Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa
File:                     08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa (raw, json)
Hash identifier:          Yz0Qgl2Va1wgQ0ooxiPF88zWb6DDYUHAjgfcNw89q8s=
Subject key identifier:   1D:39:05:50:3A:A2:03:ED:EA:DD:A8:18:65:0C:43:36:28:63:96:9E
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584A374AC5E56D27FBADC3C5CF00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     62651
IP address blocks:        216.131.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c5:e5:6d:27:fb:ad:c3:c5:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=7706fd5e-eda2-49ad-a997-f93f6ad23e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:d0:65:e4:aa:aa:1c:cc:24:f1:1f:a7:83:
                    e0:2d:d0:12:49:61:ce:5d:c8:de:cc:b7:82:1e:8c:
                    a5:f5:23:02:b9:2d:29:a7:22:ee:c6:3f:00:1a:80:
                    37:e8:c9:05:7a:97:dc:ed:77:73:15:47:6b:f8:39:
                    48:f2:22:1a:7d:ab:3c:ef:89:6a:56:e1:2c:56:1f:
                    85:c2:c4:3d:38:bc:9c:60:6d:d9:67:23:8d:6e:6d:
                    14:d6:4a:df:79:f7:ab:5d:ad:8e:4a:5b:f5:4f:56:
                    d4:58:00:4a:be:0b:92:c7:32:96:8a:4b:9a:8b:10:
                    47:12:6b:d4:d6:e3:58:1b:fe:26:62:b7:b3:7c:8e:
                    4c:60:45:cd:0b:d2:a3:54:19:75:c2:36:98:aa:79:
                    52:83:e1:f3:5c:24:89:0c:c2:df:6c:fa:0d:5f:f9:
                    f4:32:2a:e0:62:f2:1f:11:fd:a8:70:8d:59:d1:61:
                    33:fc:6e:3e:fc:a7:51:c9:9d:58:b8:59:dd:c3:ed:
                    95:d3:75:c4:ea:ce:91:ad:1b:5e:f0:13:89:36:9f:
                    3c:46:23:fa:39:34:db:3c:2e:f6:c9:f5:10:13:5d:
                    89:f5:24:da:70:55:6e:6d:6c:e9:33:76:a4:ee:e0:
                    7f:a6:56:bb:e4:95:9c:68:97:e3:9d:fd:45:c9:51:
                    1b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:39:05:50:3A:A2:03:ED:EA:DD:A8:18:65:0C:43:36:28:63:96:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:13:0f:84:35:39:93:5c:0a:22:5d:fb:9f:38:2a:ef:44:45:
         ac:4c:c1:65:83:44:26:bf:8a:44:d7:5b:f4:ef:f6:cd:08:d4:
         ee:f5:f3:46:8b:04:6a:a6:77:5f:e2:ff:a3:61:ae:a8:e4:92:
         46:95:36:f7:82:d8:89:b2:76:9e:2e:06:be:5b:e2:b8:21:50:
         a4:8c:4d:dc:b6:b8:d2:67:fe:1a:c4:8a:62:31:3a:87:64:10:
         64:a1:3f:3f:0d:f6:61:74:f3:3c:53:8b:fb:84:34:0c:f4:bb:
         95:03:b6:cb:2a:5d:b6:52:45:b4:fb:e8:42:22:68:1e:d9:4e:
         b7:51:f6:f0:66:aa:da:a1:7a:e6:87:2b:c5:c0:9d:5a:3c:13:
         ec:21:d8:86:6d:30:fb:c6:86:93:c5:21:b0:62:8b:c0:37:b1:
         5a:d5:54:22:1f:c2:96:31:77:4d:8f:c9:f5:83:18:67:1a:8e:
         b6:b2:91:25:bc:ff:53:b0:49:a7:f7:a0:b4:ae:c0:fb:4e:46:
         d3:93:97:a6:cb:dd:5c:24:92:8b:1d:59:c3:05:4b:15:15:b5:
         b1:09:7e:c5:74:b9:01:d7:9c:c2:93:5a:a8:15:76:e1:af:99:
         5f:59:60:c0:3a:17:6a:e6:d3:df:f9:f5:d4:51:70:12:87:89:
         ee:ea:01:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsXlbSf7rcPFzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
NzcwNmZkNWUtZWRhMi00OWFkLWE5OTctZjkzZjZhZDIzZTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+vQZeSqqhzMJPEfp4PgLdASSWHOXcjezLeC
Hoyl9SMCuS0ppyLuxj8AGoA36MkFepfc7XdzFUdr+DlI8iIafas874lqVuEsVh+F
wsQ9OLycYG3ZZyONbm0U1krfeferXa2OSlv1T1bUWABKvguSxzKWikuaixBHEmvU
1uNYG/4mYrezfI5MYEXNC9KjVBl1wjaYqnlSg+HzXCSJDMLfbPoNX/n0MirgYvIf
Ef2ocI1Z0WEz/G4+/KdRyZ1YuFndw+2V03XE6s6RrRte8BOJNp88RiP6OTTbPC72
yfUQE12J9STacFVubWzpM3ak7uB/pla75JWcaJfjnf1FyVEblwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB05BVA6ogPt6t2oGGUMQzYoY5aeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDhlYmY0ODktY2UxNi0z
ZjBlLWI2OWQtN2RhYjFmOWE5YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQTD4Q1OZNcCiJd+584Ku9ERaxMwWWDRCa/ikTXW/Tv9s0I1O7180aL
BGqmd1/i/6NhrqjkkkaVNveC2Imydp4uBr5b4rghUKSMTdy2uNJn/hrEimIxOodk
EGShPz8N9mF08zxTi/uENAz0u5UDtssqXbZSRbT76EIiaB7ZTrdR9vBmqtqheuaH
K8XAnVo8E+wh2IZtMPvGhpPFIbBii8A3sVrVVCIfwpYxd02PyfWDGGcajraykSW8
/1OwSaf3oLSuwPtORtOTl6bL3VwkkosdWcMFSxUVtbEJfsV0uQHXnMKTWqgVduGv
mV9ZYMA6F2rm09/59dRRcBKHie7qAY4=
-----END CERTIFICATE-----
Generated at Wed Jul 23 08:16:07 2025 by rpki-client