Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/5a81912e-b5f7-37d2-8547-45679ec607c1.roa
File:                     5a81912e-b5f7-37d2-8547-45679ec607c1.roa (raw, json)
Hash identifier:          phH4zkDunsyWnHpoIoCNYAadACmqkoaJI+ouUvVyYo0=
Subject key identifier:   D0:93:46:37:8F:C2:F8:75:4B:DF:F9:A1:50:51:F6:6D:A3:4B:01:94
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F432858499829CE4635D5553877602E00
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/5a81912e-b5f7-37d2-8547-45679ec607c1.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     11273
IP address blocks:        167.16.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:ce:46:35:d5:55:38:77:60:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=aecae3a9-e0f3-4e4c-a50c-9b9122c7d6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a6:bc:ed:7e:83:66:5c:e2:83:43:29:be:50:
                    60:77:e1:6e:00:ce:4a:a6:8f:b7:33:f4:8e:b9:64:
                    8a:58:ad:95:56:5f:db:af:cc:27:64:f1:4b:81:8a:
                    ea:95:f5:cf:45:41:3c:16:36:54:69:19:2f:81:6a:
                    52:24:3c:e2:d0:f3:d4:0f:d9:b1:2b:b9:98:d6:b2:
                    31:dc:38:49:11:87:4f:52:6a:fa:cb:19:fd:e6:f7:
                    b6:a7:13:fa:07:c3:bf:2c:e4:ed:c7:a3:b5:5c:37:
                    b6:b7:6e:be:89:10:64:04:45:3c:dc:e2:10:aa:81:
                    81:0a:70:9d:c2:c0:3b:84:08:cc:a5:53:f8:97:de:
                    6a:76:dd:c3:6c:90:5d:60:77:9f:52:cc:97:a7:96:
                    56:b5:c5:5f:99:cd:18:bb:35:25:4a:92:f4:73:77:
                    68:9b:d2:02:91:a9:09:b4:38:db:d6:de:fe:f5:42:
                    b0:36:2c:c4:0d:82:f2:61:7f:ec:34:19:dc:d6:23:
                    b5:24:66:19:be:80:e2:c8:93:11:7f:da:d3:41:d2:
                    1d:f6:b2:e6:a4:a5:d9:47:46:d6:ab:09:fb:4c:7b:
                    34:6e:84:69:b7:3d:ae:56:ad:9c:4c:7f:db:67:e4:
                    60:af:4a:16:8a:61:6e:74:88:7b:a8:73:a4:10:5c:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:93:46:37:8F:C2:F8:75:4B:DF:F9:A1:50:51:F6:6D:A3:4B:01:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/5a81912e-b5f7-37d2-8547-45679ec607c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:10:ab:fb:29:c7:c5:55:b7:4e:6e:09:68:de:cc:ea:7b:00:
         2e:ad:cc:e4:64:07:0d:93:16:e9:05:80:fc:9c:86:a7:df:06:
         bf:d2:d5:43:0a:15:ed:c2:b0:6a:26:7f:cc:97:9a:5a:f9:cc:
         0c:88:6f:f8:20:5c:a4:53:78:f7:66:de:80:e4:6a:f8:08:2d:
         6b:0c:15:c2:4d:ff:ba:78:47:ee:21:2e:a7:9d:c8:3d:ff:dc:
         12:a5:51:09:a1:f5:ef:5f:6f:56:b6:7e:bc:7d:65:8c:68:55:
         f5:5b:82:00:e3:8c:7b:b0:b8:eb:45:33:40:29:f3:cf:3d:37:
         2f:40:7f:cd:81:72:89:a6:47:a6:2e:aa:16:26:4a:1b:1b:d5:
         e3:4c:be:cd:1a:e2:d3:b2:dc:07:e2:f2:b6:24:bf:1c:a0:a2:
         55:fe:23:bf:d1:24:a4:38:b0:9b:6a:cb:18:5e:0c:df:4b:bb:
         97:9a:7f:d4:55:6b:f1:2e:13:38:6d:65:83:1b:27:a0:a3:26:
         a6:29:4e:21:d2:4b:ba:a8:29:48:d6:07:81:0f:4f:eb:64:da:
         d0:62:33:cf:7c:1e:30:1d:96:dd:5c:d1:12:56:ae:88:cd:19:
         19:b7:62:e4:72:fa:0b:5d:0e:e6:6f:11:04:20:df:2f:df:5b:
         8d:85:45:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:29:27 2025 by rpki-client