Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa
File:                     7750e7a6-bfbf-32e2-98ca-db25150e8279.roa (raw, json)
Hash identifier:          Ll1OTG6jG9TsMIlusDkYpoGwPbrrnBmDRwm+tYRTUow=
Subject key identifier:   6D:2E:9C:61:34:9A:95:28:78:0F:DC:E7:AE:4E:45:E0:CE:88:25:A7
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584A374ACC393E2F66F2116C3B00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     62651
IP address blocks:        216.131.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:cc:39:3e:2f:66:f2:11:6c:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=18b33ba6-257e-45b2-a2d9-60b09683c2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:93:ed:1d:6f:89:45:98:85:e0:55:e7:70:
                    f4:ed:1f:96:44:8b:84:7c:d9:a5:8e:95:57:74:46:
                    38:13:92:a3:a5:6b:5a:c1:ad:b7:ed:7a:bd:db:bf:
                    9e:6b:bd:56:4a:65:2a:e7:9d:c9:81:bc:6b:47:d3:
                    49:ed:ff:b2:03:e4:01:84:17:30:b2:53:30:eb:a2:
                    c2:29:e7:c6:c3:4f:70:69:d9:5c:a0:b7:b1:db:bb:
                    31:5f:fe:40:55:cb:43:25:f0:48:dd:17:22:00:86:
                    51:0b:66:07:99:e0:82:94:7b:ac:9f:b9:20:de:ae:
                    2e:0f:e2:bf:bd:73:3f:51:c3:d4:1e:e4:7e:b9:b0:
                    7f:fe:0b:c5:b2:28:be:50:5b:43:3f:a8:fc:5f:80:
                    ae:ad:5f:69:8c:e8:5a:5c:d4:12:13:e1:13:f2:b4:
                    89:0f:3f:b2:8d:ed:e3:ea:5a:4a:e7:3e:bd:fb:94:
                    21:ce:94:7b:cf:c4:7a:79:09:ca:8a:e6:7d:91:b0:
                    33:3f:6a:79:9b:41:54:56:a5:e9:87:4f:83:df:2c:
                    e9:67:a8:1d:12:af:74:da:16:09:d3:62:ee:e7:86:
                    35:e3:17:55:cd:fd:ac:d2:fc:40:d5:58:2e:14:34:
                    9c:36:fd:8d:4f:55:a2:6a:87:8a:a6:0b:d4:aa:9c:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2E:9C:61:34:9A:95:28:78:0F:DC:E7:AE:4E:45:E0:CE:88:25:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:76:55:e1:bc:b2:e4:e8:f2:1a:7c:0a:af:c8:57:9a:0e:90:
         e7:d5:fe:96:e6:51:00:70:67:d4:4f:2a:11:a1:9f:00:fb:f6:
         9a:39:1f:1d:7d:af:05:4f:2f:d4:f8:96:7f:83:5c:e1:01:05:
         57:65:6a:06:6e:0d:77:2b:7e:69:b4:ee:db:ab:41:17:c6:be:
         6d:b4:19:b4:61:d7:a0:91:7e:9e:29:8e:b8:26:cc:fe:00:1a:
         ef:21:91:fc:93:81:60:76:9b:5a:53:dc:8a:5a:e3:09:c8:3f:
         12:2a:5e:14:e8:ef:52:f8:5c:42:ac:44:96:73:aa:50:6d:7b:
         f2:29:63:03:48:b2:ed:7c:0f:05:28:79:33:78:87:f1:8f:9d:
         87:35:40:89:bc:6e:2f:38:2f:ca:37:52:a3:06:98:41:3c:54:
         8a:78:6f:b9:cc:ec:5f:69:17:b4:36:b1:06:79:09:6b:a8:32:
         37:ab:02:0c:aa:fd:39:e7:6b:8e:b2:71:95:b7:b2:ea:76:ed:
         29:3e:40:62:71:fd:df:df:5f:5b:b4:41:e1:ba:b0:e2:8d:1a:
         19:06:91:00:f2:0f:c9:84:e5:f9:37:e4:ab:e9:a7:64:ee:85:
         07:c3:4a:49:20:d9:90:a1:46:e5:49:0f:53:f6:b2:6e:ca:3f:
         d6:6f:77:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:06:21 2025 by rpki-client