Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/360c6edf-2f89-3639-a3c1-8bed4e0a6dca.roa
File:                     360c6edf-2f89-3639-a3c1-8bed4e0a6dca.roa (raw, json)
Hash identifier:          hDVTMk6O1CCqQPAMMB+8Ym/wuqR89bABG3QPHrA3bVI=
Subject key identifier:   80:E8:4D:6E:DA:C9:95:7E:C7:9A:21:E3:CA:48:4E:82:B9:8C:09:5D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849EE0095D0EAF3A8837C772B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/360c6edf-2f89-3639-a3c1-8bed4e0a6dca.roa
Signing time:             Wed 21 May 2025 18:57:23 +0000
ROA not before:           Wed 21 May 2025 18:57:23 +0000
ROA not after:            Tue 19 Aug 2025 18:57:23 +0000
asID:                     7029
IP address blocks:        216.96.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:00:95:d0:ea:f3:a8:83:7c:77:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 21 18:57:23 2025 GMT
            Not After : Aug 19 18:57:23 2025 GMT
        Subject: CN=4e057d66-ad3e-4aa9-b436-db4e958e27f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:8b:b0:ef:0d:9a:12:7b:04:6d:39:7e:ca:
                    31:7c:80:b8:57:f3:43:94:b5:2c:2b:a8:e7:6c:6d:
                    83:f4:65:63:2e:5a:cd:80:a0:6e:46:05:dc:9e:4d:
                    2d:24:2e:4e:55:d1:66:6a:f9:6c:f4:83:62:cb:7e:
                    34:cf:b7:a9:00:37:df:57:84:53:08:71:77:b7:22:
                    41:3e:70:bd:4c:c7:52:13:88:f2:de:47:50:b2:e2:
                    20:fd:c3:d2:94:b4:17:3b:3d:4d:ab:db:ee:92:ea:
                    02:8a:f6:55:ea:d6:2e:be:c3:7a:87:4c:01:6c:96:
                    71:da:c9:19:39:91:8b:36:3f:4b:1b:6c:ed:d9:b9:
                    ef:72:5a:f4:d0:5b:80:a6:76:93:22:98:4d:80:61:
                    56:2c:f3:fe:60:2b:be:82:f9:ba:8f:b5:ba:ba:65:
                    4f:66:82:86:02:d5:23:19:68:d4:a6:26:c9:6b:71:
                    0a:1b:3f:23:2a:8f:60:5a:76:e9:9d:e6:f1:e5:10:
                    66:dc:b7:79:27:04:87:00:1d:4a:00:56:ca:87:67:
                    21:f8:b7:eb:81:46:4a:51:fb:e4:38:1f:ee:29:cf:
                    4c:0b:38:6d:0b:9b:61:af:61:07:1c:ca:0f:9b:be:
                    28:f9:02:0b:99:20:8e:a2:35:a6:96:e3:0d:8d:c5:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E8:4D:6E:DA:C9:95:7E:C7:9A:21:E3:CA:48:4E:82:B9:8C:09:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/360c6edf-2f89-3639-a3c1-8bed4e0a6dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.96.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:56:1a:04:97:90:23:8c:28:c7:15:10:9c:96:c7:09:32:
         4e:1b:58:af:be:fc:70:e0:1b:c7:8c:5c:e1:30:e9:4a:5c:af:
         40:30:3e:7d:2e:44:40:6e:5e:5b:a0:f8:2a:9d:17:ca:5f:fc:
         bb:aa:e4:4a:c1:35:3a:f0:79:de:4b:a6:c0:80:e9:a1:51:9e:
         a6:45:f6:05:46:4f:5a:c5:7b:a6:a3:28:da:04:ac:42:db:fd:
         2b:59:fd:9c:d3:d6:aa:46:3e:8f:1e:f5:dc:63:c8:ba:0f:dd:
         a0:50:d9:38:58:27:6e:4f:83:46:8a:31:6d:40:a3:a3:da:04:
         12:6b:93:12:72:d7:2b:d8:38:4d:ef:f6:94:81:d6:bd:30:6f:
         ed:66:d4:08:d6:eb:1c:b0:ba:b8:ef:3a:02:ec:fc:41:2b:cf:
         a6:ea:86:30:10:56:f7:71:ef:b3:32:1f:c6:62:92:54:41:53:
         b2:3b:77:c1:24:51:b2:f9:aa:06:5f:31:d3:df:f1:0f:b8:a2:
         b1:67:c9:be:62:bc:0b:3b:f6:59:00:48:24:5e:de:ba:23:0e:
         69:03:a8:4f:67:5c:33:2b:71:59:87:70:0a:54:0c:ce:37:29:
         46:0f:88:58:e3:62:65:6c:3b:69:54:ac:44:9c:73:0f:77:0c:
         ce:a9:d2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:07:24 2025 by rpki-client