Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8a988002-e1ac-34ec-b7d5-e9c1d647c711.roa
File:                     8a988002-e1ac-34ec-b7d5-e9c1d647c711.roa (raw, json)
Hash identifier:          fXgcsaq4Z15WZyGxI+GrNNqlDozwms9dBgICzA4t4Ik=
Subject key identifier:   91:B0:E3:DD:CC:49:89:A3:DE:C9:1A:A4:AF:69:66:30:3D:16:88:04
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D594E9D24C1D93666A606A80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8a988002-e1ac-34ec-b7d5-e9c1d647c711.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     17025
IP address blocks:        216.200.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e9:d2:4c:1d:93:66:6a:60:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=cc608827-4213-41eb-ad5f-a72d7422d128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:63:e7:bc:1b:ba:f9:85:fc:e9:1f:0f:0a:
                    af:b8:59:ff:6d:d6:fc:0c:e8:6d:c6:63:c8:9c:8e:
                    7a:d1:fc:c2:9a:02:a2:36:42:82:0f:f6:f7:1f:65:
                    2b:02:7c:3c:6e:77:69:d3:a9:ff:05:5d:67:f8:1f:
                    b2:d8:f0:98:03:c9:d3:31:29:52:22:83:8d:0f:aa:
                    26:f1:22:98:11:91:b9:a6:82:a3:d1:7a:8a:47:70:
                    a0:24:c7:e2:ea:68:9b:41:e7:d3:09:78:c0:dd:09:
                    1b:bb:59:c2:d6:aa:29:f0:f4:32:22:96:b3:eb:f0:
                    76:0a:d5:58:85:3d:73:74:c6:85:25:96:92:6a:a7:
                    1e:54:aa:6f:43:63:1e:5e:87:17:a4:1b:c4:8d:bd:
                    b6:40:39:a6:e8:2d:af:b9:da:9c:3b:89:9b:4a:5b:
                    7c:38:8f:48:08:07:b9:f7:5e:e9:75:8a:c6:e8:2f:
                    0e:76:06:4a:93:ab:6e:15:fc:ac:8a:31:de:53:18:
                    80:b1:ad:7f:3e:f0:18:42:96:0e:00:bb:9c:48:1e:
                    a7:a8:1a:f0:49:79:d2:f8:88:92:76:45:88:f5:22:
                    2d:b1:c9:bc:97:87:29:16:70:cc:d7:4c:57:81:bb:
                    5d:10:a9:fb:cd:dd:f2:69:9c:d1:ee:e7:e9:d5:0d:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B0:E3:DD:CC:49:89:A3:DE:C9:1A:A4:AF:69:66:30:3D:16:88:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8a988002-e1ac-34ec-b7d5-e9c1d647c711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.200.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:12:e0:e4:98:a7:2d:e9:0e:e2:5f:50:ec:73:fc:04:92:f7:
         ea:84:34:a9:be:b7:77:3c:4c:a4:ac:a0:03:62:41:a4:47:f1:
         16:e4:fd:e3:9a:c1:0b:7d:77:cb:8c:31:8c:d5:ef:ce:d7:94:
         7b:ed:81:ad:32:67:31:a5:8c:90:ad:e6:6a:16:5c:10:d3:a4:
         73:e1:bc:a0:57:4c:b7:8b:0e:0a:52:67:dc:15:2f:5f:51:7c:
         50:bf:98:b0:2d:6d:9e:43:09:de:51:ce:74:1b:f0:bc:ec:dc:
         cb:04:67:fd:32:f8:39:d9:fe:0b:60:0a:4f:36:be:e1:2e:bb:
         d5:83:ef:51:5c:5c:99:77:ec:5e:32:7a:41:83:9c:95:e0:4a:
         25:00:ab:78:83:a8:a8:50:61:f5:53:2e:42:88:3b:f4:82:00:
         93:60:2c:31:b9:fe:9d:16:a2:cb:33:ac:24:4f:2d:1f:60:e9:
         c7:5d:fc:4c:49:e4:fe:70:db:88:91:07:76:ca:b6:a3:68:e1:
         08:22:3e:9e:df:03:bc:91:aa:f6:1f:af:7e:5d:16:4d:7c:0f:
         84:a6:41:46:bf:85:16:18:5e:f0:7b:a8:29:4c:3c:61:93:8c:
         b9:dc:c1:0e:87:c7:2d:eb:dc:b8:6c:df:94:9d:27:df:05:30:
         c7:88:54:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:45:08 2025 by rpki-client