Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16823d31-8bdb-3ac9-bd7c-e218b6d79ad2.roa
File:                     16823d31-8bdb-3ac9-bd7c-e218b6d79ad2.roa (raw, json)
Hash identifier:          fu4LAcLK6NbvN07XM6Zkn+7njsP+Zz+9viCvTz0+bw0=
Subject key identifier:   90:0E:09:3F:D9:4E:2F:4B:E0:78:1E:AD:A3:32:FC:53:A5:41:2D:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD7B2C9C4349F805199A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16823d31-8bdb-3ac9-bd7c-e218b6d79ad2.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        76.156.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:7b:2c:9c:43:49:f8:05:19:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=fc86fc6a-62b6-4955-b8c4-a68780047984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:01:36:e4:61:a2:75:f9:9f:fc:44:b9:0d:
                    b6:d1:03:25:2c:0a:03:ab:0e:ff:92:7a:9d:db:27:
                    19:ed:05:67:3c:fb:03:b6:05:22:7c:66:a4:be:86:
                    c6:d1:f8:57:48:c1:8a:3b:6f:74:69:39:dc:f5:c1:
                    ab:ea:bb:7d:93:5c:20:00:f3:0d:84:35:94:f4:c2:
                    8f:0b:70:0c:60:0e:e7:5e:c6:f8:8c:6c:ed:c3:69:
                    66:b4:d7:74:cf:56:0c:ef:98:67:f8:90:9a:b6:c4:
                    e6:c6:9c:a0:1e:f2:c0:5e:34:6e:38:a9:61:81:0a:
                    7b:0f:4b:f4:20:89:9c:e8:ed:44:5f:38:20:02:12:
                    56:95:a1:08:74:e9:94:59:7a:e9:27:5a:fc:92:7d:
                    40:ee:fe:10:20:66:b3:98:1a:9c:13:d5:14:3e:3a:
                    28:a9:81:30:47:c4:4e:44:43:88:c1:eb:2e:64:87:
                    8d:74:28:12:c3:06:97:62:17:50:0f:51:2c:eb:5e:
                    84:0d:44:b9:90:c3:b7:36:6c:37:54:4c:97:48:c9:
                    cd:ec:44:c3:e0:59:c3:f7:90:cf:99:d4:56:5c:93:
                    13:0a:40:23:7b:78:a7:b0:94:68:db:27:0f:31:a1:
                    33:8f:f0:d5:93:e0:9e:de:2a:b7:be:c4:01:98:91:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0E:09:3F:D9:4E:2F:4B:E0:78:1E:AD:A3:32:FC:53:A5:41:2D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16823d31-8bdb-3ac9-bd7c-e218b6d79ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.156.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:78:7d:4e:b2:23:f8:c3:4b:bd:92:c4:ae:3e:8c:ff:71:18:
         18:ac:dd:a9:9f:ee:de:dd:07:1a:b0:3d:41:f5:fa:2d:14:be:
         5e:cf:c3:e3:30:05:89:ff:90:d4:40:a4:d9:e0:21:e9:53:ee:
         f0:c6:ce:6d:7d:b2:31:af:2c:ae:a0:8c:07:29:8a:8a:21:3d:
         59:f7:4a:89:35:9d:ac:e3:50:5e:d7:7c:93:98:7d:8e:a2:f2:
         99:5e:57:f8:e7:53:4e:d5:68:24:16:4d:ba:90:e1:f4:3a:b7:
         06:e4:6d:d5:e0:87:be:ae:1d:2c:39:3e:50:3f:10:b3:6d:70:
         56:42:58:bc:42:05:c5:b8:98:d5:7a:8e:46:3d:b6:59:c6:7c:
         0f:ff:7d:2b:78:65:88:35:af:b7:30:8c:96:76:54:a6:44:b1:
         0a:21:95:df:95:96:03:b3:6d:6a:ce:8f:92:f4:f8:13:5e:73:
         b7:01:2c:ee:ae:89:f2:c9:90:b3:13:84:ff:48:3c:03:34:05:
         e2:52:2b:e8:9a:49:82:9e:fc:ba:f3:90:4e:1f:71:fc:fe:4e:
         23:77:52:4e:21:fd:b0:03:65:28:3b:eb:81:25:ce:63:92:a9:
         56:5a:a4:86:a7:40:07:98:35:11:d4:b5:8f:f2:be:c7:3a:40:
         7f:3a:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:59:31 2025 by rpki-client