Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f969217a-a921-3862-8df8-6b9d6c1e8775.roa
File:                     f969217a-a921-3862-8df8-6b9d6c1e8775.roa (raw, json)
Hash identifier:          6ImzcoKss2uYL6UmZSBDwFmpAPhHboYh8qahl0SGstc=
Subject key identifier:   80:90:3D:F2:12:BA:5C:8F:94:D0:8F:0E:FE:E1:5C:DB:AD:1D:C7:75
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849DB2A2E64D49F89B88AF76E80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f969217a-a921-3862-8df8-6b9d6c1e8775.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     19955
IP address blocks:        216.119.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:2e:64:d4:9f:89:b8:8a:f7:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=b611f676-e6f5-4d7a-91b8-d55d3211c499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:89:f4:38:b6:7e:c4:9b:4f:2e:27:ba:1e:
                    d9:8a:3c:25:79:a1:da:48:bf:a5:f3:5e:3f:c0:78:
                    28:f6:f6:b5:e3:3a:d3:3f:8c:8a:85:99:b3:68:51:
                    45:2a:69:58:59:2f:b2:d7:f4:5e:97:4f:26:34:52:
                    b6:0e:e7:11:da:74:04:56:54:30:8c:57:65:2a:68:
                    79:4c:fe:91:fd:b3:c1:4c:72:4c:74:69:93:da:c2:
                    ec:f5:f3:ed:00:d3:e8:14:58:14:aa:bc:8d:bd:f9:
                    ec:ab:ba:13:48:71:b2:b2:50:e0:6b:cf:7c:5a:7a:
                    c7:ee:d8:dd:38:cd:80:02:81:41:2d:37:9c:51:64:
                    5e:24:20:83:27:2b:7f:7d:eb:dc:e0:84:c8:6d:af:
                    84:16:6d:4c:0e:a0:74:3a:2c:4a:9f:63:73:7a:dc:
                    2f:64:bf:e5:7b:3d:86:78:88:47:9a:ad:d1:6b:12:
                    1e:d7:7a:87:b4:89:e1:50:93:3e:3c:6f:7e:26:9d:
                    dc:44:e4:76:1f:2a:fd:6a:f3:33:e5:bf:53:ca:65:
                    a8:e4:a6:28:7c:2b:27:e5:77:b8:7d:a7:f4:c6:73:
                    93:5f:69:39:86:06:bf:52:29:0d:04:1b:00:ef:6f:
                    15:f8:d8:ca:eb:e3:64:a1:02:d9:50:97:e7:a0:97:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:90:3D:F2:12:BA:5C:8F:94:D0:8F:0E:FE:E1:5C:DB:AD:1D:C7:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f969217a-a921-3862-8df8-6b9d6c1e8775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:af:6d:e3:09:32:bb:68:04:ec:c0:9a:28:4f:92:40:90:
         98:6b:3d:bc:d3:b3:9b:42:4d:24:69:73:8f:c3:a3:83:21:15:
         64:73:02:a9:07:d6:5a:5f:2a:50:54:3d:fe:e2:71:92:17:02:
         c0:e8:0c:be:e6:17:c0:26:c3:f6:86:04:51:74:e3:8d:dc:2b:
         7f:63:c0:f2:35:ea:22:ff:21:17:93:76:c2:41:fd:d1:75:1c:
         28:4e:4b:10:f4:8a:79:e6:3d:7f:ae:e7:be:f6:45:20:a1:f9:
         cd:11:8e:44:df:a8:e2:0e:00:a1:c4:e0:aa:cd:83:b8:35:60:
         78:3f:3a:c1:6a:78:5a:21:30:2e:e7:02:3b:47:e0:99:a3:13:
         3c:fa:ee:8f:d2:96:04:9a:eb:45:3e:a5:b3:67:4a:d5:a5:7e:
         79:57:22:9d:44:8d:46:f3:83:f1:fb:90:31:1f:0b:d0:c5:26:
         ee:f6:af:fb:df:26:49:28:3b:ba:e9:7c:c4:3e:f2:29:68:55:
         f6:aa:95:5e:19:ac:76:20:0b:68:18:02:70:2e:76:f0:d0:2b:
         94:7f:80:01:b8:dd:95:a2:3d:67:ca:8e:04:d0:8f:99:0f:4a:
         e3:20:ae:94:1e:62:39:62:26:1f:27:b6:73:b3:00:a3:74:67:
         99:2d:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:31:14 2025 by rpki-client