Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa
File:                     863f4acb-612c-3dc9-8399-3195b4bdd44b.roa (raw, json)
Hash identifier:          hRLyh5uMYvvOQAjY+OtfgjlrsxGZVOVc0OEq3vZZ75w=
Subject key identifier:   FE:16:2F:15:9C:03:07:F4:C0:8D:58:39:DC:2E:73:D2:AD:AB:97:C5
Certificate issuer:       /CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b
Certificate serial:       010D0C9F43285849CE9A43B4D1F044AAF7648800
Authority key identifier: 69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        199.250.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:43:b4:d1:f0:44:aa:f7:64:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=2c9059d7-dfb6-48dd-8839-56bb051a743b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:53:18:a3:57:55:c7:74:05:11:58:76:40:69:
                    73:60:f0:b8:58:de:f5:2e:7c:03:de:88:58:17:01:
                    21:b6:01:01:b9:74:21:20:65:97:84:30:97:bb:4f:
                    2a:75:a1:58:69:50:bf:a4:18:6a:fc:ca:21:27:ec:
                    85:8c:a1:93:f1:fc:0f:7e:02:e6:4c:50:5a:a2:d1:
                    0d:e0:12:5b:41:b2:88:5f:4a:6f:61:0c:59:2c:3a:
                    05:82:c1:86:6c:13:8f:e6:6c:22:1f:d4:79:4c:71:
                    d1:0a:53:fb:8b:6f:28:5d:17:4d:4c:f5:2d:45:3b:
                    e6:fe:11:d3:ab:96:05:29:a0:26:6d:b4:2e:a5:31:
                    62:a5:92:cd:ce:0f:df:36:2e:52:18:39:e7:b7:a8:
                    a6:cb:99:45:93:0c:fe:c9:7e:21:23:d3:1f:ba:6e:
                    74:e4:ad:eb:c0:00:08:6b:28:5c:80:7d:1e:0e:34:
                    a0:e7:fc:4a:2e:08:ff:2c:4d:65:1b:f8:0d:78:7b:
                    a4:bf:0d:d4:b8:2a:9b:72:96:a1:36:4e:c0:63:4e:
                    7c:05:b7:90:43:9d:ac:af:66:23:b1:ec:da:32:bb:
                    fb:43:75:b0:4e:9f:54:b5:2e:a3:84:ca:b3:82:8c:
                    2e:ca:eb:3d:87:bb:a9:a7:61:72:fd:db:6a:43:4a:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:16:2F:15:9C:03:07:F4:C0:8D:58:39:DC:2E:73:D2:AD:AB:97:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:5e:1b:d8:e4:5e:85:80:5e:69:5d:5c:f4:03:d9:2f:92:c1:
         5b:fb:29:58:dd:21:77:a8:b1:2b:4a:e1:18:85:a6:6c:a1:c7:
         de:58:89:b7:9f:53:5f:6e:6c:0d:15:ba:54:0f:2a:33:05:8c:
         df:30:bd:56:19:b6:19:70:0e:f6:81:f4:bf:89:0b:50:f7:45:
         9a:1f:6c:ff:78:6d:8a:29:79:63:e7:33:ec:5b:5d:59:66:ed:
         7c:df:1a:42:c0:b4:f2:04:8e:e4:64:3b:ce:b4:6e:3a:76:5f:
         c4:1b:02:7a:52:55:2d:a6:38:82:8b:07:da:f6:cb:a6:46:33:
         7c:a5:e1:5d:a4:72:85:f6:4e:a7:02:36:64:0c:4e:c6:5a:05:
         b5:9e:b8:44:a7:ba:a0:1f:3c:eb:c3:4a:46:68:d1:0c:51:d7:
         ab:bb:81:9a:56:84:92:e5:9e:62:c8:cb:e5:6c:21:3c:3c:18:
         cf:a2:ee:99:cf:e7:a3:11:5f:d4:09:c0:28:06:f9:85:01:9a:
         92:3f:8b:95:06:f1:36:86:ca:a0:27:34:bd:24:03:0c:ae:e0:
         e1:2a:a0:63:ca:9c:a7:73:b1:56:94:de:d7:7b:3c:22:5c:53:
         90:7c:3f:e3:9f:54:99:c6:e1:c6:22:93:e4:cc:c9:bd:74:f2:
         d0:72:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:21:09 2025 by rpki-client