Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a09cf601-3d0b-37a8-abe5-8981ef0a00b9.roa
File:                     a09cf601-3d0b-37a8-abe5-8981ef0a00b9.roa (raw, json)
Hash identifier:          et/0Zp8+vXJ7w6DjPAG9FXPk8X8smyA1alXuo6Or3Yo=
Subject key identifier:   60:08:CB:0E:57:32:C0:7C:54:20:BA:0C:56:0C:7A:E1:F1:BC:08:7A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB3830FA5D5DFCE1E5700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a09cf601-3d0b-37a8-abe5-8981ef0a00b9.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     7122
IP address blocks:        216.130.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b3:83:0f:a5:d5:df:ce:1e:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=4348d906-0684-4196-a44b-427cfeea4540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:9a:d9:a4:9d:d4:ef:66:3f:23:61:44:77:
                    f5:b6:9c:0a:88:eb:7c:70:d4:84:1b:15:c8:5f:22:
                    37:93:89:63:5a:b9:78:54:f1:15:1a:59:0b:f2:5e:
                    72:79:d3:01:ba:7c:71:0c:ed:a5:53:5b:19:b3:13:
                    94:4a:ce:c8:76:b2:e7:15:fd:c1:8a:e7:21:38:9c:
                    13:a6:77:27:6a:30:8e:0f:8a:37:d2:5e:85:d5:d5:
                    55:3e:bc:04:ec:0c:de:61:6e:9e:93:62:0d:8d:a6:
                    ec:60:63:73:63:dd:82:cf:04:5f:8e:7b:22:d4:00:
                    54:b4:a8:de:c4:db:f7:f9:fc:c5:db:ed:51:10:4d:
                    c5:1e:57:bb:fa:5e:3d:58:bb:2c:b5:7d:62:6b:6d:
                    55:5d:7a:c7:98:fe:54:21:93:0b:cb:de:4b:6b:33:
                    82:5b:48:f3:3f:fb:49:b0:3e:78:19:f7:6d:8a:6b:
                    34:04:87:31:84:fb:33:1a:63:89:6b:76:26:26:2d:
                    17:0a:88:f5:73:26:fc:66:cf:79:7e:59:ac:c4:fe:
                    cf:21:ef:74:ee:97:b9:9e:72:21:2a:e8:39:d5:19:
                    94:3a:17:92:e4:b0:37:b2:22:9e:fb:42:c6:39:13:
                    57:c6:7e:06:a1:28:6f:65:25:39:47:98:06:61:76:
                    cb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:08:CB:0E:57:32:C0:7C:54:20:BA:0C:56:0C:7A:E1:F1:BC:08:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a09cf601-3d0b-37a8-abe5-8981ef0a00b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.130.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2e:10:2b:c5:53:4c:92:2c:4e:53:20:80:19:9c:19:03:6b:
         ba:bf:f9:c9:5d:78:19:b3:b9:8a:a8:7d:7b:f5:cd:2d:32:5a:
         a0:af:86:c1:d1:e7:07:64:97:55:40:94:0f:30:55:88:86:4e:
         98:62:7b:d0:ec:0b:19:05:4e:4c:b9:f6:bf:47:77:5f:78:d2:
         c9:9a:1f:72:89:fc:35:92:94:97:40:ce:5c:3c:aa:1e:19:27:
         c7:a8:c2:71:48:ba:7e:29:a8:4f:2c:f3:8a:3d:44:41:fd:b3:
         08:87:87:f0:5c:2f:8f:3f:6d:e5:c8:e1:49:bb:22:a8:d0:e8:
         04:55:d1:e7:cf:d5:83:b1:29:b1:d2:14:d5:ae:31:c6:78:6b:
         45:a7:9e:2f:05:86:b3:47:d3:e9:95:b9:4a:52:9a:ab:55:94:
         7e:6a:db:db:7e:5c:c5:46:a5:1a:7d:df:a7:be:58:14:80:fb:
         2c:28:1d:4a:13:bd:20:ae:cb:43:40:07:9c:d9:2c:e8:17:69:
         47:2d:29:5d:a1:1e:05:da:c0:5b:22:38:dc:14:86:5b:00:59:
         ba:5b:a6:86:8a:61:72:e8:e2:67:c8:f4:50:ca:e5:0f:dd:0e:
         8c:45:9d:43:d2:6b:5e:54:53:9e:70:21:f0:91:73:fe:54:b3:
         98:49:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:13 2025 by rpki-client