07:b3:0a:
                    48:60:b7:d9:3b:81:9d:d7:8a:68:04:1c:23:2c:a6:
                    9a:00:6c:3c:30:64:ce:f3:4e:12:29:e0:88:46:e8:
                    54:69:a5:3b:cf:fe:3b:1f:3c:eb:ef:8b:c9:3e:39:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A6:69:02:F4:D8:71:53:06:B3:6F:5B:83:AA:CD:B5:62:6A:56:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/97b05dc1-de1c-306d-bae8-1f880fad5d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2c:7d:c3:56:9f:9e:ff:02:3f:27:67:2b:7a:90:6f:dc:13:
         22:25:13:2a:ae:19:dc:d7:69:c4:36:a0:5a:e5:bf:dc:28:e1:
         1c:23:cf:fa:55:40:a4:3c:b2:d4:f8:6f:9c:51:29:44:e1:d9:
         64:11:ef:97:10:f6:86:f8:ff:11:6d:13:a0:48:0b:de:da:14:
         e7:d8:5f:ff:8b:47:9d:06:f9:d3:73:82:b9:1e:cb:8b:1a:a1:
         da:15:1c:d5:78:65:a5:a8:39:89:2a:21:9a:0f:52:15:87:d0:
         80:f2:2f:49:6a:3e:bc:84:59:b0:4a:82:d2:81:4d:09:20:03:
         c0:7b:dc:5e:6c:84:27:d6:3a:32:9f:9c:57:7f:ba:d9:36:fc:
         94:85:15:1b:52:2a:ab:76:6b:bd:b5:48:6a:af:47:35:be:33:
         26:b5:76:0d:2d:59:5d:d2:b6:50:79:19:00:4a:13:fe:6f:78:
         d7:a2:04:5a:aa:ea:e9:dc:d3:6d:5f:32:0a:35:42:07:e1:eb:
         d1:e6:a4:b6:d7:47:4f:94:34:b4:e6:a0:b2:1c:88:2d:93:a7:
         e7:5e:9c:e8:cb:12:d6:1c:77:1e:2f:18:57:dd:64:22:b8:d3:
         1a:24:be:9e:c5:85:ba:3d:38:62:e2:0f:a4:81:1f:98:57:67:
         6e:86:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:40:31 2025 by rpki-client