Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa
File:                     6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa (raw, json)
Hash identifier:          KV1k1EkSvPNrb1pPqX1XDJwaLZuuNwuWH5HuRG2FZy8=
Subject key identifier:   A7:12:A2:89:00:87:37:F3:3C:0C:35:74:4C:0F:47:63:7D:CF:20:E0
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F43285849FCAA7B0559B114FCAD23FE00
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     19107
IP address blocks:        216.234.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7b:05:59:b1:14:fc:ad:23:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=0406197a-4a05-4139-bed9-d1d4fb8c0145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3f:f8:ea:26:3f:f0:a1:c3:1a:6b:31:97:04:
                    fd:47:19:4e:4b:ab:23:72:09:9a:ea:1c:b1:a6:fc:
                    0b:4e:f2:7c:5c:2d:ed:89:70:8c:67:d4:1c:98:31:
                    c0:38:46:a5:8f:88:c9:ed:20:e7:29:8d:34:99:f8:
                    29:b8:ec:dc:c6:bb:49:9d:ec:0a:a8:3a:bc:e2:c7:
                    17:88:36:ae:29:37:58:69:88:00:fc:f4:b3:98:56:
                    46:8f:29:ef:fe:b2:76:5b:50:53:d8:ab:ed:48:56:
                    79:47:a4:00:3b:66:c3:fe:b8:d9:b8:39:ae:6c:15:
                    1a:3b:09:42:4b:58:23:69:66:e5:42:bd:57:d7:04:
                    cd:ed:05:93:ed:a4:ff:03:c8:bd:be:8f:5f:01:b3:
                    91:e4:5b:de:00:df:7c:b9:8f:25:1a:c5:ff:16:dd:
                    38:eb:ef:32:1c:77:70:76:4b:40:ce:6f:bb:90:9e:
                    dd:c0:fa:b9:01:69:41:2b:4a:7d:0b:96:56:30:aa:
                    c9:2a:bf:5e:f9:44:57:10:76:68:3e:de:29:eb:40:
                    a9:93:8f:f0:15:82:f7:5b:de:0c:07:2c:d9:65:28:
                    ab:cc:9d:b1:11:7f:cc:b5:15:08:1c:06:45:eb:22:
                    5f:10:e9:a0:8e:48:25:5e:52:b4:39:29:66:c9:17:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:12:A2:89:00:87:37:F3:3C:0C:35:74:4C:0F:47:63:7D:CF:20:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ac:cf:5c:51:d2:36:77:a3:42:42:28:5f:23:30:9b:e9:f3:
         9b:d2:ac:37:c5:e9:a0:3c:5e:17:26:33:1e:72:8c:68:6c:b9:
         f5:03:dd:bd:0e:fd:91:4a:0d:d7:c1:9d:e2:df:0e:4f:ee:10:
         13:7e:23:a7:f0:6d:77:2d:cd:d6:e8:a2:db:66:d7:7a:7c:ff:
         be:9c:57:7e:97:e8:c8:01:c9:f2:af:15:92:02:93:9a:39:b0:
         67:eb:91:d6:00:66:84:19:12:10:4b:81:6d:18:6f:ec:af:66:
         6c:0e:c4:ff:39:90:9c:b9:f2:24:da:8d:cb:8e:c3:d9:d0:a8:
         6e:7f:28:c3:dd:7a:7a:ff:a6:b4:28:2d:b1:08:f4:98:d6:5f:
         7b:a6:37:23:91:82:0e:c2:31:ba:24:2e:ce:46:3d:9b:00:75:
         88:ae:90:59:c0:fe:76:cd:e4:ee:3e:e1:94:8f:e9:94:dd:9b:
         5d:a0:e1:91:e0:7a:0c:f4:44:f5:3e:91:3f:13:ba:11:cb:44:
         32:47:a4:54:35:b4:dc:40:02:39:b8:59:f1:6e:6b:11:1c:41:
         f4:4d:2e:83:f8:9a:cc:83:31:57:c2:95:95:f0:85:7c:a1:f3:
         5e:d3:ec:69:6a:a1:64:74:fc:f4:c9:81:60:50:40:f9:1b:b8:
         a7:ce:db:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 07:58:04 2025 by rpki-client