Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa
File:                     7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa (raw, json)
Hash identifier:          N/dVQFNiZZ5NA48ojpZnVPAEuMITfG8jj06uG+IurI4=
Subject key identifier:   30:84:3E:69:FF:B3:67:A6:15:F2:37:AA:DA:7A:45:FD:CB:F5:6C:0B
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285849FE0FEC4A79710889FE64AD00
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        85.113.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:ec:4a:79:71:08:89:fe:64:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=59bd558a-ecae-4c60-81a8-dd1709ebf995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:59:e9:96:6c:ad:fd:42:15:e4:3d:35:f5:46:
                    48:11:95:82:a1:c8:24:b8:f4:e6:24:75:70:7f:4c:
                    a9:6f:fb:38:4c:66:bb:19:22:4b:42:d0:e7:67:cc:
                    b4:ef:53:ba:cd:e2:3b:b2:2d:3e:7c:67:66:6e:2f:
                    64:70:d8:56:7c:6c:06:58:f9:a5:1a:28:4d:71:95:
                    6d:20:aa:70:dc:36:99:81:12:11:c7:5a:54:ac:98:
                    98:77:41:09:0f:cb:f9:07:a1:ca:e7:bd:4c:98:18:
                    66:41:44:7a:cb:e9:cd:ae:b8:cf:89:9e:4c:15:99:
                    20:ab:d8:c6:c8:c4:38:2d:36:ac:f9:76:8d:07:96:
                    57:c2:da:4b:76:a7:cf:7d:69:96:ed:c8:42:d4:35:
                    09:db:63:87:fc:1d:79:f5:1c:a4:06:59:63:fb:0a:
                    7a:ba:22:9a:1d:e3:97:93:54:ca:d6:6d:8f:44:65:
                    4f:06:69:69:34:6b:91:03:45:20:09:bc:ff:61:5c:
                    95:81:11:b1:ad:04:d1:fa:4d:e4:c7:14:39:fd:de:
                    b9:98:82:8b:47:00:cf:03:a4:ea:9d:48:5f:bf:10:
                    f0:d4:e2:25:ad:4f:88:05:44:79:9e:34:b6:35:2c:
                    bc:34:df:50:48:3b:5a:bf:b8:e0:49:bf:f9:33:19:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:84:3E:69:FF:B3:67:A6:15:F2:37:AA:DA:7A:45:FD:CB:F5:6C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:82:71:62:69:54:30:81:1b:44:2e:6b:87:87:cc:a0:da:5c:
         90:45:93:e1:5b:a3:64:11:90:33:fc:34:f8:84:c7:bf:db:ba:
         2a:68:28:52:dc:39:8c:21:f7:17:33:36:9e:7d:db:c5:6b:6e:
         12:0f:37:e4:67:7b:fd:da:80:cc:80:f3:e4:13:0a:66:eb:56:
         88:ff:81:53:ef:1a:14:db:7e:31:3a:d1:ed:dc:ec:27:3a:ff:
         1d:8e:d3:b6:ed:a9:40:20:2d:a1:6c:41:64:91:f9:b5:c5:3b:
         a4:ff:80:17:9e:6c:fc:a7:42:3c:b6:02:cd:e5:8c:b9:60:36:
         cb:3b:72:e5:10:d4:20:61:74:5a:23:4e:77:5d:71:e8:5f:43:
         b0:8c:00:8e:52:d5:42:ea:83:df:94:99:21:71:ac:48:e4:a0:
         9a:2e:a3:1b:bb:df:9a:89:35:7f:1e:f7:e5:96:ec:7a:a9:aa:
         51:ff:24:87:2a:5c:b9:41:55:04:0c:9f:76:60:04:98:cf:6c:
         b6:4f:8a:c3:4c:c6:83:33:c1:f6:a2:7a:53:05:98:de:04:19:
         03:fc:8e:27:44:b8:73:ac:00:50:0f:76:ce:a4:df:19:b2:c5:
         db:54:d9:43:c7:b9:1d:8f:b8:99:15:96:d5:c7:00:9d:9f:b5:
         57:a8:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:00:59 2025 by rpki-client