Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6a1cffb8-82d6-321b-90a8-f30d3e16e8b5.roa
File:                     6a1cffb8-82d6-321b-90a8-f30d3e16e8b5.roa (raw, json)
Hash identifier:          /vrQZCb/7FEwTK1OMbNBrH3Rxljfo8xx7i9a7YRhO5k=
Subject key identifier:   3E:B8:D2:29:83:DF:55:87:83:80:4B:55:25:45:D0:1F:B0:0D:F3:34
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849DB2A3080C2D06D1311C72980
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6a1cffb8-82d6-321b-90a8-f30d3e16e8b5.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     6461
IP address blocks:        216.222.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:30:80:c2:d0:6d:13:11:c7:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=3c21902a-91b5-4705-9dc9-e5a5a0569ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:0b:7a:d1:82:9b:08:e4:6f:1b:39:21:7e:
                    7b:7d:d2:dc:59:d3:9b:dd:50:5e:2d:1d:15:10:1d:
                    6c:49:1d:86:01:84:56:de:64:08:d0:f4:6a:6f:a9:
                    01:01:e6:f2:42:fb:86:bd:15:4d:d8:bd:c8:fd:96:
                    72:cb:be:85:3e:bc:ca:86:d9:ac:ab:a1:52:69:e0:
                    9e:00:06:38:6a:b5:7c:75:84:56:e9:c7:9b:2b:17:
                    59:83:80:38:05:df:89:fd:2c:e5:51:2f:4f:84:7f:
                    83:79:08:53:88:05:4d:54:98:b9:ef:93:6f:62:c9:
                    0a:ee:4e:5b:e2:7f:4f:c1:c4:75:94:ed:17:07:0f:
                    ea:15:01:24:69:28:fb:46:2b:66:d2:be:d8:fb:2e:
                    2e:23:64:d1:11:b5:f4:63:2c:c6:af:32:0f:ff:5e:
                    71:d7:d4:ca:95:1a:36:61:14:d9:eb:c0:dd:e8:45:
                    c3:39:29:1e:8c:97:93:3c:f4:19:50:68:89:65:8a:
                    5e:f5:77:06:8a:e8:07:c5:7c:12:20:1b:f7:47:f5:
                    bd:f2:c5:f4:e3:84:f8:b7:7d:9a:bc:98:23:a0:1e:
                    ab:d2:fb:48:fc:2b:ab:87:df:7b:cf:1c:9c:e4:7c:
                    06:36:bb:2f:e7:14:00:94:0a:8e:1a:1b:b1:1c:d5:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B8:D2:29:83:DF:55:87:83:80:4B:55:25:45:D0:1F:B0:0D:F3:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6a1cffb8-82d6-321b-90a8-f30d3e16e8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:6d:01:e5:59:b2:47:6a:2f:14:02:2e:f2:64:68:79:cf:
         4a:90:d5:a8:40:d1:76:be:df:44:34:0e:03:1a:de:3e:c1:a2:
         63:69:0a:d3:19:c4:11:77:37:d2:ec:74:a5:58:b3:27:7a:31:
         a3:a9:24:e6:43:67:ac:2a:65:ad:4e:a2:90:b4:96:d1:da:80:
         0a:18:ee:67:16:a9:44:cc:a2:f3:9d:44:7e:a3:54:42:f1:46:
         9a:79:16:b9:29:5f:51:91:99:df:25:da:91:23:fc:05:b9:af:
         3b:b8:64:d8:25:2d:5d:e8:a5:2a:dc:70:3f:08:15:9f:73:0e:
         f6:c0:e1:84:35:18:2e:1a:d9:92:41:d9:d3:f8:42:0e:db:62:
         7a:3f:41:eb:8e:c2:3c:04:69:d0:74:c3:7e:e6:ae:17:c6:90:
         59:6e:85:fe:1e:d8:29:8a:84:ed:4b:81:9c:b3:17:28:45:51:
         aa:ad:3f:25:f1:b4:c7:c9:bf:65:aa:8e:50:5c:00:bc:59:65:
         04:d2:aa:b4:da:48:c7:e2:86:2b:c6:18:bf:a1:02:0d:94:ef:
         0d:4d:f9:50:49:32:8c:6d:0b:c8:7d:cb:5b:52:a2:b4:71:4d:
         5a:8e:ea:36:04:ce:af:ed:b0:a5:51:4c:a5:ce:bb:ed:f9:01:
         89:82:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:31:15 2025 by rpki-client