Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa
File:                     0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa (raw, json)
Hash identifier:          MbusiwJ4RHI62UHoXZUIN1Xi+2a4Wm0cViY2OqpI/34=
Subject key identifier:   53:67:8A:8B:5E:37:DA:21:57:F7:CF:FE:7E:42:28:34:EE:8F:FC:B3
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584AB650EFEFA2E7AECECC5D7B40
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        216.157.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:ef:ef:a2:e7:ae:ce:cc:5d:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=95d980fb-93b5-41e4-bb61-e7534450d0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:57:d2:ab:dc:ef:71:ad:3c:83:02:ad:c2:
                    99:ab:3b:e8:60:e9:66:db:49:d5:84:1a:ed:a0:a1:
                    75:50:89:bd:4f:9c:15:1a:cc:7f:e7:9e:d6:2d:73:
                    bd:18:b3:05:2d:9c:a9:28:23:0a:03:67:30:ae:91:
                    4e:5c:e8:30:c6:64:89:2e:7b:28:c8:db:b6:5d:49:
                    a4:67:db:42:67:60:69:a4:ce:b8:8d:81:86:82:09:
                    be:a5:7a:7b:a0:cf:8e:87:fa:11:fa:8b:dd:da:5b:
                    a1:d3:cb:c8:22:d4:2f:80:43:a6:e9:93:5d:10:d2:
                    20:99:f5:42:f6:04:4c:16:89:fa:d9:02:ec:5a:35:
                    24:92:bf:81:c2:0e:5f:fa:13:1a:27:a4:de:de:cd:
                    9f:b5:90:33:d6:fa:bf:30:68:f5:72:da:da:e2:a1:
                    44:22:ec:46:ca:8d:4c:d4:af:50:57:bd:6d:7c:56:
                    6d:0c:91:10:fa:2a:9d:92:11:62:dd:94:25:6e:47:
                    66:d4:af:56:75:58:7a:54:2c:00:b1:d8:65:f1:0c:
                    72:8a:1b:04:8c:1f:c6:ba:85:5d:32:16:48:16:73:
                    0e:dc:4c:6e:33:98:6f:e6:85:b5:56:33:40:cc:b8:
                    f7:b9:64:e1:0d:e4:e7:af:8f:94:b2:ee:ea:8e:ab:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:67:8A:8B:5E:37:DA:21:57:F7:CF:FE:7E:42:28:34:EE:8F:FC:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:ca:76:ae:95:64:51:ae:00:44:bd:e9:24:68:2c:05:44:
         dd:cd:60:30:1e:0d:de:2f:0c:e4:19:16:fa:00:a1:4b:e1:df:
         64:02:63:10:d8:9e:31:6f:6c:1e:1a:46:ce:6c:79:e9:64:fe:
         62:22:e9:df:30:39:a5:c1:b5:c3:31:3f:ce:60:cb:e8:b0:6a:
         8e:d2:34:0c:6f:6a:85:11:33:b1:fd:da:79:7f:c4:0a:08:ab:
         8d:43:96:6a:3d:6a:41:f8:28:7d:49:4e:3b:90:6f:36:05:5a:
         29:50:0a:84:ba:82:d1:6d:d9:51:a3:a0:85:fc:f2:db:ee:e3:
         d5:37:14:eb:76:e7:e6:a0:cd:4c:94:3f:ea:6c:4a:b1:cd:be:
         bd:c0:85:49:40:82:d3:4c:3e:eb:06:f2:59:02:63:64:2d:bf:
         ff:e1:ad:07:27:95:8e:63:d9:7b:13:8d:18:c4:59:9d:80:d4:
         65:58:e0:c1:b9:09:04:65:6a:93:aa:0b:e4:f8:56:8c:6b:21:
         c0:4b:bc:37:96:41:77:8f:75:a7:05:c3:8f:15:c4:d3:9f:b0:
         34:9c:15:9a:8d:0f:09:0b:4a:3b:ac:00:0b:86:d4:9c:86:7f:
         68:e4:ed:5a:6e:58:0f:dd:da:68:ee:b2:2b:ff:21:52:6d:26:
         e6:a2:76:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:03:38 2025 by rpki-client