Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b3c748f0-e0b4-3dd9-8723-0ff1c012c4e5.roa
File:                     b3c748f0-e0b4-3dd9-8723-0ff1c012c4e5.roa (raw, json)
Hash identifier:          OOPRRDBOIDksY6TM6Gb89Jybos2ZIHnfEfL2877HW9U=
Subject key identifier:   BB:32:AF:41:18:57:9E:BC:E6:4E:D7:03:C7:F6:04:16:D9:2C:A3:52
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584AA42B8AAFBD3A233BB8CF21C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b3c748f0-e0b4-3dd9-8723-0ff1c012c4e5.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16417
IP address blocks:        216.71.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8a:af:bd:3a:23:3b:b8:cf:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=6e65d32b-8e85-4af8-be6a-0bdeea836ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8b:98:88:30:79:21:ab:b6:11:7d:df:7b:34:
                    6e:c6:57:fc:c7:95:e4:2a:dc:fd:9a:55:d2:58:35:
                    83:f2:23:97:71:8d:4f:40:cb:2d:af:fa:7e:38:22:
                    bb:b9:c8:e7:c8:67:4c:27:dc:a2:bd:9e:0c:f4:57:
                    11:3a:68:3d:68:17:a9:a3:68:13:27:d9:2b:44:f1:
                    4f:f1:2c:07:ed:8c:98:9d:fd:a4:18:98:4c:9a:a8:
                    85:50:73:62:a1:3d:da:f7:26:80:45:24:4b:7e:d6:
                    e1:9a:d0:23:f3:47:5a:52:a9:04:f4:60:01:20:68:
                    4f:7a:5e:f3:ef:2b:33:b3:bb:e2:fe:71:3f:00:f6:
                    35:96:6f:cd:50:2d:0c:cc:b8:f5:03:cc:f2:55:25:
                    62:28:c0:f5:bd:f2:0a:7c:35:14:c9:16:6e:e7:a0:
                    56:e1:59:11:e3:bb:fd:f7:71:a2:38:1b:56:c3:ee:
                    7b:67:7e:29:80:88:ea:c7:ca:d0:18:a9:b3:34:9e:
                    44:1a:c6:97:df:f3:c6:49:43:58:74:a8:0e:86:19:
                    7a:6b:07:27:d7:fe:1c:d3:61:88:84:9c:1a:8b:11:
                    94:ab:52:6d:16:18:97:cf:27:cd:92:b0:ef:7e:5e:
                    2a:18:81:ae:f4:40:3c:df:3a:29:17:9c:d3:19:29:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:32:AF:41:18:57:9E:BC:E6:4E:D7:03:C7:F6:04:16:D9:2C:A3:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b3c748f0-e0b4-3dd9-8723-0ff1c012c4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:56:54:57:13:a9:a1:88:df:5d:2b:cd:f4:3c:0f:da:7f:
         22:61:b6:30:bf:3d:70:cd:f8:52:3a:e4:13:0b:04:28:dd:84:
         8d:e7:2e:d4:05:51:4c:69:1d:c3:48:a1:d0:11:6a:9c:30:dd:
         c1:3c:fe:cc:70:ef:cb:49:7a:3b:e0:d4:b0:79:e6:14:5d:bf:
         bb:13:a7:75:da:42:d4:c9:47:c6:71:7f:aa:71:f1:69:10:91:
         3e:10:7a:ea:55:7b:eb:2b:f8:b2:5c:95:0f:66:4c:91:67:28:
         0b:54:cf:39:59:74:7a:1b:48:8e:d3:25:ee:c8:37:a3:54:59:
         58:09:a4:8e:05:38:40:97:69:25:ad:a9:d4:57:5e:27:0d:53:
         8c:3e:72:e3:b2:37:cc:26:2e:af:07:4c:5a:47:bf:ed:6b:61:
         e4:6e:c4:6a:55:74:f8:4f:27:6f:5c:21:ef:76:09:23:4d:c3:
         10:56:72:5c:4d:13:cc:7b:41:90:04:c0:20:68:3a:02:a5:e5:
         69:ad:a1:d2:c5:9b:23:a4:26:5a:61:d9:c1:62:c2:43:44:9e:
         3d:9b:d1:c2:2b:b7:e3:3d:29:9d:3f:44:0b:c4:1e:02:87:7f:
         90:cd:cb:96:11:f7:03:58:e9:9a:72:4d:55:a2:29:86:bb:23:
         92:08:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:41 2025 by rpki-client