Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa
File:                     ab708923-0613-3a2c-b170-cadae0fe2f49.roa (raw, json)
Hash identifier:          pY5tM8TwyF2xri0HvWOg4f2esByeU5LSiLq3AInAhgM=
Subject key identifier:   58:09:3E:0E:17:05:39:E1:90:4B:85:DF:43:27:98:78:7D:EE:88:10
Certificate issuer:       /CN=91c894d6-b991-4966-bec4-7c58dac779b5
Certificate serial:       010D0C9F43285849CBCF8D60914502B6735D9410
Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        199.87.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8d:60:91:45:02:b6:73:5d:94:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=124e241d-9742-4bed-b09d-a374dc8ac0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:c8:18:c7:d4:06:4a:42:53:80:e3:45:f4:
                    ca:72:1a:68:c1:74:49:c9:f0:90:47:ce:bf:fc:00:
                    01:c2:8c:46:eb:65:69:6d:87:ca:42:78:6e:ae:e2:
                    10:a2:de:a7:05:db:97:05:ad:9a:33:62:79:b7:a4:
                    27:2d:a3:b4:98:01:b3:8d:36:58:6c:fb:bd:42:1d:
                    5e:e3:96:5d:63:c2:a9:b2:4e:a0:70:b4:63:58:06:
                    e7:75:2a:9b:f9:2d:55:f8:5b:05:29:84:c9:29:b1:
                    aa:c0:1e:7d:e5:12:59:41:51:49:b0:c4:f8:4e:e2:
                    d0:24:c7:d1:fa:5a:b8:e1:9b:fc:54:6e:15:99:e5:
                    db:58:6b:38:89:16:80:9b:e3:f0:78:0d:db:b7:5e:
                    8a:a2:83:86:ee:a5:d2:18:54:ce:4b:a9:cb:e1:e9:
                    46:f3:19:8f:24:6d:dd:60:c3:c0:2a:a1:1d:96:da:
                    16:50:f6:0e:33:01:eb:c2:00:0f:56:dd:2e:bf:07:
                    d1:76:8c:b3:3d:5d:26:a7:c3:69:a1:96:51:1f:96:
                    2d:49:1b:92:b1:cb:25:71:20:d8:3b:6f:ac:1e:5d:
                    e3:2d:ab:c2:23:8d:d1:66:3c:27:cc:36:64:1e:86:
                    80:72:00:52:9d:97:41:aa:db:ec:ad:b9:f1:bb:cc:
                    5c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:09:3E:0E:17:05:39:E1:90:4B:85:DF:43:27:98:78:7D:EE:88:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl

            X509v3 Authority Key Identifier:
                keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:95:fa:15:90:64:71:db:16:55:9b:5a:ee:03:be:e1:ea:02:
         27:19:27:88:04:bb:22:b2:b4:7e:64:ae:6d:91:5f:51:6f:98:
         7b:ea:7b:06:50:52:eb:1f:05:0b:5f:c7:0f:9a:c7:8b:cf:d9:
         fb:ea:81:7d:0f:9d:a7:1b:ff:80:73:4f:af:dc:0f:72:31:f8:
         c5:e5:92:11:05:a3:89:6a:ce:31:15:6e:e5:25:f8:2d:de:0e:
         7d:2d:98:d5:96:9f:dd:77:b1:24:99:49:59:4c:ab:18:b4:9c:
         af:2d:32:b7:38:86:7a:cb:bb:d6:25:be:1d:67:73:86:80:97:
         cb:03:be:fb:e4:07:e0:06:2b:c7:ad:1a:17:69:ff:aa:e3:23:
         1b:2d:ec:f3:11:d1:ef:48:ee:04:b4:e7:1c:03:cc:ff:71:5c:
         8d:60:c0:72:f5:b1:9a:08:cc:b7:c0:f6:35:f3:9b:65:b8:a6:
         9b:09:9d:73:70:7b:82:6f:b1:2d:7e:36:59:21:bb:84:e8:d3:
         fd:a2:34:b1:0b:ed:30:a8:d7:aa:7c:fa:72:8d:75:69:86:78:
         d9:3d:8e:f3:97:54:aa:db:c6:02:94:10:86:3f:91:39:88:4c:
         dd:e4:8d:ad:99:e0:95:b1:e6:72:12:23:7b:c6:a0:95:cf:b3:
         11:66:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:14:15 2025 by rpki-client