Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa
File:                     d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa (raw, json)
Hash identifier:          GUCoLM/TfvQXQa1p2jdfNGzJIf/nfZlfifihIhsTx3w=
Subject key identifier:   37:FA:EC:B0:02:49:04:A5:6B:B0:32:5B:4B:16:0C:DB:D7:4D:C0:16
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285849C4D4C855B91C41EA369F2608
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16417
IP address blocks:        216.71.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c8:55:b9:1c:41:ea:36:9f:26:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=71e2ac5b-6c07-4cca-9351-5e709fb44e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:72:27:d7:ce:28:d8:9b:5a:6a:85:d9:39:64:
                    6f:8d:db:4a:7e:4f:72:52:ff:83:bd:db:6c:29:13:
                    47:31:bf:5e:eb:8b:af:be:cd:c3:71:a3:c2:35:d4:
                    49:eb:48:b8:f4:2b:cb:78:97:a5:a6:81:74:46:12:
                    7d:07:10:5e:06:9b:32:ab:ae:9c:20:89:f7:d1:41:
                    23:e5:8c:f4:f5:5e:a8:2b:66:f1:f3:2b:df:bd:46:
                    7f:54:63:3e:93:a4:20:dd:8b:0e:7a:15:00:17:20:
                    67:ba:6f:bd:64:8e:e3:2f:46:b6:1d:12:5e:da:98:
                    0d:ea:d8:95:96:61:1a:c6:7a:a0:f6:c2:9a:60:ff:
                    a0:e8:2a:c5:50:84:02:8d:e3:99:59:bd:88:38:13:
                    c1:29:ce:7a:1e:42:c4:71:2d:25:e2:a9:72:a8:f0:
                    9d:79:58:62:28:2c:fa:1d:0a:77:80:13:39:ed:47:
                    45:c7:1c:0f:f2:c5:eb:95:94:93:9d:0f:31:c7:cd:
                    f2:65:ee:76:83:56:c9:73:8a:8a:5b:16:22:5a:42:
                    ab:77:63:f3:c3:b7:12:82:74:78:1d:4d:cf:a2:af:
                    a1:4b:d1:fe:c2:d2:32:87:da:08:ee:67:bc:2b:0e:
                    e9:ea:77:ce:0b:c4:2c:bf:15:e1:bc:c4:b5:46:dc:
                    10:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FA:EC:B0:02:49:04:A5:6B:B0:32:5B:4B:16:0C:DB:D7:4D:C0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ef:87:6d:e0:7e:f5:c1:69:1a:1b:9c:1d:91:26:d6:12:7f:
         02:ab:7d:18:fb:c5:f2:72:7e:f0:4b:57:24:51:82:1c:1a:f4:
         7c:27:eb:14:e3:a8:56:b6:e2:53:08:ff:41:3f:17:c0:e4:61:
         5f:95:3c:17:14:40:b2:dd:8a:78:48:20:c8:17:af:fa:1f:52:
         63:e4:4f:a4:b2:ef:eb:9b:10:8d:23:e9:96:88:60:66:bb:c5:
         4b:cd:12:5d:3a:2f:d8:5b:73:43:64:7e:aa:62:15:9f:ed:0f:
         b0:46:48:46:09:8c:fa:6b:f1:ae:61:11:8d:33:4b:cd:a6:15:
         e2:71:0e:71:45:5d:f2:d4:46:35:ba:e0:21:86:db:50:b9:48:
         7a:f4:a1:49:08:4b:11:af:7b:65:df:18:11:c1:2e:d6:e4:e5:
         6e:a4:fb:de:b8:f8:ec:de:c3:59:b9:fa:24:ac:93:0b:98:e5:
         69:f3:7a:19:1f:2e:1f:71:33:29:e6:9a:b8:b6:6b:bb:7e:0a:
         ed:31:90:5a:8e:82:6b:7b:82:0b:a3:84:a0:64:1e:b9:07:9c:
         76:6e:50:f7:44:e5:f9:ac:82:64:eb:fc:97:7a:96:8d:e6:7a:
         a6:4d:55:6f:92:f6:90:f8:af:bf:7c:c0:42:2d:4e:d2:ae:47:
         55:8d:c8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:08:17 2025 by rpki-client