Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa
File:                     f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa (raw, json)
Hash identifier:          zRdudAgzB/eEtJqvaERK1GKwPtpxwgg3dMNUEzkdaHE=
Subject key identifier:   0B:D6:D1:0F:F9:F7:C8:7B:E6:AC:8B:A8:76:B3:53:18:2C:7B:82:FA
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584ABBE635618C7FC9666A86DA00
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     53991
IP address blocks:        216.105.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:35:61:8c:7f:c9:66:6a:86:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=58422dfd-69b0-4c5c-840f-94809c50ccf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fe:6f:86:0f:70:99:bd:7f:b2:8a:66:7a:f3:
                    98:43:2f:f2:d0:0a:c8:68:00:0f:0d:30:02:7d:83:
                    70:46:19:a3:23:f9:9d:b7:25:40:04:d0:01:aa:a5:
                    17:de:ec:00:c2:9f:76:a3:c0:cc:56:cb:43:76:5e:
                    16:42:41:87:73:24:05:8e:43:51:32:c7:53:2d:c4:
                    27:b2:b9:86:55:62:34:a1:3b:56:84:50:fa:37:87:
                    a8:0e:3f:93:7c:ef:d1:a1:46:d1:2d:be:df:8f:40:
                    00:24:bd:1f:74:a1:31:d1:9c:a5:a0:e6:1a:60:ad:
                    a8:84:91:48:bc:fc:72:c5:e5:82:de:81:55:d6:57:
                    cc:a5:d0:38:fe:fa:0f:e4:08:c2:e7:8f:19:4c:6d:
                    a6:8c:da:7f:3b:7b:32:cb:6f:29:12:df:46:60:b3:
                    0a:0d:39:4a:ff:ef:f5:29:ae:97:a2:e9:b7:a9:e7:
                    f8:db:10:19:59:ab:62:4f:2b:2f:d9:b9:71:ba:14:
                    2e:da:db:ff:14:29:da:84:f7:47:e3:9c:7a:4d:b8:
                    d5:59:d4:35:0e:e9:73:06:1c:cf:8c:11:ef:ee:6a:
                    03:3b:55:23:01:9e:1a:a2:ad:36:fa:12:16:b6:6c:
                    b7:5c:7d:16:76:d4:19:79:01:d5:e0:aa:13:d1:e9:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D6:D1:0F:F9:F7:C8:7B:E6:AC:8B:A8:76:B3:53:18:2C:7B:82:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a0:06:e3:f3:07:62:e3:db:26:d4:ee:9f:89:3a:e4:b3:38:
         c0:75:ab:09:20:f5:46:6f:c6:7b:51:0d:cc:06:32:6a:42:7b:
         c0:e2:24:35:2f:a3:33:ed:e5:c8:b8:60:57:2f:e8:59:e1:72:
         4e:b9:24:82:9b:9d:eb:5c:d6:3f:e7:6a:73:1f:64:b4:a8:79:
         f9:a3:97:54:d3:e8:ca:5c:5b:6e:36:a0:93:d7:ba:b6:98:71:
         5a:c3:bf:e6:db:d2:55:39:49:28:80:77:44:88:3b:e3:8c:2b:
         4c:5e:74:7c:71:ed:f3:53:e3:56:dc:bb:cb:83:20:13:7d:e3:
         6f:13:f9:75:f0:86:b2:8f:97:19:54:5f:43:aa:ce:92:aa:87:
         3c:52:1a:5d:8f:49:ae:a3:8d:2e:bf:cd:a6:a7:51:7b:22:c1:
         ce:e4:93:70:7a:a0:51:6d:46:4a:e2:c0:2c:7a:fe:f7:0e:5c:
         70:53:f3:32:03:ff:42:be:90:96:33:9b:b3:05:bd:e2:a3:17:
         f4:ab:63:4a:60:24:bf:72:bc:32:3c:87:82:b2:11:d4:a7:b0:
         d5:f6:97:1d:0b:ef:1b:fe:f4:8e:6b:85:37:12:c9:ff:61:08:
         f1:bb:93:40:99:d8:44:3a:9f:0a:ca:ba:ab:74:f5:cf:6f:76:
         a7:48:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:16 2025 by rpki-client