Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/88edaa12-2b65-3471-97d4-c2f4eca828af.roa
File:                     88edaa12-2b65-3471-97d4-c2f4eca828af.roa (raw, json)
Hash identifier:          HgyxKifgEGAVmKY9YqKuZcD8Xhzvms5dho7yrrqi4D0=
Subject key identifier:   8C:42:EE:0E:85:54:B7:93:0A:2F:3E:0C:74:39:81:18:C5:1D:F8:46
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F43285849FF75176C18E8F0B8AC715FC0
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/88edaa12-2b65-3471-97d4-c2f4eca828af.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     14439
IP address blocks:        216.114.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:17:6c:18:e8:f0:b8:ac:71:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=f7519a62-b196-43e9-9ef1-46c3dc61e085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0a:05:4c:cb:35:b9:d2:35:5a:67:64:17:8b:
                    8c:ed:9f:7b:82:43:2c:77:36:e0:dc:d1:89:07:2f:
                    5a:cd:51:62:3a:c6:37:eb:82:ab:19:65:bb:0c:ae:
                    6f:aa:9d:9a:02:78:57:77:b8:46:23:fa:0b:c5:62:
                    76:1d:44:c0:11:7d:b2:2b:f7:ea:fa:79:07:5a:f3:
                    7d:ae:f5:1c:75:fd:92:45:05:fa:26:ad:f6:3d:73:
                    0f:c9:ed:e4:e1:9d:fc:20:33:70:9b:43:57:f4:a8:
                    13:d2:06:83:b9:f1:43:de:51:9c:21:48:60:74:31:
                    84:d0:69:b9:8e:60:d6:e9:a1:95:44:2d:39:60:70:
                    4f:6c:72:b6:52:f2:57:c1:63:fd:21:cf:68:4d:58:
                    7f:cd:04:7b:c3:ae:5a:8b:61:c7:63:13:75:cd:14:
                    34:dd:21:1e:c3:ff:40:98:8e:e0:af:95:11:a3:8d:
                    57:65:4c:65:94:ce:ee:26:6f:91:35:c3:8c:c6:2b:
                    87:84:34:d1:bb:e8:a1:60:8b:c4:5a:5f:b9:5f:53:
                    fd:cf:17:d2:63:8e:0c:68:16:73:7e:19:8a:d4:fd:
                    20:7c:4b:d5:2a:64:bf:95:c8:9b:73:9a:f5:d5:7c:
                    e0:df:c2:f6:e4:ce:1c:1f:6d:44:db:a6:80:87:8c:
                    85:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:42:EE:0E:85:54:B7:93:0A:2F:3E:0C:74:39:81:18:C5:1D:F8:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/88edaa12-2b65-3471-97d4-c2f4eca828af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.114.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:62:5d:2b:c5:d5:68:85:20:0c:77:80:25:26:94:ab:d3:29:
         1a:10:e6:04:81:0c:73:0c:c2:14:df:2a:83:62:11:f4:41:d2:
         61:a0:15:09:8a:bf:d8:4e:d2:57:8d:fd:ab:27:cb:df:47:9d:
         9b:33:a6:bc:bb:0b:24:7a:68:15:9c:5a:91:d0:d0:ec:1c:c2:
         a6:80:bc:f8:0b:42:be:31:f0:eb:2a:05:17:ba:fa:bc:4b:be:
         23:6d:53:d0:bf:4f:05:4e:63:2b:46:1e:f7:92:ba:36:7b:aa:
         d4:22:e2:3f:2c:f0:cc:bb:9e:af:c6:21:a2:47:fd:b7:0e:f8:
         15:da:9c:fb:43:10:05:f6:20:ce:8a:c1:2b:e6:dc:08:40:78:
         fd:9f:b6:1b:67:95:1d:81:4a:e6:08:8c:31:0d:e4:b2:fd:0e:
         90:0a:eb:5c:7b:a7:57:c7:69:51:fa:bc:f4:b4:c0:10:95:e3:
         83:ff:c1:34:6e:36:7d:95:74:cd:0a:b1:8a:66:3c:80:65:8d:
         19:24:bf:cc:12:75:45:66:86:b3:9f:8e:e3:c5:11:f5:9c:e6:
         91:79:25:66:f1:33:b1:a7:ea:9d:88:4e:df:fc:ac:e1:ce:66:
         97:5e:85:f2:f3:bf:54:79:22:5d:c8:6a:e0:be:d8:a7:d1:95:
         e4:a5:26:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:32:17 2025 by rpki-client