Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/95e0420a-8e55-38eb-81fd-185d3ca6d827.roa
File:                     95e0420a-8e55-38eb-81fd-185d3ca6d827.roa (raw, json)
Hash identifier:          qvAqXY8ba4sEdv3QbLRW60IV10+iIKJkZjhPgsbDkVo=
Subject key identifier:   EE:62:47:35:78:D4:B2:63:3D:B7:35:0F:71:A5:F0:B3:33:F9:59:FC
Certificate issuer:       /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
Certificate serial:       010D0C9F4328584A10353E2653067723F99229A0
Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/95e0420a-8e55-38eb-81fd-185d3ca6d827.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     7311
IP address blocks:        216.126.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:3e:26:53:06:77:23:f9:92:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=b8a00b0e-684c-4d28-a648-9556884d2953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:d8:b5:56:23:dc:74:ae:af:b5:ec:7c:2a:
                    8a:2b:9d:81:af:8e:25:3e:eb:3d:a8:f4:81:72:22:
                    75:9f:08:19:94:6f:d1:69:a9:9b:78:a1:80:ff:02:
                    29:8b:28:f9:36:91:73:6b:16:74:e2:fd:9e:e0:04:
                    50:4c:06:13:fb:ac:d1:08:1c:75:4d:17:35:ae:01:
                    66:68:83:5e:87:c0:b4:eb:3d:89:8c:02:9c:11:e3:
                    8f:16:99:a9:15:ce:6e:d2:6c:bf:7a:06:15:51:4b:
                    20:99:31:cb:61:cb:c8:89:77:16:7d:f6:7e:78:8c:
                    37:e6:02:19:4d:b4:cf:b7:af:03:0b:cc:fb:91:58:
                    fd:9b:60:e4:8f:9f:54:6b:c4:12:44:f7:82:15:7c:
                    d4:0b:5d:ec:32:5a:ba:4b:ee:d0:a0:23:ee:82:e3:
                    3d:d0:f6:1a:05:7d:a7:b2:5a:80:fd:c8:12:75:99:
                    bf:af:ad:f6:b7:d8:9b:b0:e5:25:93:d8:1a:91:aa:
                    b9:3a:66:f9:be:47:40:21:a4:0c:0b:66:24:c7:17:
                    54:b0:99:38:ce:e2:d2:62:fe:ae:ed:d3:7a:f2:51:
                    6d:d9:63:6b:cf:a8:9e:76:5d:16:44:96:ae:12:2b:
                    44:e0:9b:96:c2:60:40:70:a2:43:20:33:9b:13:0a:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:62:47:35:78:D4:B2:63:3D:B7:35:0F:71:A5:F0:B3:33:F9:59:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/95e0420a-8e55-38eb-81fd-185d3ca6d827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl

            X509v3 Authority Key Identifier:
                keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:cb:17:1a:c0:46:33:82:07:67:13:9e:ef:bc:83:9e:78:
         92:99:09:f8:e6:76:ed:e3:a0:af:3b:d6:21:1c:d0:53:84:98:
         78:fa:0e:ba:da:22:3c:e8:1c:96:96:dc:5b:2b:2e:04:2b:48:
         15:e4:63:64:48:06:6a:95:07:e4:d6:d3:d1:e2:8c:3d:bc:ae:
         f1:84:1e:7c:44:66:57:5d:db:77:98:0b:9e:1e:69:97:91:88:
         0d:b3:b6:df:35:4e:c6:18:e1:31:5a:9d:34:fc:92:34:a9:54:
         1b:a2:6e:c2:c9:f4:e9:58:34:e6:29:90:9a:f6:49:f1:0c:d2:
         1c:3d:4a:4f:d6:05:58:d8:9f:2a:ed:1e:9c:6b:5e:74:ea:6f:
         cf:8b:ab:be:b4:5c:a0:ea:a1:5e:c9:85:ac:8a:19:37:3c:50:
         2a:aa:68:a1:06:95:ec:85:36:0e:15:99:00:50:16:04:5c:ea:
         ef:88:8b:aa:23:a2:37:86:d3:ef:e6:9e:f3:08:33:d4:fc:b7:
         58:30:82:42:83:b8:db:bc:60:f1:4f:3b:1a:37:03:2f:b7:0d:
         7a:d8:13:23:72:0f:3b:b2:74:6b:c6:41:7e:7e:71:a3:d2:90:
         d8:00:42:94:48:90:05:b0:4d:94:8a:2f:43:0a:59:a3:c3:24:
         57:e5:ca:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:05:45 2025 by rpki-client