Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa
File:                     0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa (raw, json)
Hash identifier:          kqbq37Wm5MvHa+KSJFdSHf+wiqPfBmFUB3ZCVXhhIzY=
Subject key identifier:   96:5B:3F:C3:FE:CC:30:E8:DE:B7:AF:BB:A8:A9:82:05:DC:9B:AF:55
Certificate issuer:       /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial:       010D0C9F43285849A089E8D6FDA47356C7131B80
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        216.71.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:e8:d6:fd:a4:73:56:c7:13:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=f5d3cbdd-49cc-40a1-b1fa-037bf3652a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:8e:6a:d8:c8:4f:ae:36:59:e5:b5:8b:b7:
                    a2:2f:fa:ba:78:41:cc:33:5f:12:d7:f2:fb:f8:67:
                    49:73:a9:b3:91:c0:5e:49:c7:37:b4:54:eb:02:b5:
                    ed:c2:97:db:8f:bd:0e:b7:50:a1:a3:45:b8:e6:1f:
                    92:36:08:a8:d5:a6:19:e9:04:b6:6c:6e:d1:c1:fe:
                    db:1b:f5:32:f1:ca:a5:29:30:39:65:10:3a:c7:f0:
                    5d:ec:c6:65:89:9b:ec:96:43:cd:65:6a:bc:58:1b:
                    6f:8d:ae:a3:ad:25:69:25:e5:42:ab:0c:23:1d:f3:
                    b4:3b:3f:e7:36:9b:0a:04:5e:c6:35:c0:bd:a6:51:
                    04:7f:c9:c6:27:2f:93:6e:73:ed:d4:0a:7f:07:a6:
                    f1:98:46:2a:3c:6c:49:01:e8:53:3b:14:6e:01:2c:
                    60:91:28:3c:7c:a0:ac:6f:7d:02:b2:fa:14:7c:d1:
                    ca:a8:e6:88:5e:d0:0e:01:9d:66:96:8a:50:8b:c1:
                    a0:75:a3:50:a7:54:bb:c3:57:40:08:6d:67:40:7d:
                    e4:b2:ba:9b:0d:f3:9f:cc:a6:76:e0:ff:58:7a:92:
                    40:00:17:31:fc:f8:ca:39:14:cd:3b:d8:47:32:73:
                    47:37:5f:eb:e5:4d:ed:9e:f0:29:07:65:8f:84:6b:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5B:3F:C3:FE:CC:30:E8:DE:B7:AF:BB:A8:A9:82:05:DC:9B:AF:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl

            X509v3 Authority Key Identifier:
                keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c3:1a:e3:3c:89:e5:bf:3f:73:0d:a1:08:d9:db:56:9e:a1:
         1a:47:b0:e2:c2:63:ea:c7:38:66:46:13:3f:34:15:f1:d6:ca:
         9c:8c:5a:27:9e:79:72:67:5c:63:7a:17:ac:97:b2:6a:5f:0e:
         e9:7d:0a:31:2f:70:7d:1e:c8:da:d0:fe:4c:9a:99:83:9a:12:
         b9:e5:5e:6b:0e:d2:58:13:83:f8:b4:58:ef:fc:c2:76:ea:6a:
         e6:73:1e:07:55:1c:5f:c5:d2:de:31:84:18:06:bb:08:6c:de:
         c3:18:0e:f4:74:2e:06:a4:c9:ea:35:77:d8:e1:df:d8:c8:e8:
         ce:19:d2:7a:62:81:24:a4:88:34:cc:c5:75:7d:c1:a2:85:d3:
         99:bc:9f:66:26:3e:3c:b8:cd:77:84:14:2d:c9:70:16:a7:c2:
         97:e4:52:28:89:a1:50:46:f8:f5:09:90:91:57:9f:26:f2:95:
         88:c9:27:1b:eb:22:02:61:4c:f5:de:82:e9:19:dc:78:81:5f:
         25:25:a4:2d:1f:a7:16:6f:8b:bf:34:ef:01:35:06:66:58:3b:
         c2:08:2e:b2:75:4c:cc:4e:52:3c:5e:80:8f:8b:22:fe:e8:f4:
         26:39:be:e6:1d:28:72:92:3e:3a:3a:3b:a5:a0:fb:cd:5b:6c:
         6b:d4:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:31:48 2025 by rpki-client