Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa
File:                     5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa (raw, json)
Hash identifier:          7rhHQlVXMVaT4FQPQUg16/9TtWW/ZdPNQwpZq6bgXjg=
Subject key identifier:   86:7D:1C:87:A3:9A:E4:3F:1A:40:9E:D8:32:AC:1E:CA:EA:F4:4B:99
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584A348021DD7EEEC24226EADB00
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     54004
IP address blocks:        216.97.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:21:dd:7e:ee:c2:42:26:ea:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=1c644b5b-3b63-4871-9bd8-a4e31ded397d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:38:60:8e:63:5c:05:76:c1:d6:1c:d3:72:dc:
                    43:85:4a:6f:5a:4a:8c:f9:d4:15:e0:9a:80:df:ff:
                    99:ae:b5:9d:65:af:45:15:b3:50:69:88:c9:e9:9e:
                    f9:5f:ed:7b:f7:5c:4a:37:86:c4:4e:ef:a5:e2:6e:
                    88:01:cf:fc:c5:b8:5a:b1:be:40:fd:24:13:ea:cc:
                    8e:a9:70:6a:53:ea:5d:7b:c4:6e:2d:55:0e:c9:43:
                    76:e6:7f:65:5e:6c:98:bc:26:71:ef:f9:ba:16:b0:
                    08:b4:dc:c8:e6:a4:ca:2c:11:fb:8c:57:b4:ce:f5:
                    2b:68:6b:01:32:e5:ad:18:0c:10:ef:32:09:5e:cb:
                    8c:83:09:13:02:f1:09:de:b8:5d:fc:6e:67:71:23:
                    bb:e9:eb:08:6e:06:2a:7d:82:b6:ed:0a:3e:fd:f2:
                    bb:4a:94:80:4b:3f:f8:15:5d:30:ff:4b:b7:48:6f:
                    25:56:87:0f:3c:6d:90:4a:14:15:05:c6:f2:72:b9:
                    45:a9:74:15:a9:60:cf:ec:9a:61:44:a3:37:72:c6:
                    36:63:0d:a8:23:24:9e:79:11:7e:8b:0c:6e:b5:d1:
                    d9:21:9f:99:c7:e3:0c:e9:64:11:b6:5f:09:67:98:
                    d5:a2:e1:17:7b:71:f9:95:db:b6:64:89:0b:f2:87:
                    b1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7D:1C:87:A3:9A:E4:3F:1A:40:9E:D8:32:AC:1E:CA:EA:F4:4B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:17:1b:ba:5b:0a:91:b9:70:05:ae:c2:49:6c:52:08:b7:c9:
         94:61:cf:ce:ed:b4:d6:3c:5c:d2:65:be:f0:a8:df:e8:68:f6:
         98:35:52:66:09:65:0a:3a:fc:80:d2:4b:19:5f:32:da:c5:2f:
         b7:18:b6:5d:fb:6a:c0:fe:45:4a:97:87:03:a9:0b:18:f4:dc:
         65:aa:e7:4c:fa:49:01:35:d6:8a:f1:93:75:35:63:c1:73:f1:
         59:40:63:f4:62:88:c5:27:61:1c:b8:7f:61:1a:66:55:90:2b:
         bd:58:45:e7:d1:cb:bf:62:a8:bc:80:7a:48:43:3b:91:4c:2a:
         0f:7c:f8:d8:a7:99:3d:a2:47:5a:b9:ad:98:b8:ab:14:90:9d:
         60:7b:48:e8:dd:77:fa:95:37:72:9d:e5:be:64:e4:0a:b9:7c:
         18:83:c1:75:58:ef:66:c3:f8:70:57:ba:86:9f:60:72:08:18:
         12:1b:d6:7e:35:98:42:a7:f0:83:f6:bc:ef:a5:69:73:16:51:
         c0:05:50:dc:2d:a3:b4:78:06:93:19:c9:f2:9b:ef:7c:87:b5:
         4f:f8:c5:c9:dd:ad:7b:96:28:42:18:76:ee:0e:1d:a7:24:7c:
         39:00:ad:78:69:35:d9:30:70:d4:96:cc:d3:8f:b4:b7:eb:c9:
         88:93:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:54:49 2025 by rpki-client