Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
File:                     2613f3f7-60d2-3644-87f5-381f608c7546.roa (raw, json)
Hash identifier:          zROXAdgSozC2God4sYYiaCGu8LKbRrnBoQl9QNpV2IQ=
Subject key identifier:   30:64:C5:91:9E:8A:90:58:34:6F:7F:39:2F:8D:F8:39:F2:71:40:91
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A10353C1912244D161B54BA00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        216.157.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:3c:19:12:24:4d:16:1b:54:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=cab4b7d9-a16a-4373-a63a-d09f6731e867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:94:3f:01:74:a7:0f:f6:2d:67:92:9e:8a:
                    cb:42:ac:7b:aa:30:57:ee:16:8e:89:7a:4a:93:5b:
                    f0:35:1c:05:c2:71:16:e2:cd:74:08:3e:fa:fd:cc:
                    18:dd:07:ff:cf:f2:22:1c:21:d6:e0:36:04:af:41:
                    5f:32:23:e0:c3:62:4f:6b:ff:aa:f6:f5:8c:1e:9b:
                    bc:6f:fc:c7:37:ad:e2:7f:14:b8:53:43:e9:d1:d4:
                    12:46:45:72:29:43:0e:56:06:b9:44:65:a6:43:cc:
                    64:20:50:7d:11:73:17:91:a6:b3:03:09:33:57:7e:
                    71:26:cd:1d:2e:c7:ef:47:3d:9f:ca:c8:5f:f8:7c:
                    ce:4b:91:2b:87:32:bb:d0:e3:84:7e:72:c7:93:12:
                    c3:f2:b8:68:a7:eb:93:84:1b:1f:be:3d:29:b9:e7:
                    2a:88:f9:86:d2:8b:55:3c:ca:d1:ed:ab:8d:79:5d:
                    a8:1e:4d:8f:6c:fc:fa:11:33:f2:db:be:b1:d2:58:
                    66:ed:57:29:e1:67:52:d2:e9:62:81:ed:5e:3a:dc:
                    33:56:d0:0b:e6:bc:ea:be:7b:37:fe:75:cc:8d:9d:
                    03:4a:51:d5:7f:64:3e:58:83:c6:4b:24:57:dd:33:
                    64:87:24:3a:18:95:d1:49:3e:36:02:d6:91:6a:56:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:64:C5:91:9E:8A:90:58:34:6F:7F:39:2F:8D:F8:39:F2:71:40:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:3e:7b:5b:28:08:c8:e9:e4:5a:69:59:44:3b:75:e7:5c:
         29:f8:1b:b4:a8:d2:60:4f:34:b1:df:a3:41:c2:76:5b:c5:db:
         77:03:d5:cc:33:be:1a:7e:d9:98:20:1e:ef:7a:60:b7:ae:80:
         51:bf:61:67:d2:59:33:6e:34:cb:15:b8:8f:8f:f3:c3:3c:f6:
         29:39:f1:31:81:6c:d9:02:e3:7a:c5:3a:e4:2a:83:81:33:aa:
         20:7c:7b:5d:f2:0f:7f:17:9e:5c:68:a4:15:01:9d:19:79:77:
         dd:d5:ad:82:1b:4d:61:cc:33:b1:22:b5:1e:8e:51:a4:69:cd:
         33:b7:14:98:02:fc:4c:57:fb:ea:75:e3:83:71:bb:9a:f9:c8:
         21:26:ff:e6:33:65:a6:8e:e3:b3:cd:67:da:c6:35:5e:39:3e:
         9c:90:f9:45:27:2e:15:e4:59:e6:35:80:27:cf:8b:98:37:c0:
         2d:69:c4:7d:52:d1:b7:6e:1e:a7:1f:5e:d5:e5:52:a5:60:c3:
         86:57:0f:7a:2f:49:c7:2f:8d:29:7a:59:e6:56:4d:75:fb:14:
         d8:6d:f3:f8:72:ab:d2:ee:3b:1c:da:48:14:79:b4:36:a3:42:
         e8:fa:8b:51:a8:e2:44:d7:07:2c:e5:66:c2:23:cc:86:c1:da:
         82:eb:1c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:38:22 2025 by rpki-client