Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/e379d600-38fc-3e5e-b35a-4c1eb40fc524.roa
File:                     e379d600-38fc-3e5e-b35a-4c1eb40fc524.roa (raw, json)
Hash identifier:          cAThh/XwuC16RVMkF8PFnnQp0a0cpVHQhdAOO+21614=
Subject key identifier:   61:04:38:9B:AE:CF:7F:00:80:7F:C4:D9:62:19:2B:AF:17:BA:3D:4D
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F43285849BDDA2A3A86AE9E395FB53100
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/e379d600-38fc-3e5e-b35a-4c1eb40fc524.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     216145
IP address blocks:        100.42.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:2a:3a:86:ae:9e:39:5f:b5:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=3bbf9118-6e07-47f3-a7e8-14039bf91fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:e2:38:48:89:08:6d:47:61:0a:28:0e:7c:
                    b5:26:ba:64:57:52:32:f4:0b:98:a4:38:77:c0:fe:
                    c9:08:17:b4:86:63:ef:31:e2:79:44:42:54:f2:88:
                    57:e2:fe:ab:0c:3a:fa:63:d7:d7:0f:9e:47:3c:43:
                    94:19:4a:1d:25:84:20:b9:91:01:92:0e:2e:34:e0:
                    61:ef:2f:6f:4f:13:8d:71:7f:50:f9:c5:0a:ee:a5:
                    7b:e3:cf:f6:40:8a:a9:e4:2f:9b:2c:6e:4b:e6:ae:
                    25:2b:15:0c:f8:85:01:7d:52:ea:fc:a6:a5:25:5e:
                    4b:f2:a3:be:e6:a9:b5:76:1c:46:f4:eb:12:fc:e2:
                    c2:1a:50:8a:67:2f:ff:1a:34:bc:41:9e:8f:5f:62:
                    aa:ab:85:5d:2e:85:dd:3b:06:6d:e9:b8:50:fe:de:
                    6e:53:a6:58:4d:fa:81:93:64:cf:cc:f2:60:1b:e4:
                    0f:3b:ef:04:64:ac:43:86:96:a6:5c:21:f2:b1:6e:
                    f2:3a:63:b2:aa:5c:6b:63:e2:03:d3:b0:b6:3c:4a:
                    30:96:ee:53:2e:bc:09:d6:fa:79:4f:4b:2b:80:a2:
                    42:f5:d0:d2:c8:07:f0:86:ee:ed:95:f2:99:6b:7f:
                    6e:4e:bd:f4:57:f8:d2:4c:be:aa:56:5d:5b:1f:f1:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:04:38:9B:AE:CF:7F:00:80:7F:C4:D9:62:19:2B:AF:17:BA:3D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/e379d600-38fc-3e5e-b35a-4c1eb40fc524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.42.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c1:f4:71:6e:8d:e0:f1:aa:ac:a7:42:97:17:1d:09:d4:cb:
         21:93:4c:2c:1f:f3:ca:3f:fc:40:dd:15:12:96:3d:aa:da:d0:
         64:70:4c:fb:79:28:1d:d9:e4:da:60:6d:d6:1d:db:98:80:54:
         9f:36:e1:5d:66:03:e2:a6:b2:3d:ef:de:04:08:68:42:16:c0:
         f6:29:26:c0:5e:17:dd:72:cd:1c:22:a2:40:b0:87:ca:7a:e5:
         8b:aa:5c:c1:e9:29:8d:b1:08:57:db:41:01:93:3b:b1:ab:5a:
         3f:1e:77:8f:ff:07:75:de:44:a3:45:31:5f:1a:fe:a4:2d:f3:
         3a:76:b9:4b:35:36:05:8a:8f:d9:a0:d8:da:8f:32:f0:94:3b:
         ef:25:d7:44:8e:ce:fe:e7:97:0b:d3:60:e3:a4:55:f6:b2:73:
         13:47:7c:24:07:65:3d:46:0e:b3:cc:46:1d:72:f8:3a:a5:33:
         a8:a2:ae:5e:8b:8c:ec:e4:75:29:5b:6a:49:fc:3b:0f:49:96:
         ed:53:a6:35:42:42:5a:1f:6c:7c:34:8c:5f:39:40:fd:7e:dd:
         fe:f0:36:b2:a7:f5:9d:33:04:3a:58:bd:1a:4c:df:e1:04:42:
         bb:ec:3b:01:69:0a:fe:65:09:b5:9a:e6:de:d0:30:36:af:f5:
         1d:d8:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:55:02 2025 by rpki-client