Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5bd40211-6602-3500-b87b-712e69e045fe.roa
File:                     5bd40211-6602-3500-b87b-712e69e045fe.roa (raw, json)
Hash identifier:          KWVk5Q1ZKlv082UXtLGcCeOMmdf4tyWRF2DgMcdvNR0=
Subject key identifier:   56:F7:CC:32:9F:9A:88:72:B9:18:8F:7E:D5:D7:94:BA:B4:85:A7:55
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584A3DAA5665C72E70CCC4F74440
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5bd40211-6602-3500-b87b-712e69e045fe.roa
Signing time:             Thu 19 Jun 2025 07:48:17 +0000
ROA not before:           Thu 19 Jun 2025 07:48:17 +0000
ROA not after:            Wed 17 Sep 2025 07:48:17 +0000
asID:                     62610
IP address blocks:        216.133.144.0/24 maxlen: 24
                          216.133.154.0/24 maxlen: 24
                          216.133.155.0/24 maxlen: 24
                          216.133.157.0/24 maxlen: 24
                          216.133.158.0/24 maxlen: 24
                          216.133.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:aa:56:65:c7:2e:70:cc:c4:f7:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 19 07:48:17 2025 GMT
            Not After : Sep 17 07:48:17 2025 GMT
        Subject: CN=34088102-4ec0-4d26-83e9-213fa74cafd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c5:03:9f:66:a4:d8:68:51:7f:b0:96:4b:c9:
                    95:73:c4:2b:8c:f3:47:a9:34:c2:71:79:59:ea:02:
                    eb:2d:d3:4c:c2:f6:81:66:1b:82:25:9e:8c:89:07:
                    88:8f:fc:d1:0f:5c:5e:b8:05:b4:ea:c2:4b:2c:94:
                    9b:da:3c:13:4f:ac:db:85:73:0f:7d:a4:52:f1:dd:
                    dc:7c:68:60:fb:ba:a4:2f:e2:e4:f2:6f:0b:33:98:
                    04:48:be:cc:53:25:5a:0a:4e:88:4f:9e:8c:45:71:
                    f0:b0:6f:4c:b5:d8:4a:42:4a:af:a4:cc:67:a4:46:
                    bc:e5:f0:b9:ee:6f:b5:11:15:5c:72:6b:a0:aa:e1:
                    95:80:44:2f:2e:9c:33:2a:57:da:56:86:d0:a0:69:
                    f0:e9:88:b3:ea:f8:58:c3:8e:22:37:45:71:72:e1:
                    2c:37:20:10:5b:fe:b7:ee:37:f1:a6:2d:7d:1e:3c:
                    e4:c8:96:32:99:6a:e1:d1:5b:8e:f4:38:7b:12:29:
                    25:91:8c:82:2f:13:6a:ae:2f:8b:db:90:aa:69:59:
                    5e:d7:c6:9c:eb:66:2e:ef:55:b0:3b:6e:84:1b:84:
                    73:ae:53:e9:8b:6e:76:70:58:a0:d4:d2:8c:05:38:
                    64:01:69:c7:50:cb:c2:b8:32:a7:a8:e2:b4:64:33:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F7:CC:32:9F:9A:88:72:B9:18:8F:7E:D5:D7:94:BA:B4:85:A7:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5bd40211-6602-3500-b87b-712e69e045fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.133.144.0/24
                  216.133.154.0/23
                  216.133.157.0-216.133.159.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:b4:08:07:ff:f9:37:67:0d:92:33:50:8c:f7:0a:db:ce:6b:
         0e:b7:a9:ed:b9:0b:c6:22:4f:c5:d6:89:36:36:0c:4b:e1:f9:
         32:c8:c1:68:4f:5a:96:3f:d3:c2:7d:17:1a:78:2d:fe:a2:43:
         44:e4:df:fb:72:a9:e3:4b:89:38:90:9d:c4:a6:af:ab:fd:00:
         77:f8:98:6d:84:cb:55:10:30:76:d1:d6:5b:83:4c:ea:68:cd:
         5a:ec:2c:5a:d2:1d:2f:52:cb:b2:90:56:ae:7d:9e:8e:1c:64:
         9f:06:ad:77:a4:76:dc:f8:66:16:e8:f8:d6:a7:23:63:3e:cc:
         3d:36:45:b8:93:c5:f3:30:9a:25:e9:e0:fa:6b:3b:cb:14:9d:
         03:44:1c:2a:c5:bd:8d:73:f7:8c:38:2e:1f:97:af:3d:16:2f:
         60:d0:ee:01:6b:0f:28:25:22:14:4c:b9:2c:20:c3:11:ee:84:
         f7:9f:ef:97:a7:8f:c5:2c:86:fb:ef:fd:c6:fc:8c:dd:6d:9f:
         c9:48:30:54:10:1d:db:aa:1a:90:2b:09:01:af:c4:61:ae:8c:
         7b:35:95:25:6b:53:6f:2b:4e:f1:74:f4:d9:24:cf:33:fc:49:
         1b:37:90:e4:5c:41:e1:a3:68:b3:4f:73:49:1b:b2:1a:bd:e0:
         9d:cb:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:47:02 2025 by rpki-client