Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/59290798-9493-3ea4-bf43-c976b41225f6.roa
File:                     59290798-9493-3ea4-bf43-c976b41225f6.roa (raw, json)
Hash identifier:          E8Q7n72Q2hblUi64cDGClXqnQ6AhTgOim0/fBtM/I8w=
Subject key identifier:   AD:7D:91:2A:64:87:32:25:2F:C9:1E:D1:D0:42:AB:E8:1E:FC:F0:50
Certificate issuer:       /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial:       010D0C9F4328584A00DACDED324935DBCD3E12C0
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/59290798-9493-3ea4-bf43-c976b41225f6.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6597
IP address blocks:        208.73.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:cd:ed:32:49:35:db:cd:3e:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b01dd370-0fd1-4a7e-89bf-03dfa547951a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:89:46:7c:a5:86:34:f5:59:c4:91:b2:1c:
                    ea:5e:2c:d6:19:97:b6:9b:b3:fe:ec:9f:90:69:e1:
                    dc:ab:66:aa:24:53:ee:ac:a6:7b:51:3e:20:cd:a4:
                    fb:aa:23:73:66:e2:6f:07:4c:d3:4f:f1:f4:90:5f:
                    72:77:9c:88:74:28:31:36:a2:ca:00:30:26:a4:09:
                    89:81:bc:e1:8a:29:6b:21:b0:ae:59:88:c7:a3:31:
                    43:c7:8b:bf:87:79:82:1e:2e:db:af:69:6c:62:4e:
                    32:c7:6a:99:0c:75:18:b8:c9:02:55:2d:b9:72:3b:
                    d6:d6:22:8d:47:e1:ef:62:4d:12:48:60:1f:4b:fb:
                    1e:f3:59:78:d1:c5:45:66:c0:7f:fc:01:00:bb:70:
                    d3:19:5e:9b:bf:62:29:ee:b3:fd:c5:93:2e:ff:36:
                    2c:e0:4e:c7:64:07:93:f0:02:54:64:13:d9:97:7d:
                    44:6a:2d:ab:7c:a3:85:30:43:7a:17:89:5a:1e:15:
                    14:84:ef:0c:21:32:91:07:80:a7:25:5b:7a:13:c3:
                    61:05:f1:32:25:41:b5:18:ad:e0:85:c5:11:41:36:
                    39:7e:f1:a0:51:6c:a5:0c:3a:40:7b:8e:6f:dc:31:
                    8e:88:8c:45:6c:0d:8f:cd:e6:3b:90:3a:6e:c4:09:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7D:91:2A:64:87:32:25:2F:C9:1E:D1:D0:42:AB:E8:1E:FC:F0:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/59290798-9493-3ea4-bf43-c976b41225f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl

            X509v3 Authority Key Identifier:
                keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:20:99:cc:fb:d0:19:f7:80:30:97:07:8b:03:b0:8a:b8:3a:
         02:30:9c:0d:18:aa:bb:cf:37:c1:e4:16:9f:78:a5:8c:c1:52:
         8b:87:19:e3:c4:80:7e:26:ee:76:2e:70:3e:9b:66:f8:de:23:
         8f:66:d0:99:5a:24:18:05:42:f0:55:b0:5f:09:99:b2:e5:8d:
         aa:7c:4d:24:38:4b:ba:66:a9:11:59:ea:4f:3b:20:d2:6d:76:
         64:80:fd:dc:e7:db:cd:f2:c4:7b:40:5c:ff:06:f3:d9:09:15:
         4e:6e:19:66:40:2b:62:a2:bd:35:b3:d7:6d:4c:07:06:95:f0:
         c2:5b:b4:6b:0d:e3:6f:60:c2:ef:84:c2:eb:bf:2c:33:29:7f:
         2c:81:a2:3d:2f:d2:73:61:dc:90:24:07:93:7f:11:ec:fd:23:
         07:19:94:9d:04:99:62:30:53:db:aa:e3:99:59:ad:20:a5:d4:
         5d:16:c3:66:ad:6d:52:12:b6:60:1b:6e:8d:7f:14:02:ce:0d:
         74:10:b8:73:90:d1:f6:cb:a1:2c:41:7d:5e:09:b8:45:ab:6f:
         0b:c7:46:26:58:56:1a:ba:b2:c5:a2:46:6f:55:36:8a:a4:df:
         09:dc:84:3f:c6:a7:04:8b:3c:80:14:8f:fd:09:bc:b4:19:1e:
         81:05:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:49:36 2025 by rpki-client