Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa
File:                     88e8ac82-36b4-37a5-b462-616b45ade786.roa (raw, json)
Hash identifier:          D63dAmLWHNKJXsLT5wGYz5A+H9McqNPpvNh/g8mltY4=
Subject key identifier:   2B:69:88:04:85:D0:2D:95:25:74:E6:AB:B8:CF:FE:33:8E:84:F8:45
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6CC6DF8C2BE488FF52A0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        216.137.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6c:c6:df:8c:2b:e4:88:ff:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=db36d0e6-f401-482e-987d-d78bd39fcc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:1e:6e:5c:39:54:46:9d:ef:38:12:6f:8e:
                    a7:76:a7:68:d6:15:6f:15:7e:af:7c:ca:49:4e:f1:
                    84:f9:f6:d5:c2:1a:34:5a:40:bf:76:c5:84:b1:fe:
                    59:43:91:c6:9c:cb:77:cb:43:6d:8a:ce:be:a7:f4:
                    b7:a8:ed:f9:da:c0:d6:6f:43:77:8a:32:66:50:9b:
                    1a:7b:fa:4d:96:e4:5b:d3:21:b5:5d:0f:a3:31:62:
                    ea:1f:d9:65:08:ba:af:3a:99:71:cc:79:c0:9a:7c:
                    dc:36:2e:75:78:d6:a3:26:39:cc:e2:c3:b0:c7:b1:
                    3c:d3:6a:15:ca:4d:c4:80:7c:2c:1b:46:ff:14:60:
                    cf:55:3f:19:e4:9b:8f:3f:2d:f3:cc:49:9b:5f:7f:
                    5c:7a:7d:03:2b:7f:87:0b:10:76:48:4d:21:49:b5:
                    a5:bf:79:b4:0e:36:3d:35:0d:9f:1c:68:9a:e1:3f:
                    33:de:5a:b7:8f:68:a6:65:a8:da:eb:8c:04:dc:f7:
                    1e:0b:16:cb:8a:71:1b:d5:04:08:02:f2:dc:9c:62:
                    2f:ab:d2:8e:69:46:0e:d5:ae:6e:c0:44:af:27:2f:
                    f4:d2:23:e5:a0:dd:a5:f6:d4:c2:2f:91:f4:f7:42:
                    f1:5f:14:85:bb:1d:38:4f:1d:a8:7a:da:46:b6:32:
                    c7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:69:88:04:85:D0:2D:95:25:74:E6:AB:B8:CF:FE:33:8E:84:F8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88e8ac82-36b4-37a5-b462-616b45ade786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:ae:c4:21:d5:62:5d:82:44:b1:a3:b4:e8:08:0b:9c:23:
         56:c3:b5:ac:4d:ae:61:d7:28:06:f6:9d:15:fc:a1:52:51:53:
         42:4f:0f:96:9b:a5:91:97:85:64:a8:5b:6b:c6:3b:32:bb:bc:
         2f:57:59:56:d8:73:71:9a:92:09:81:e1:c4:15:22:a4:80:9c:
         79:4b:7c:06:70:bf:06:ce:ba:41:8a:4d:b8:45:9e:09:28:3f:
         a2:6e:7f:43:4e:f1:2a:12:e2:31:f8:39:15:5e:ee:b6:44:09:
         93:ae:56:1f:0d:e5:68:98:c2:31:88:1c:43:44:6a:9b:fe:d4:
         f7:1c:0e:eb:c7:ce:da:22:33:47:0b:8f:a5:9c:30:26:c7:22:
         74:3a:58:26:d1:da:1f:c4:19:63:d4:17:e9:ee:d1:d6:2b:a9:
         3a:d2:4c:fa:53:3f:5a:f7:7c:c5:c5:42:80:4e:37:f1:8e:af:
         33:5d:a6:49:83:fe:e8:f2:14:2b:d7:28:c7:81:f3:e8:fa:c5:
         04:20:59:f6:37:eb:cb:a7:40:86:c6:9f:7d:73:10:1c:b7:18:
         d5:b2:1c:1d:04:d8:a2:e2:58:03:f0:0c:0f:1b:da:f7:a0:2b:
         1b:52:c4:cc:05:1a:59:a5:b8:01:52:46:0b:2c:fc:05:73:de:
         d3:fc:90:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:40:43 2025 by rpki-client