Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c705db39-3936-3e20-9af4-05ac3b6882a0.roa
File:                     c705db39-3936-3e20-9af4-05ac3b6882a0.roa (raw, json)
Hash identifier:          B5BlTQuQEDQYYUvSRLqUCZxdDnSJXGOrpaq4O3MpCrA=
Subject key identifier:   4F:AC:2E:F5:C1:DF:2E:92:19:5C:72:32:A5:19:A4:99:C6:76:FD:1D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFCDC73A4BD83F6AE1C140
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c705db39-3936-3e20-9af4-05ac3b6882a0.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     21570
IP address blocks:        216.13.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:cd:c7:3a:4b:d8:3f:6a:e1:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=b728a072-60c6-4c5e-9b55-c860286b5edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b9:2d:a0:30:34:5b:45:1b:ba:02:75:a2:aa:
                    0e:a6:04:e5:da:fb:8a:10:49:a0:2e:1e:5e:27:76:
                    4b:5b:ec:59:72:70:35:65:d8:b3:25:d4:9c:cb:f5:
                    af:34:55:0c:5a:d3:46:7f:d7:c1:49:4e:96:82:53:
                    3a:95:7c:a2:d8:1b:e8:53:f0:86:50:7b:4f:32:f2:
                    e0:c3:a9:b5:86:3d:0a:85:0d:c4:9a:20:7d:75:ac:
                    52:79:68:d0:56:aa:9a:cc:63:99:2d:45:50:db:a0:
                    ee:73:af:81:5e:68:00:a1:fa:c5:29:c6:ee:54:ce:
                    c6:a1:52:24:1b:12:05:b1:f2:92:d5:99:61:32:21:
                    75:d6:63:c1:62:6c:28:03:a7:48:69:10:61:48:02:
                    92:f8:1c:5d:3f:4e:df:e5:34:fe:dd:1f:7e:3e:1c:
                    09:c6:d7:72:0a:6b:44:10:b3:20:49:7a:09:e4:8f:
                    43:f5:f9:b3:10:b8:2a:6b:06:24:3a:20:32:d4:74:
                    d0:67:c6:96:be:fe:71:23:0f:bb:fa:e2:dc:77:de:
                    61:99:c9:dc:71:ef:02:96:eb:cb:fb:3c:3a:52:df:
                    9c:57:3b:ae:ec:86:fc:98:ff:63:c8:4c:00:85:27:
                    32:b4:b7:3c:0d:61:3b:97:64:14:07:44:16:86:b0:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AC:2E:F5:C1:DF:2E:92:19:5C:72:32:A5:19:A4:99:C6:76:FD:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c705db39-3936-3e20-9af4-05ac3b6882a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:7a:76:db:5d:0b:23:47:c1:c6:f4:a0:2e:34:28:06:cf:
         10:1e:57:2a:84:ab:8a:a6:97:84:e5:e4:0f:22:e3:f7:41:bd:
         c7:ef:0c:52:48:c6:9d:38:56:9d:6c:ab:f2:d5:9a:3e:0e:1a:
         61:12:57:be:f6:b1:b4:99:10:ed:6e:74:e6:29:34:80:30:b5:
         92:f2:79:e4:98:fb:b5:83:cf:0b:3a:ed:28:c4:18:b7:7e:28:
         09:2f:a3:9f:04:42:43:7c:76:23:88:95:70:b0:18:b0:1d:0c:
         4e:c4:4d:11:21:65:fa:10:3b:01:39:54:4d:93:ce:ce:45:cf:
         f4:7e:e3:cc:e9:1a:2c:a9:dc:72:f5:b1:c4:f6:75:23:3c:d0:
         5a:ab:3a:f1:32:e5:49:80:8c:06:6a:f5:1c:cc:fb:cb:bc:2a:
         0c:e0:af:fb:b9:af:a6:0e:5c:11:e0:f6:fe:1d:be:12:aa:bc:
         73:ae:51:e6:08:b9:8e:98:2a:71:c7:a1:c0:c6:d2:83:7c:85:
         06:1a:de:2b:1f:bf:d2:9d:92:5e:f9:57:19:a4:f8:f8:ab:08:
         86:03:2c:65:98:95:57:c5:f7:77:6a:fb:48:d2:24:b6:e8:7d:
         49:e2:b8:a7:52:c6:57:49:fa:2b:2c:dc:58:a3:9b:b4:1f:53:
         fd:28:67:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:07 2025 by rpki-client