Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/e33392c5-e1bb-39bb-9dc0-521348eefce7.roa
File:                     e33392c5-e1bb-39bb-9dc0-521348eefce7.roa (raw, json)
Hash identifier:          xgX+yo+veKxHluzWLKPbXTmiaN+LX9oykJtpqgSXxD4=
Subject key identifier:   3A:B2:8C:32:20:C5:B7:EF:FB:0B:86:EC:48:6E:CB:F9:93:7C:A1:4F
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584A3E45AB8DB73F7BEE7ABB9080
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/e33392c5-e1bb-39bb-9dc0-521348eefce7.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16417
IP address blocks:        216.71.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:ab:8d:b7:3f:7b:ee:7a:bb:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=782df611-3d32-4945-b74b-437d5f5189c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cd:34:09:af:f9:5c:f4:39:88:ca:dc:04:83:
                    a4:88:4a:65:de:d0:b0:ac:38:cc:d8:4f:4f:75:ab:
                    7c:04:e1:e3:ac:f9:63:11:4e:bb:ab:6e:3c:50:53:
                    9a:eb:38:cb:fa:fa:87:6e:19:45:23:85:fe:a5:40:
                    a1:3b:a7:ab:ba:ed:78:e8:7a:63:09:92:e5:e9:ac:
                    e5:4f:e0:c6:22:84:4d:07:81:db:37:ef:8c:82:f9:
                    2a:3c:83:f5:e4:05:05:ae:a7:f5:12:5e:56:df:dc:
                    f6:1b:eb:5b:e7:11:88:d0:9a:0e:bf:77:87:53:2d:
                    c7:fb:dc:9a:5d:69:05:96:df:9b:b4:88:60:95:79:
                    be:73:29:30:91:40:ca:87:66:52:63:10:a3:0c:eb:
                    a5:a2:b9:e3:4a:cd:04:dd:2d:5c:84:ce:08:13:47:
                    1d:65:c2:8d:48:90:89:cf:2f:dc:fc:dc:f2:44:53:
                    67:2a:fa:1b:2d:7d:e1:f2:fe:48:fb:84:50:21:3f:
                    1b:45:c2:4f:f4:16:fe:5e:db:74:8e:6e:56:d1:c1:
                    62:8d:1a:29:ef:79:2f:71:6d:50:e4:b2:48:b5:c0:
                    a5:d6:79:f3:a3:b6:7d:a5:93:8e:d8:fd:bd:1e:b3:
                    5a:c4:1c:65:d6:55:56:e6:97:11:90:6d:4a:a6:0a:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B2:8C:32:20:C5:B7:EF:FB:0B:86:EC:48:6E:CB:F9:93:7C:A1:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/e33392c5-e1bb-39bb-9dc0-521348eefce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:9d:e4:f3:e0:58:d9:83:2f:ff:38:c6:bc:eb:e6:58:78:
         80:b6:4f:a1:54:ae:94:26:ab:8e:4a:a5:da:75:87:4f:c7:03:
         1b:20:88:f3:40:ef:d2:c5:a7:c3:20:b7:50:08:ed:b1:13:55:
         7d:69:f5:8a:b4:6a:f8:b9:d6:56:8f:e4:3f:57:b5:fd:c8:43:
         01:b5:a7:9e:ec:43:49:ae:f8:8d:0f:ae:40:fc:8c:ea:c4:87:
         a5:fa:8b:99:48:db:49:30:ca:bf:bf:a4:4a:7a:47:f4:3a:5a:
         ad:8d:15:74:74:3e:de:95:22:08:cb:c4:51:c0:57:4c:a6:8c:
         aa:36:bb:f5:16:53:fb:a7:2a:fd:79:ce:45:a2:a9:82:ca:e9:
         ee:b9:67:f1:b1:46:e4:b4:6c:26:0c:24:2f:d5:5e:e9:72:62:
         11:62:ac:c6:5b:3a:83:42:58:29:3b:cc:e7:4c:4c:ff:be:27:
         4e:47:92:21:3f:85:a8:1e:eb:00:11:bc:d4:b6:9f:c6:2c:76:
         33:55:ee:d9:5f:d5:85:85:bb:e1:30:fd:b3:e5:a9:0c:aa:aa:
         e0:b9:8a:ca:0b:43:c3:cf:e1:cb:42:1f:61:3e:cc:f1:e6:19:
         3d:57:fb:46:ce:80:23:0d:86:50:b6:dd:58:c9:2e:db:c1:1f:
         69:75:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:31:15 2025 by rpki-client