Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/26da5e20-a55e-306d-b065-990b83c64766.roa
File:                     26da5e20-a55e-306d-b065-990b83c64766.roa (raw, json)
Hash identifier:          8jSFTYQQykQGhNNaevGbjSsm76X9WMOOFP3mjQQ3hCI=
Subject key identifier:   8D:DB:CC:57:A0:AF:6D:E7:4B:2B:83:18:DD:80:C6:FF:F6:87:93:42
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B57A1690F0BA248963F5DEB0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/26da5e20-a55e-306d-b065-990b83c64766.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     55246
IP address blocks:        216.110.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:16:90:f0:ba:24:89:63:f5:de:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=87995a48-7ba1-4332-ac67-1c18535bcb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2f:0d:b2:c5:05:45:76:9f:29:9f:90:66:97:
                    4b:8c:9d:a9:e2:11:27:b5:eb:c6:b4:63:09:8a:5b:
                    1c:5c:1a:fa:5a:93:47:92:cb:1e:3a:70:49:33:34:
                    4b:5b:31:19:2a:d0:f9:c6:e3:f0:59:d5:17:49:54:
                    33:1a:db:52:fb:89:d4:5e:53:10:be:fc:7a:75:f5:
                    73:08:bb:30:cd:60:11:75:c0:ee:78:46:54:d8:5b:
                    65:0c:7b:a1:8d:7a:be:33:3e:8f:38:c7:a0:59:93:
                    26:78:8a:ac:bf:f4:6d:3d:5f:d4:3c:b3:67:37:27:
                    06:ca:36:ae:21:75:6a:f4:7f:1d:8f:d5:6c:cc:4c:
                    71:8a:2a:35:49:47:86:66:d0:5e:69:12:75:b6:7a:
                    45:9c:f4:a1:84:d1:7d:1f:8d:5f:d2:be:49:3a:1b:
                    87:1c:9c:60:c5:fa:5a:e9:72:8c:d7:1d:d7:87:4c:
                    a2:ab:07:61:f3:ef:cb:08:e4:cb:b9:22:d5:4a:bc:
                    2b:eb:83:3b:9f:6e:15:55:e9:d3:d6:9b:90:b2:31:
                    70:e0:bf:db:a1:41:1c:b4:d3:64:8d:2b:3d:41:31:
                    ed:62:4b:ab:ad:a1:46:09:4d:7d:bd:27:ef:f6:9d:
                    7c:15:19:13:81:24:77:e4:c9:1e:f0:1f:29:be:42:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DB:CC:57:A0:AF:6D:E7:4B:2B:83:18:DD:80:C6:FF:F6:87:93:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/26da5e20-a55e-306d-b065-990b83c64766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c5:d4:47:73:dc:43:d7:d8:42:1e:d8:d8:08:6b:e0:51:f6:
         40:87:ea:82:7f:44:61:30:fb:22:98:2e:75:03:b4:93:30:1c:
         32:ab:4a:49:83:0b:83:af:d0:58:dd:02:b8:a7:26:a2:c9:0d:
         03:7a:f6:d0:b9:b1:01:83:f1:3a:4b:29:36:bd:93:bf:f5:26:
         ce:57:e2:8f:e1:57:d3:47:46:41:87:2f:42:aa:fa:f8:0e:d7:
         74:3c:9c:22:de:c2:36:70:24:4e:21:d5:b5:e6:d5:94:94:ba:
         18:5b:02:69:2c:5c:83:28:07:33:c7:cb:a3:6c:39:06:cf:21:
         d8:af:ae:f9:34:93:c9:c3:2b:b0:30:52:55:37:32:03:56:0d:
         63:ce:00:13:02:92:38:cc:b5:a4:ff:30:1d:30:58:cd:bb:45:
         2c:8d:67:d2:94:ea:ea:d7:4a:95:b7:18:b0:21:b0:30:38:42:
         3a:16:ef:46:19:25:b9:47:11:ae:e0:f4:ee:65:e9:bc:3a:e6:
         ad:0e:20:06:cc:e8:65:26:33:c9:2f:f6:2b:85:d0:6f:ae:64:
         7a:b7:78:c9:01:75:75:49:74:bd:93:69:d7:4d:25:f5:f5:b7:
         74:9e:43:d3:30:fe:f0:67:c5:ff:98:35:e5:07:fb:e6:08:a3:
         24:d0:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:56:11 2025 by rpki-client