Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/514a41a2-181e-33ba-b5f7-9a8932d75867.roa
File:                     514a41a2-181e-33ba-b5f7-9a8932d75867.roa (raw, json)
Hash identifier:          vS8isY6VnrHAgYGLG57wR2m5H8S8hR2U7rnb0gYXcEU=
Subject key identifier:   99:C1:92:96:1C:B5:78:90:69:93:82:DB:15:C5:E7:B6:13:14:B3:1F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584950F95D899E97CD2B58C90FC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/514a41a2-181e-33ba-b5f7-9a8932d75867.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     61317
IP address blocks:        216.107.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:5d:89:9e:97:cd:2b:58:c9:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=e7a9b611-280b-4fc0-b5b5-2e733e7783b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:28:39:80:ec:ef:6e:10:9f:67:0e:db:be:2f:
                    dd:df:bb:65:10:dd:82:d1:b8:fc:5a:e7:25:94:3e:
                    56:a1:93:67:12:66:7b:f1:84:5a:37:ac:0f:ed:b5:
                    38:79:20:ee:25:de:54:b7:2b:71:a0:ba:64:68:a1:
                    ec:ff:13:33:f2:72:a3:c1:5d:5e:b7:1e:89:6e:99:
                    48:a1:81:7a:cb:be:b0:10:38:a2:c6:00:7f:fe:a2:
                    0c:0b:87:2b:a6:bd:27:3d:8e:d0:d6:06:f9:8b:ff:
                    65:5d:72:91:48:4f:1c:30:55:54:63:d0:79:50:13:
                    5f:75:d7:c8:92:f2:b8:f6:39:53:70:68:10:0b:d5:
                    3d:3d:86:3a:7a:bd:d4:83:af:23:17:28:e3:b8:12:
                    2a:22:70:20:fd:63:51:31:de:fc:ea:36:6f:42:c0:
                    aa:be:4e:b4:99:e5:de:b8:80:64:d4:eb:4c:1e:69:
                    de:fe:40:c2:d2:63:22:e6:c3:9a:b8:93:98:56:4c:
                    d8:42:59:93:a5:88:87:af:07:c0:97:9d:65:ce:74:
                    34:93:3e:2c:95:ff:6b:bf:d3:28:dd:38:a0:de:53:
                    44:7a:26:ad:1e:8a:a7:c9:e5:b5:1a:3e:dd:31:73:
                    ee:2a:29:b6:e4:77:4b:ea:c1:d6:f1:15:f2:9c:e3:
                    9c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C1:92:96:1C:B5:78:90:69:93:82:DB:15:C5:E7:B6:13:14:B3:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/514a41a2-181e-33ba-b5f7-9a8932d75867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:23:e7:36:16:79:91:c6:4c:64:9d:2e:8b:e3:8a:3a:d5:
         64:35:a8:cb:31:e2:8f:87:e2:86:ab:6e:83:d5:91:d7:93:31:
         dd:52:c6:bf:ae:a4:27:df:b3:56:26:90:d9:8d:23:37:ab:f3:
         c2:cb:df:70:bb:7e:b5:b8:40:f2:de:31:bb:27:4e:be:bf:d7:
         65:99:8c:9b:38:c2:cd:ad:4b:d9:9d:ed:52:8e:d1:67:ff:51:
         72:4b:c2:01:62:c0:e6:78:d3:07:b8:cf:bb:24:58:16:7c:87:
         de:52:bd:b2:e0:2a:71:39:3f:6f:4d:e7:0b:1c:7b:9d:db:ad:
         6e:6d:9d:be:d0:dd:37:87:ae:77:41:72:88:d3:f4:47:d3:d6:
         f7:b0:55:63:f2:4b:3c:8e:8d:f1:23:92:83:59:e5:42:ee:b5:
         6b:19:c3:b3:7c:5d:92:d1:3c:5e:78:a5:d1:45:ca:9e:66:e6:
         1f:86:4d:96:15:65:c8:75:b9:dd:85:85:55:44:af:67:84:3e:
         25:01:61:f7:b4:81:3c:1c:63:32:06:6e:a4:09:00:fe:be:7c:
         1a:1e:81:81:5a:fc:b8:bd:7b:e8:e3:db:89:2c:a5:d4:54:ee:
         27:21:23:cd:63:55:34:94:bc:97:dc:b9:3b:7c:3b:91:6c:68:
         a9:08:b0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:04:11 2025 by rpki-client