Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b18016bb-0615-3ddd-a6be-eba63fb49e5a.roa
File:                     b18016bb-0615-3ddd-a6be-eba63fb49e5a.roa (raw, json)
Hash identifier:          gzvbRyy3bgwIdS3vUUFagTHW9AJYgxkCHboclHz5wcw=
Subject key identifier:   C8:D8:66:2A:E7:89:15:65:97:9B:DE:F3:BE:3E:2D:66:E7:8F:63:32
Certificate issuer:       /CN=70057aa1-544d-4237-b549-304fd45324ba
Certificate serial:       010D0C9F4328584A6290A02A4B2C4DEF0EB7CB40
Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b18016bb-0615-3ddd-a6be-eba63fb49e5a.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     25617
IP address blocks:        216.222.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:a0:2a:4b:2c:4d:ef:0e:b7:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=292395d4-5111-43b8-b777-d29ee21189be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:6b:d4:10:f6:74:95:ad:c3:34:6d:82:3e:
                    7e:82:72:ae:db:81:23:94:b2:fb:92:cc:31:c8:6b:
                    67:f5:2b:cd:e4:1d:a4:4a:b8:2c:c5:5a:c3:0e:0c:
                    59:79:06:1a:dc:22:9a:63:24:a8:08:15:15:62:d1:
                    1d:e7:a4:fd:ef:e3:ec:31:80:ba:90:f2:bc:df:a5:
                    73:1c:b2:b5:37:df:fb:eb:3a:00:07:9e:87:48:59:
                    b8:56:b7:31:ce:29:f1:cc:af:4e:5a:ac:2d:cf:c1:
                    0b:1b:79:76:70:e1:ba:cc:6e:e7:77:aa:ef:ba:34:
                    a8:4e:fc:a2:70:2b:f5:f1:4d:c2:c0:cd:e3:81:57:
                    42:3f:8a:80:93:9e:ee:21:12:ff:e0:59:b9:3d:15:
                    e3:28:ac:6c:48:61:cd:b4:51:d3:a1:2c:09:4e:a2:
                    6a:56:eb:67:25:0f:1c:b7:2f:75:6e:45:ee:00:f9:
                    c3:f2:f7:09:c4:13:9b:3e:f8:40:34:80:5c:8c:ea:
                    05:0e:be:b2:16:08:49:c4:e9:b4:5d:26:9f:5c:f8:
                    7f:8f:6a:6b:7c:7d:2a:94:e4:78:20:11:30:2b:b5:
                    f8:73:bd:9e:f0:00:00:2e:b1:f7:d9:5e:58:a7:e2:
                    16:15:19:7d:fa:c9:7e:b5:18:cc:03:ee:b8:77:bf:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D8:66:2A:E7:89:15:65:97:9B:DE:F3:BE:3E:2D:66:E7:8F:63:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b18016bb-0615-3ddd-a6be-eba63fb49e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl

            X509v3 Authority Key Identifier:
                keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:93:07:0b:0c:f6:9f:7f:c2:fa:96:2a:73:4f:10:45:b9:
         78:a8:f9:26:25:06:d8:3e:fc:63:6c:1e:24:90:70:fe:17:c5:
         c6:ce:bb:9c:14:67:41:64:f9:b1:04:e4:14:20:4b:85:aa:07:
         a8:07:67:34:ca:ad:b2:ab:f8:7f:8f:73:a0:26:25:31:a1:b7:
         54:de:78:fb:e9:a1:6e:28:02:c2:86:98:d6:51:48:62:12:e7:
         ec:a5:f5:81:05:32:dc:5f:c5:8e:27:bb:5b:14:8d:8d:33:09:
         b1:04:c9:51:34:11:7b:61:ba:37:a6:e1:95:b5:83:9e:23:9e:
         13:28:9a:a7:5a:0b:b3:cf:6d:51:7a:be:d4:0f:9b:92:27:d3:
         0a:71:85:95:9a:34:5d:49:2d:fb:95:81:6c:1c:c6:ed:49:88:
         b8:30:46:c9:26:72:52:b5:20:bb:77:15:01:8b:3f:6a:b4:93:
         b4:6e:7d:3f:65:84:87:29:fe:ea:05:05:60:ad:49:86:47:83:
         2d:e1:33:9c:31:65:30:d5:fb:49:f3:bf:43:49:a0:b9:3c:5c:
         00:d0:5b:42:c8:38:c2:62:ff:30:fe:2e:88:55:3c:1e:fb:a5:
         d8:0c:40:7d:38:88:4f:58:a0:03:67:bd:cf:19:83:cb:b4:c9:
         eb:44:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:01:14 2025 by rpki-client