Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa
File:                     0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa (raw, json)
Hash identifier:          wLISVfayC7SanTrvN0t9Y7sQKxEhu0hpKp3p/7XFrRU=
Subject key identifier:   F7:5C:C6:6D:5E:F3:A2:54:7B:C5:E2:89:D5:28:CB:86:EE:42:D8:DC
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F432858498E648DD28974C40EC9F25980
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     32554
IP address blocks:        216.162.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8d:d2:89:74:c4:0e:c9:f2:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=31854011-6a6a-4310-938b-96e8c45e4067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:ac:ec:47:8a:fd:ca:d9:4f:b5:f9:24:c4:
                    8a:cc:a3:a6:22:d5:1f:2c:77:4c:eb:82:7a:46:c2:
                    0f:ce:71:36:9f:13:7f:e8:57:bc:80:bf:f2:69:20:
                    ca:6f:1f:dd:60:4b:b8:47:57:35:8a:61:61:c4:6d:
                    21:ac:ef:d9:6b:84:13:d3:94:f9:03:06:1c:7c:74:
                    70:d5:8d:26:a3:72:bf:d5:d6:14:d6:3e:11:f4:a7:
                    96:eb:64:19:9e:ea:75:1c:76:58:c7:a1:fa:b5:2b:
                    57:e8:5d:1e:02:8d:d1:7c:fc:7d:0e:55:56:14:52:
                    c2:c6:86:11:23:ad:44:25:4d:26:ce:bb:12:b3:d7:
                    3b:59:ae:df:ed:cf:86:37:48:01:03:2a:2c:42:b9:
                    13:b9:31:73:ff:12:32:65:38:22:bd:86:08:26:df:
                    b1:1b:0d:22:cd:50:42:0f:9a:c9:42:ef:bb:12:72:
                    c3:c5:ff:4d:80:ef:7c:fc:08:f8:6f:1b:45:3b:9f:
                    ce:f6:ac:26:2b:91:c6:fb:05:c2:a9:7a:82:7a:b7:
                    e0:05:c0:36:42:e8:e9:3c:df:8b:63:d2:70:44:d3:
                    ac:8f:44:54:9f:54:5d:61:ac:e1:19:c7:00:95:e9:
                    2c:9c:3f:b1:94:a9:1a:c4:3e:0e:f7:13:77:51:63:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5C:C6:6D:5E:F3:A2:54:7B:C5:E2:89:D5:28:CB:86:EE:42:D8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.162.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:53:8a:4e:ed:b2:49:db:1a:30:1b:16:67:6d:4d:24:f5:55:
         17:19:96:c8:d2:bd:38:12:d0:c3:40:7a:10:49:2a:cd:b1:56:
         c3:f2:37:b8:7a:67:09:fb:2b:c1:e7:15:9b:0a:95:bb:f2:5c:
         57:e4:2d:e0:e2:39:2e:c2:d4:d3:fe:bd:ed:1e:11:bb:35:a0:
         78:77:ca:d7:2d:b2:11:0f:00:4c:5d:52:6b:6a:f2:9a:a8:cc:
         2b:6d:d8:fc:93:d3:6e:0f:37:05:1c:90:10:5c:70:86:90:ed:
         5e:06:1e:c3:f8:65:ec:b6:7a:8c:20:5e:83:ef:f5:8f:da:61:
         d7:e0:2d:47:b9:21:13:b6:dd:9b:29:b5:f2:fa:e6:fb:bc:43:
         9c:e1:b7:07:59:86:32:05:67:e0:91:e4:85:77:4f:14:21:dc:
         4a:f5:88:6f:f4:3b:1f:49:0e:e8:15:82:14:e8:4f:e4:2d:05:
         1e:ad:e0:dd:46:90:b2:10:eb:49:cd:08:ca:20:ba:58:93:a1:
         e7:ef:c5:a2:54:72:c8:ba:7a:33:9d:f5:41:fc:d0:d0:d6:87:
         1e:13:60:d7:4c:7b:10:6d:09:3c:bc:71:ee:14:fe:07:d7:4c:
         5b:98:82:5f:f8:58:ab:20:77:e7:01:c9:b9:03:e5:d4:ac:e1:
         61:32:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:01:11 2025 by rpki-client