Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/54ea0daa-c132-3f75-aa3d-f517089d32d7.roa
File:                     54ea0daa-c132-3f75-aa3d-f517089d32d7.roa (raw, json)
Hash identifier:          xmLBBklOY94yEC7RFeeFZgYnWOH/sH3bIcfzY9cB28c=
Subject key identifier:   2A:BD:5F:51:76:6B:2F:E5:EB:1E:7F:EE:C9:3A:D5:A6:B7:B0:60:45
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B9AA00C8FD91F34F2386A900
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/54ea0daa-c132-3f75-aa3d-f517089d32d7.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     397422
IP address blocks:        216.110.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:00:c8:fd:91:f3:4f:23:86:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=b0ade712-987e-484d-b359-16b3af9f81d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:74:02:50:f4:59:0f:40:20:76:ab:6e:ee:
                    8a:d5:b9:52:d8:66:d4:72:cb:1d:db:11:12:0b:7b:
                    45:10:38:4d:73:66:78:47:c3:36:23:44:a9:3a:75:
                    74:d2:5a:72:17:bf:3d:f3:38:18:6d:64:f9:1c:9e:
                    e0:74:b1:6c:28:85:6a:f8:e7:47:06:3f:74:52:a6:
                    a7:c2:5a:2b:3a:04:52:06:86:e8:65:f4:68:a0:6f:
                    00:fc:b9:b9:d0:60:66:e3:53:e7:a8:e8:34:fc:41:
                    d7:ff:a2:42:79:34:6e:c7:33:36:c4:4e:58:ed:3b:
                    dc:19:6c:53:02:85:dd:8a:ac:5a:5b:47:43:21:33:
                    e0:b0:d7:75:88:c9:87:e2:c2:82:33:fd:4a:2d:94:
                    e9:11:cb:a1:30:67:9f:f8:73:ac:4a:7c:fa:11:bd:
                    61:1c:77:46:f2:0a:7a:47:b7:1b:04:f1:ed:cf:fa:
                    3a:ee:79:8b:7d:72:28:96:8e:36:32:d4:b5:27:e7:
                    cd:08:ef:96:0a:d9:74:d0:dc:e2:ff:87:b2:47:61:
                    60:6f:08:19:1e:e9:a6:fa:99:4c:6d:f4:4a:43:f8:
                    d4:03:1b:c6:ae:2d:22:ab:ec:e0:12:9c:a9:57:85:
                    e2:b9:1b:d5:03:5c:bb:92:30:af:c5:93:c2:02:b1:
                    b6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BD:5F:51:76:6B:2F:E5:EB:1E:7F:EE:C9:3A:D5:A6:B7:B0:60:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/54ea0daa-c132-3f75-aa3d-f517089d32d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6e:a9:5e:3a:37:0d:e6:db:29:b9:5f:a9:14:3f:70:86:06:
         15:40:22:8a:fd:c5:29:fa:57:d0:da:6b:c2:a6:43:e1:8b:5d:
         37:dc:9a:55:c7:0e:55:fa:9a:f9:c7:75:e9:64:c7:73:5a:1e:
         5e:98:b4:01:d1:3c:8b:38:00:d0:6a:fd:82:dd:00:29:c9:02:
         9e:4e:c5:b7:6a:6a:1e:72:7a:2f:38:14:57:93:36:90:ac:0b:
         8f:64:56:62:5c:de:11:50:aa:1f:1e:1d:a1:db:22:18:7c:de:
         9d:79:9e:af:f4:bc:2e:fa:e6:7f:5a:79:79:ae:10:76:30:1a:
         f3:82:2e:b0:44:e3:a6:70:7c:5b:0b:80:3f:15:60:80:1e:99:
         28:64:d9:28:45:cf:6d:73:db:0d:9c:03:ae:2f:db:90:cf:6e:
         05:7a:d6:c1:1f:1c:bc:1d:1f:4a:31:2e:1d:30:9a:f7:26:ea:
         ee:a8:86:c0:7a:6f:1a:a6:e1:8f:b6:ab:76:6f:18:99:5f:13:
         b5:6c:27:a9:26:c9:ac:d9:21:07:ef:b0:9d:a5:9a:d6:1f:47:
         ba:a9:8b:87:4e:34:13:15:e1:5f:15:ca:21:c5:b4:db:1d:92:
         4b:4b:e4:bd:b5:f0:c4:e0:56:43:cc:28:ba:5a:94:b6:9f:f4:
         8d:8f:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:59:46 2025 by rpki-client