Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b82da50a-25b0-3584-8520-ab2d43886204.roa
File:                     b82da50a-25b0-3584-8520-ab2d43886204.roa (raw, json)
Hash identifier:          UFifjrkXvBvhlnrDvBmf157iuF15P2c8p1wFr4xbtzw=
Subject key identifier:   8D:F8:17:A2:F6:D5:85:85:22:B3:01:95:D7:8F:00:9D:92:93:6D:9E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F43285849F715097BDD9C72D49D744080
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b82da50a-25b0-3584-8520-ab2d43886204.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     23473
IP address blocks:        216.171.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:09:7b:dd:9c:72:d4:9d:74:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=c9e4e421-895f-458e-87ae-ced697352e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:42:ca:ce:77:c4:96:6d:7e:ca:99:1e:45:a0:
                    83:4c:ca:1d:41:02:44:39:51:c9:eb:d4:94:8f:a6:
                    57:7a:a0:a4:65:af:c5:a9:60:8e:75:6c:05:95:b0:
                    cb:50:dd:c3:a9:ac:61:f1:cd:06:91:b8:8d:72:ec:
                    77:20:1b:43:7b:f2:79:59:f1:ef:6b:77:4d:e0:5c:
                    be:07:4e:28:cb:b7:c6:cf:2f:10:1e:10:0d:b5:e6:
                    55:6b:ec:9a:0d:ca:88:f8:31:e0:43:ab:1a:b8:df:
                    a9:97:78:3c:51:18:22:5d:db:84:f9:43:ee:0a:51:
                    3d:6c:e0:d9:b3:1d:b5:2d:0d:3d:1c:9d:e0:e2:f1:
                    0c:8f:95:1c:06:92:af:4a:7e:e4:4a:f2:68:c1:50:
                    b6:87:8d:b3:c0:2a:86:31:59:fd:d0:ed:28:7a:b7:
                    b5:f7:7c:9e:78:6e:6c:34:df:40:db:c0:10:5b:aa:
                    a1:15:1c:75:bc:51:8b:bf:10:ae:2c:af:3f:d1:da:
                    7d:0d:1e:5b:4f:fd:95:2b:40:8b:da:ae:58:7b:c2:
                    1d:87:b6:07:30:28:6d:34:2e:2a:dc:18:1f:c4:a0:
                    17:98:ea:be:b8:25:85:20:df:0e:57:97:f1:0c:b0:
                    58:b8:9f:8f:ec:b1:33:2e:14:15:4c:97:1e:d1:d3:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F8:17:A2:F6:D5:85:85:22:B3:01:95:D7:8F:00:9D:92:93:6D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b82da50a-25b0-3584-8520-ab2d43886204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:43:48:4f:ba:47:36:4b:2a:1d:12:4e:eb:a5:4c:26:bf:fe:
         dc:eb:38:08:71:32:48:1f:ba:6b:f9:4b:67:67:01:99:ce:b3:
         58:4d:62:e1:f3:20:21:d4:b8:90:60:ba:c1:ae:8b:1a:a3:f3:
         e8:5a:35:e4:24:3d:8c:f0:b8:ad:67:46:eb:66:77:9b:8b:6f:
         69:10:38:d3:f8:bd:f3:54:37:61:19:b7:ab:a7:00:57:2d:56:
         56:8b:a2:0b:10:87:7c:3a:b3:91:86:a9:57:ba:31:09:af:0b:
         e4:1d:56:41:44:cf:f8:51:b8:41:d1:51:dd:be:b7:b2:ad:e6:
         77:09:ef:77:d4:05:6c:88:16:a5:a2:53:4b:74:a2:a0:2b:13:
         90:7e:6c:d7:74:8d:49:b3:be:8c:5f:51:9d:c6:59:20:ac:fa:
         c4:70:3b:e7:6b:91:d7:aa:54:2d:9d:5e:48:75:39:24:6f:bd:
         9d:a2:c7:c6:3e:ad:96:d6:27:1e:a8:e0:d4:9d:9b:78:29:7e:
         2a:0d:54:5a:7e:fa:dc:a7:4e:c8:db:7a:d6:3b:08:b3:9f:98:
         76:af:74:c9:09:25:59:67:b8:8c:94:ac:d4:af:95:49:be:38:
         81:22:2f:d4:06:99:50:1f:6a:1d:c2:29:0f:16:2f:b6:47:c7:
         07:4f:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:39:49 2025 by rpki-client