Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c52c8007-dba3-3ac8-9abc-3111a889706d.roa
File:                     c52c8007-dba3-3ac8-9abc-3111a889706d.roa (raw, json)
Hash identifier:          JfmJccIULy25zWk6appd0jg++cHO3CkURQxaLcJTROk=
Subject key identifier:   78:B8:39:95:8A:E2:03:41:81:88:C6:5A:EE:09:F2:83:4B:FE:89:07
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584A3A1583C7E920D0BFB1977300
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c52c8007-dba3-3ac8-9abc-3111a889706d.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     7029
IP address blocks:        216.224.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:83:c7:e9:20:d0:bf:b1:97:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=1a015b91-7e6f-4911-91a7-d76aed3745b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:ec:05:34:5f:a8:c1:78:3e:25:8e:97:e2:
                    07:f1:ab:e1:e0:58:d7:e2:c7:fd:67:ea:45:23:2d:
                    2c:6d:06:30:69:a6:17:7a:0d:18:ed:56:b9:7f:57:
                    3a:03:91:14:2b:84:8f:da:54:d0:d8:d0:71:38:4e:
                    9a:54:7d:72:75:fe:fa:dd:60:68:4d:d3:8e:02:47:
                    e3:3d:82:22:ef:4e:d9:31:af:41:55:7f:24:12:e4:
                    50:47:1c:8c:e6:1b:89:27:44:d2:7e:b7:8b:39:95:
                    85:14:ab:b5:07:b4:a4:2d:30:86:ae:11:ef:39:d1:
                    de:bf:f5:ef:fe:1e:8c:15:11:96:26:77:be:77:51:
                    96:57:a3:cb:54:71:c5:50:99:a2:c8:6d:f1:2d:44:
                    e4:fd:b5:0e:a6:ae:b5:88:51:1e:fc:26:95:14:21:
                    f4:85:5f:ab:fd:5d:d4:2f:2d:e3:bd:02:9f:3e:4d:
                    ec:e6:38:12:cc:6b:a4:12:80:56:04:95:92:33:01:
                    be:0e:a5:07:84:85:2a:08:29:c1:d7:83:55:1a:f4:
                    e2:6e:b3:7b:f7:77:5f:b8:96:85:39:8a:03:1a:61:
                    8d:64:69:e5:37:fd:83:b7:9d:25:9c:9d:8a:6a:f2:
                    27:73:b4:9a:e6:be:ed:1e:35:86:1b:cd:9b:cd:13:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B8:39:95:8A:E2:03:41:81:88:C6:5A:EE:09:F2:83:4B:FE:89:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c52c8007-dba3-3ac8-9abc-3111a889706d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.224.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:80:76:20:43:1a:01:69:0a:16:22:28:e4:0c:7c:3b:4f:04:
         02:74:ac:c2:5d:6e:88:48:4e:63:d2:a9:25:d5:84:23:f5:9b:
         ec:78:f2:0c:a3:d5:dd:52:ea:f0:b2:12:bf:ee:69:6b:ce:4c:
         3a:88:0e:1e:c7:b4:05:56:75:c2:52:b3:86:f4:70:33:4f:ca:
         01:f9:a9:8e:ce:1c:27:f4:c2:33:cc:a1:a7:ea:b1:c8:14:64:
         f0:59:91:36:a9:31:8b:4b:2d:77:ce:a1:6c:09:63:7b:44:cb:
         32:01:86:fd:fe:39:d4:21:7c:1c:e1:a9:fb:a9:65:3f:2c:6e:
         8a:ed:ab:c7:b3:97:64:84:39:dd:6c:09:36:53:2a:18:32:a2:
         73:f0:04:65:68:33:ed:c3:6b:7d:d0:83:e2:8b:1f:6e:4b:b5:
         4b:af:99:9e:b5:fc:77:fc:71:e2:21:73:30:54:9e:f4:d7:93:
         ff:90:d3:ed:b3:80:01:d0:d1:b2:41:f3:4b:66:31:a9:90:67:
         6e:74:67:a5:a7:d9:a5:da:66:a5:56:cb:8a:87:d5:b2:96:c7:
         4d:36:87:4e:bb:ad:78:bb:ae:25:57:83:97:66:47:24:03:4e:
         09:c0:c5:a1:26:73:f7:91:a0:4d:71:a2:bb:a4:f9:a5:8f:6f:
         10:85:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:31 2025 by rpki-client