Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1c21ec31-2045-3ba3-ac85-f08554ac0518.roa
File:                     1c21ec31-2045-3ba3-ac85-f08554ac0518.roa (raw, json)
Hash identifier:          Bswx1wse79cXZmhe1Xam6PZTjRcfWoBILMRQQn8OR1Q=
Subject key identifier:   70:19:80:10:3B:65:3F:B3:55:B4:E5:E8:E0:B8:A3:5F:21:3C:A1:C2
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584A6AF08A2FF64A4B5B07A2D8B0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1c21ec31-2045-3ba3-ac85-f08554ac0518.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     21859
IP address blocks:        216.83.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:8a:2f:f6:4a:4b:5b:07:a2:d8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=98ec6f27-fbb4-44cd-b246-f83fba208b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:2c:b0:f5:4d:8a:fa:61:b5:b6:40:de:d2:
                    18:9e:2d:80:0d:31:cd:68:63:ec:71:a1:f9:ea:0f:
                    75:8f:d4:1b:93:17:65:65:f4:59:ae:5b:44:47:2c:
                    9a:1e:9a:54:37:c2:36:e1:58:e4:4e:30:54:cf:7b:
                    e3:d2:f8:2e:ca:1e:20:d3:e7:27:8f:a1:7b:c4:6c:
                    66:92:d9:33:91:ef:23:45:a7:91:cb:28:a0:2d:ca:
                    00:fc:6e:af:5d:fc:b1:e5:07:7e:76:78:0d:ef:e7:
                    37:e0:85:44:d7:47:83:9d:cc:83:94:d9:d6:38:da:
                    ce:d4:1b:f0:26:47:5e:3e:6f:fd:d5:08:3c:e9:58:
                    15:49:7d:7a:c2:5c:0f:54:de:57:ee:b1:d3:7e:72:
                    d7:a2:2f:97:ba:16:d7:11:3c:70:01:d6:3c:1b:37:
                    0b:56:53:64:39:4b:12:d5:9c:50:26:e7:77:09:9e:
                    ce:a8:83:28:3b:47:4e:0d:7d:6a:78:0e:af:13:14:
                    d8:3c:06:33:99:5b:85:33:99:8a:1d:dd:96:d6:2b:
                    68:f7:ef:2a:85:d2:cd:f1:32:f5:df:96:3a:d0:ef:
                    97:48:38:90:d6:c7:d3:95:01:d3:b7:a8:6f:7e:48:
                    5c:83:51:9e:55:33:37:18:0c:36:11:06:d9:d6:65:
                    90:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:19:80:10:3B:65:3F:B3:55:B4:E5:E8:E0:B8:A3:5F:21:3C:A1:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1c21ec31-2045-3ba3-ac85-f08554ac0518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:aa:9e:48:0b:cc:f7:8d:f5:31:3b:a5:e2:44:d7:00:19:
         65:af:d7:c6:a5:c3:f5:d2:c6:5a:bf:9d:ca:6a:c5:6b:78:e6:
         8d:57:69:cb:65:a5:3b:66:36:84:cf:4d:a2:32:4c:31:35:e8:
         9c:e7:a9:b7:2c:26:da:cb:3d:64:1d:c6:ec:bf:0d:b7:37:da:
         3d:a3:6c:37:a1:18:45:7d:f5:c1:6b:4a:9d:53:6e:9d:38:af:
         6b:b9:af:b9:29:d4:4f:16:0f:76:e5:9c:38:85:21:d0:f7:ec:
         f4:5d:ca:36:6a:c1:b5:1d:f4:9f:9d:96:30:0c:1b:28:96:09:
         17:66:31:cd:d9:a0:f0:70:0e:25:ab:c6:65:89:00:5e:38:53:
         1d:7d:17:c9:f4:22:5b:18:bf:ec:d8:a9:19:64:7f:41:4f:e4:
         71:e8:40:ba:c0:4e:b8:64:78:ed:d4:8d:35:ef:5a:14:fe:89:
         f3:fe:1a:db:30:1d:f2:ae:28:5f:1d:2e:29:3f:17:5d:c9:40:
         a9:33:c7:20:c1:a6:43:bc:bd:c4:35:c1:49:f4:c1:43:d0:40:
         a1:f7:9b:68:e2:96:50:c5:6e:e2:63:42:df:b0:1e:08:5a:10:
         91:1b:35:cc:d2:13:af:5e:c5:3e:d0:86:21:07:c6:ba:91:b6:
         c5:78:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:20:23 2025 by rpki-client