Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8013c55d-fa9c-367e-8221-7323a9d932ec.roa
File:                     8013c55d-fa9c-367e-8221-7323a9d932ec.roa (raw, json)
Hash identifier:          YvxbrxsfJdSGjVgXqqIBHscUZVLaFy+lSpOCg9EUAFE=
Subject key identifier:   59:4C:74:AB:D4:C9:D8:06:1E:7B:B5:36:40:62:F9:C0:D0:DE:B1:5C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A38C4FE5023C1F1E07A53C380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8013c55d-fa9c-367e-8221-7323a9d932ec.roa
Signing time:             Tue 17 Jun 2025 13:42:57 +0000
ROA not before:           Tue 17 Jun 2025 13:42:57 +0000
ROA not after:            Mon 15 Sep 2025 13:42:57 +0000
asID:                     7029
IP address blocks:        209.163.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:c4:fe:50:23:c1:f1:e0:7a:53:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 13:42:57 2025 GMT
            Not After : Sep 15 13:42:57 2025 GMT
        Subject: CN=5ec6a114-ebe3-4584-b3f6-445ce26ce4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:51:6c:32:07:eb:a9:38:0e:27:66:73:05:
                    de:a0:ee:09:4e:a8:ba:0c:32:7f:ff:4c:35:1c:d5:
                    13:8c:36:57:46:8b:88:de:28:53:0d:c9:6c:10:b5:
                    e3:fc:ae:61:28:3e:f2:d5:cd:e5:66:17:0f:b5:20:
                    1e:d5:d7:ea:34:4d:8a:06:2d:35:25:40:8d:18:5b:
                    b5:34:0c:32:d6:1d:ea:1c:27:11:06:7e:78:c2:9c:
                    61:d6:d2:f4:41:6c:16:90:c5:e0:1a:6f:0b:10:fe:
                    f6:50:3c:75:48:b0:c5:3a:e2:a8:fb:e5:4d:44:69:
                    33:2e:2c:9f:7e:56:54:39:0d:66:d8:31:e6:8d:52:
                    3c:93:33:bd:11:c8:02:b0:c7:b6:31:58:f8:08:3e:
                    d1:c8:5e:c5:4c:32:e4:ea:24:cf:a4:3e:73:c5:0b:
                    9e:d8:e0:12:5f:64:cb:94:f1:d0:16:87:cc:18:ff:
                    1c:c2:de:af:80:9b:4c:5b:c1:90:52:7b:19:7a:49:
                    23:2c:12:95:07:51:c4:40:6d:e0:06:f9:9a:c3:a3:
                    22:cd:6e:a0:84:d6:7e:44:4e:20:9d:1b:e5:44:87:
                    17:31:98:03:52:fe:07:d8:4a:bd:3f:e7:ef:f7:f9:
                    89:84:60:6e:11:4f:5a:8f:59:69:2a:76:40:fc:f0:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4C:74:AB:D4:C9:D8:06:1E:7B:B5:36:40:62:F9:C0:D0:DE:B1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8013c55d-fa9c-367e-8221-7323a9d932ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:bd:2e:05:67:94:32:a8:46:62:79:75:d7:a7:d8:d1:26:f3:
         51:87:1f:39:fa:9d:4b:85:61:04:31:5a:8f:e6:07:3d:7a:87:
         78:14:9e:4f:10:d2:53:a2:d2:43:f9:1d:95:1d:c0:19:c5:a6:
         a4:15:a5:72:d4:13:8a:a8:5d:d0:09:28:b0:93:a0:b8:7d:32:
         b4:9e:68:6a:c9:00:50:00:11:64:72:26:22:17:95:a2:df:bf:
         da:9e:92:5d:e8:5f:e8:e2:da:72:b8:98:be:f3:7e:6e:e9:f6:
         f3:e6:06:57:25:0a:38:6e:49:83:50:eb:90:14:53:72:b9:a0:
         8d:4b:7f:e3:91:c8:f3:66:b3:e7:11:8c:7b:9c:b4:5c:78:b6:
         63:72:af:d6:7e:f8:a0:a7:c7:25:9e:e8:29:67:9a:ec:56:f4:
         3a:c1:32:e6:da:ff:81:89:dd:f5:c2:af:2e:15:c8:f4:e0:aa:
         03:05:59:c4:c5:5d:e5:e6:5e:82:ee:2f:c2:3c:ee:be:0c:5d:
         eb:67:6b:39:82:4e:63:51:3c:85:60:fb:6a:25:09:39:0a:9e:
         d6:17:41:52:9f:4e:15:3a:dc:bb:ce:80:28:3a:ba:b6:eb:d6:
         89:34:a1:34:60:f6:57:9c:61:42:5a:2e:23:11:01:2c:78:90:
         bf:e4:81:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:18:25 2025 by rpki-client