Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/5df83665-f02d-346d-a6b3-5c783e573c36.roa
File:                     5df83665-f02d-346d-a6b3-5c783e573c36.roa (raw, json)
Hash identifier:          VC3Vx1Wg2Nx7pz/RevWO0eZPzhHeneaZnDJNsW1EnbA=
Subject key identifier:   D0:00:4E:44:4C:F9:0D:72:14:BD:EF:5B:DC:BE:EF:C9:F7:24:E4:6E
Certificate issuer:       /CN=69036fae-75b3-45ce-a305-23f9913eccea
Certificate serial:       010D0C9F43285849C4D4B616786272732B608900
Authority key identifier: CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/5df83665-f02d-346d-a6b3-5c783e573c36.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     2635
IP address blocks:        199.16.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b6:16:78:62:72:73:2b:60:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69036fae-75b3-45ce-a305-23f9913eccea
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=43426e2c-3145-4f67-a3e0-93ebea9d0b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3a:5c:6f:e2:30:2a:ed:62:9d:19:97:5c:74:
                    8b:16:6b:52:64:8d:50:21:28:59:d0:df:82:2b:0c:
                    26:69:f5:f1:24:dc:1e:f3:be:ed:1a:6a:85:d3:0e:
                    4f:69:9f:8c:bf:78:3e:18:56:19:fe:b3:ec:3a:22:
                    ba:1e:d0:13:43:07:ea:23:a6:50:15:b6:13:4a:38:
                    44:56:95:59:00:15:00:22:34:88:78:2d:e6:73:90:
                    0b:43:9c:94:a2:73:14:30:79:9b:17:ef:b6:6a:31:
                    f2:95:a8:65:a7:dd:8a:ce:92:df:27:2c:b6:9d:5f:
                    6f:2d:15:52:1b:ac:ef:e2:ac:b4:38:ee:81:97:2b:
                    1e:7a:74:98:28:3a:b2:78:a2:82:ef:5c:1b:88:65:
                    9e:0a:5f:67:9f:96:31:4a:7a:4d:28:d1:66:ea:32:
                    9e:31:d9:41:48:ca:e5:ea:cc:62:ec:d3:df:73:27:
                    61:0b:9a:9b:a1:4b:04:93:96:44:2d:7f:f2:22:a4:
                    bf:54:f7:69:0d:f0:52:ec:6c:9c:e3:58:60:d2:5e:
                    81:f3:0e:e2:fe:68:68:32:7c:d3:75:34:b5:31:a1:
                    13:08:c6:f4:58:78:e1:35:ac:14:a4:e7:97:10:a4:
                    89:b3:b2:a1:40:67:b0:0b:e3:9a:dd:9f:5c:19:61:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:00:4E:44:4C:F9:0D:72:14:BD:EF:5B:DC:BE:EF:C9:F7:24:E4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/5df83665-f02d-346d-a6b3-5c783e573c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.crl

            X509v3 Authority Key Identifier:
                keyid:CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fe:12:c8:83:ce:87:75:5d:de:92:3d:f5:a2:05:50:44:a2:
         00:db:61:f5:b5:1d:79:ae:11:62:ec:e1:88:be:c9:da:4c:ae:
         a2:82:8c:6f:6f:06:56:e1:e4:c0:79:eb:7f:63:fb:eb:b5:ef:
         fb:6f:b0:d8:d3:d8:7e:75:c6:eb:13:75:1c:89:e0:cc:10:cd:
         64:a7:56:18:db:7e:b2:01:1e:6a:b5:b5:d7:9b:cb:e4:c4:d0:
         ee:5d:43:1c:41:a4:52:37:28:c0:f0:51:cf:aa:3f:41:0b:89:
         af:c9:21:f6:de:66:f7:d3:5e:9b:e6:49:fd:73:c9:45:e2:35:
         d1:b0:29:68:b7:8a:f4:0f:fb:ef:a2:c8:39:fa:8e:0c:9f:c1:
         91:04:96:f5:dd:44:30:c8:a9:6e:c4:c6:ce:0b:9a:1d:74:3f:
         8e:3f:da:6c:21:37:c6:b0:2c:0f:34:85:3e:16:62:49:35:6b:
         25:d7:34:84:8c:09:ec:9d:9b:70:8c:b2:c0:65:90:ee:92:a8:
         c1:f5:29:c5:59:38:6b:8d:48:a0:2f:27:c2:57:1a:3b:e3:2d:
         09:5e:bc:b6:47:02:d1:df:f3:bd:09:96:ee:e8:ad:6b:ab:37:
         35:a1:c7:0d:1c:80:51:84:9c:6c:d6:c7:0c:30:62:92:7e:c4:
         1a:8b:e2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:32:05 2025 by rpki-client