Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/b5985cb8-9a90-35e0-8dcd-032ac1635309.roa
File:                     b5985cb8-9a90-35e0-8dcd-032ac1635309.roa (raw, json)
Hash identifier:          ciEI+l8shw3NurosO36k9/sB/fzWbJoGcRRmr1J+HYM=
Subject key identifier:   B3:C6:16:B6:07:A2:9C:D4:4E:A9:06:42:8F:C1:C6:3A:9A:A4:0B:F5
Certificate issuer:       /CN=64ec5258-02d3-4bd3-af76-7496ec09cb15
Certificate serial:       010D0C9F4328584A26F38C914DF6C3F3CC0B1434
Authority key identifier: 3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/b5985cb8-9a90-35e0-8dcd-032ac1635309.roa
Signing time:             Wed 11 Jun 2025 04:32:12 +0000
ROA not before:           Wed 11 Jun 2025 04:32:12 +0000
ROA not after:            Tue 09 Sep 2025 04:32:12 +0000
asID:                     1097
IP address blocks:        216.146.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:f3:8c:91:4d:f6:c3:f3:cc:0b:14:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ec5258-02d3-4bd3-af76-7496ec09cb15
        Validity
            Not Before: Jun 11 04:32:12 2025 GMT
            Not After : Sep  9 04:32:12 2025 GMT
        Subject: CN=6ad6065e-9152-43cb-bd5f-210545676d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:84:a1:d7:25:a0:4b:97:3f:50:a4:0d:a4:
                    91:74:a5:22:52:55:10:c8:df:98:f3:5b:3f:94:de:
                    3e:bf:85:08:ba:c9:c2:e6:44:ce:6b:e5:d4:fe:91:
                    d3:9d:dc:62:1e:8b:8e:bf:dd:30:51:4f:1e:75:84:
                    79:26:eb:88:f3:ec:5f:4f:f5:a8:92:5b:f6:39:c2:
                    b3:c2:c4:01:72:b7:9d:c7:fc:c7:f1:43:ac:a2:f1:
                    dd:81:c1:3b:4b:42:e5:c1:72:60:e5:ba:28:9a:30:
                    cd:0a:a9:31:70:91:85:e5:bd:51:b1:0e:ea:71:9b:
                    dd:d4:22:38:ee:d8:57:14:42:c9:0e:da:cb:fd:22:
                    93:90:36:1c:80:c8:48:39:4e:05:0c:35:89:8e:00:
                    f5:7b:a1:62:7f:ae:78:c5:c5:6d:23:46:6a:37:f9:
                    62:e1:69:1a:c7:02:0a:82:bd:36:d6:1e:0b:30:7a:
                    c6:9f:45:7c:13:b7:4c:45:73:26:b6:dd:db:1a:97:
                    07:6f:7c:1c:e7:1c:7a:1e:b6:7d:96:83:dc:7a:bb:
                    ba:66:f4:62:0e:34:1c:dd:a4:48:9f:a5:05:b8:52:
                    93:14:48:f5:02:a9:8a:b1:97:3a:ab:1f:fa:2a:ad:
                    85:60:21:22:8a:e6:07:9b:fe:22:1d:7f:bf:d7:5f:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C6:16:B6:07:A2:9C:D4:4E:A9:06:42:8F:C1:C6:3A:9A:A4:0B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/b5985cb8-9a90-35e0-8dcd-032ac1635309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl

            X509v3 Authority Key Identifier:
                keyid:3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:7d:3b:19:a8:d9:3f:fe:b1:71:9c:b5:1c:7c:27:ec:15:
         cd:b5:e1:d5:70:f4:9a:e1:a4:6f:9d:71:fc:d1:07:d9:d6:33:
         0a:22:56:cb:d1:bd:dd:13:86:d8:46:67:e4:be:1c:5f:2c:87:
         09:ce:bc:5d:61:f4:34:e4:1f:eb:b3:bc:6b:b7:a8:f0:1a:f9:
         5c:77:eb:11:d4:b7:b8:7f:4f:6c:e1:6d:56:34:a9:2c:9a:55:
         68:30:b8:9a:70:54:15:e6:97:aa:fd:f6:ba:40:4a:d8:a3:c8:
         07:ef:d0:0a:43:93:39:e3:d3:41:15:0d:0d:46:cd:73:e2:f4:
         bc:f1:3a:b7:aa:a2:58:3e:67:ed:4c:5f:ac:4e:c5:d5:53:19:
         c8:6c:22:db:35:0b:93:e4:19:45:ae:2f:7d:0a:54:54:e5:19:
         e7:dc:0e:c6:bc:30:65:01:ba:b2:a9:e5:02:5e:e9:16:f6:88:
         3c:d2:6c:03:52:7f:de:c7:31:c1:eb:49:8f:3b:59:22:74:7b:
         58:43:4f:ad:09:58:ef:50:ab:9a:fd:1d:c8:5e:b6:bb:c7:e2:
         60:34:52:96:e5:12:06:07:6b:dc:fb:1e:24:d5:b2:f7:25:1a:
         4f:d9:33:32:14:be:59:d4:36:a0:5c:4f:23:ae:33:2c:9b:d4:
         91:71:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:49:28 2025 by rpki-client