Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa
File:                     5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa (raw, json)
Hash identifier:          Jny4OwsFj4yquIPiQEZWnpGuD71FQcE4uEG7Q26LaFI=
Subject key identifier:   D8:EB:FD:99:5B:81:AD:28:E2:A1:24:86:14:B3:CD:9F:EF:F8:14:3A
Certificate issuer:       /CN=d91f505a-0b78-4bc4-a857-f86d34163202
Certificate serial:       010D0C9F4328584A4DA0443DE28DAD555956BA80
Authority key identifier: B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        216.211.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:44:3d:e2:8d:ad:55:59:56:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91f505a-0b78-4bc4-a857-f86d34163202
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=439b841f-b026-4a4c-a3b6-166a55590f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:b0:d0:b6:50:84:23:77:40:14:eb:de:25:
                    ed:d1:c1:a4:49:d7:e0:ea:35:d2:a5:0c:55:1f:4b:
                    12:ce:75:02:fe:22:a8:c1:21:20:f7:e6:03:d7:3d:
                    b2:40:3f:a1:36:82:0e:4e:4c:3a:bd:ec:72:4a:96:
                    47:14:7c:e2:b5:83:a4:7f:24:e2:0f:01:14:30:3d:
                    ed:97:a0:7a:9b:39:a7:af:73:9f:b4:5a:46:b8:d6:
                    53:4a:3d:41:de:4c:89:34:99:e4:3c:7e:ee:3b:3f:
                    9a:d3:cc:d4:8e:1a:c6:02:c1:58:3e:af:d6:d7:ae:
                    90:23:5e:e4:5c:a7:46:d3:67:69:e2:5f:71:d6:0a:
                    c5:2f:52:82:a2:e1:d7:b0:ca:12:20:f8:d2:78:fe:
                    a3:10:0d:e9:4e:4d:7e:0b:36:06:e9:f0:9d:89:91:
                    41:5d:df:26:e6:89:d1:42:59:27:25:72:5c:63:dc:
                    43:64:0b:16:c4:a4:b2:c2:56:94:c5:3d:ab:7d:cb:
                    6c:51:98:c1:28:61:7e:25:b5:f2:be:36:67:27:9b:
                    f8:fb:a0:44:cc:9a:0d:9d:8d:ab:a1:0e:8c:83:ac:
                    58:7d:c0:29:02:6e:50:79:bb:1f:8e:e0:18:41:74:
                    b6:ae:72:52:86:d1:d3:68:10:76:02:17:5c:e0:7c:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EB:FD:99:5B:81:AD:28:E2:A1:24:86:14:B3:CD:9F:EF:F8:14:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl

            X509v3 Authority Key Identifier:
                keyid:B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:23:8e:07:9d:6e:0b:46:fd:42:33:0f:2f:55:e9:6b:95:
         7a:25:3d:8c:da:6e:fa:c4:58:ca:92:79:b7:ee:92:7c:d0:78:
         1e:b1:d1:47:86:46:90:4b:47:41:9a:e3:5a:f1:cd:d2:e7:f3:
         ed:32:8c:b5:9a:53:e2:d0:22:1d:e1:af:dd:27:0c:41:d7:a7:
         e0:26:87:b5:09:7f:9c:17:98:ee:3e:c0:3a:48:f6:63:da:9a:
         cc:b1:09:c8:7e:0d:76:af:55:57:68:3f:f3:19:86:0d:c8:e6:
         93:17:71:4f:74:d5:ad:92:ad:68:87:1f:0e:ca:13:90:91:6a:
         8f:de:75:f4:3d:ca:bb:39:bc:e7:18:6c:e9:6c:a1:2d:0d:7e:
         9d:6a:fb:81:87:0c:91:2f:a1:a9:3d:c8:80:b6:d6:94:2b:04:
         f5:15:76:62:05:84:99:b6:66:63:62:0f:7a:34:05:5d:2c:61:
         c7:61:c9:79:6d:7f:16:66:e1:06:42:b6:df:85:0f:ed:80:6d:
         5b:6f:4a:8b:77:19:48:77:53:34:e0:5e:2e:e7:66:a5:67:f6:
         02:dd:6b:2a:c0:38:82:6a:6f:15:87:cb:d9:db:c4:ef:90:0a:
         50:4d:c8:9f:ab:23:b2:66:08:8b:b1:ad:11:5a:9b:42:4b:24:
         2a:04:41:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:55:23 2025 by rpki-client