Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2b51a4ee-3bfa-39cf-a22a-cfa10b8cb9c1.roa
File:                     2b51a4ee-3bfa-39cf-a22a-cfa10b8cb9c1.roa (raw, json)
Hash identifier:          EpRbJUbYcA+G5fwN4r1nSgmz9wmfnRIiUKvt61IVmiY=
Subject key identifier:   BC:3D:59:0A:F4:5F:A9:88:4C:DF:B0:AD:5B:C3:07:CB:E4:9E:35:B3
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584A374AC618F3B0E089E0901B80
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2b51a4ee-3bfa-39cf-a22a-cfa10b8cb9c1.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     395540
IP address blocks:        216.40.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c6:18:f3:b0:e0:89:e0:90:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=a9850d6d-fc20-4f28-90d5-0e4cf380028b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:44:a9:00:f9:d9:40:d4:34:8f:13:77:a6:d5:
                    c8:e0:f8:57:a1:a1:10:bf:02:45:5d:f2:e2:68:1c:
                    02:cf:c8:d2:55:1a:a1:8f:45:66:73:0a:13:f5:8e:
                    94:37:e9:cc:cd:0f:fc:92:dd:5a:4b:65:e3:cc:d5:
                    49:1a:a2:3f:f6:e6:6f:64:55:17:d7:1f:08:73:5d:
                    60:cf:d3:06:22:ec:59:d0:c5:66:77:ab:b8:de:7d:
                    72:1a:08:10:e1:cd:8a:cc:26:a5:d9:f6:2e:8a:a1:
                    f3:f4:63:cf:3d:6a:b3:43:df:96:fe:dd:37:5b:3e:
                    1c:b3:56:27:3f:5c:dd:dd:48:ba:1c:c2:22:a2:2d:
                    bc:7e:62:0a:e7:bc:27:c1:de:2e:c6:d9:a5:78:47:
                    71:0e:b5:af:02:ce:86:23:63:30:d6:8c:dd:86:cb:
                    f4:e3:46:5c:39:48:d7:06:83:55:02:cf:41:86:78:
                    c3:64:da:c7:3b:34:c8:f4:f1:a1:a9:15:6b:4d:da:
                    c9:b8:b2:94:25:96:61:01:5c:c9:04:b9:25:da:e4:
                    a9:cb:96:d4:8f:d3:f0:c0:9a:07:e5:2f:4e:89:0e:
                    1d:a8:3e:b3:98:24:f1:a7:41:90:a7:69:8a:b7:b8:
                    b4:04:f2:99:cc:0f:95:9f:55:fc:21:43:fc:76:b3:
                    d3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3D:59:0A:F4:5F:A9:88:4C:DF:B0:AD:5B:C3:07:CB:E4:9E:35:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2b51a4ee-3bfa-39cf-a22a-cfa10b8cb9c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:6c:a9:f1:3a:87:b7:04:88:58:1e:95:44:73:1b:73:53:
         71:d1:5d:25:43:52:18:fb:7f:bf:d8:2e:72:11:b0:25:d3:9a:
         f7:5d:7f:01:f0:c0:6b:db:52:98:5d:1b:4c:1b:38:b5:8d:7c:
         fa:11:57:60:f3:4c:a3:05:34:0f:76:25:84:05:d0:73:d5:23:
         a6:00:1b:04:0e:71:3f:2d:09:29:fc:a3:12:e0:c8:7b:c1:e2:
         1d:4f:c0:da:1b:b7:a3:75:02:a5:97:f1:da:cf:8e:6c:0a:b4:
         67:09:ec:db:6c:b1:bb:8e:61:54:e5:d3:28:9c:66:83:55:e0:
         73:4e:a2:86:1a:f2:fd:57:93:69:3c:ac:b4:8e:4a:22:9b:12:
         ac:68:30:18:e8:24:03:6a:bb:47:b0:97:b1:a0:6f:2b:bc:a9:
         0a:d2:35:51:98:dd:83:ca:79:42:a1:f3:34:34:cd:cd:28:6c:
         a7:71:d8:56:f9:c1:07:9e:a4:9c:09:36:94:7d:20:90:46:57:
         e9:8c:8d:b0:e5:0f:4b:b7:5d:08:77:99:62:60:2d:96:c0:11:
         b3:aa:b7:bb:0d:10:93:74:b3:d6:1f:ce:dc:5e:a5:0d:05:61:
         f5:63:fd:9d:ae:0e:0c:1b:dc:6d:04:ec:55:1c:36:e1:a9:46:
         c4:f6:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:45:49 2025 by rpki-client