Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13563e16-fabb-355a-8635-f2b0f96d8ccb.roa
File:                     13563e16-fabb-355a-8635-f2b0f96d8ccb.roa (raw, json)
Hash identifier:          NWyRR2YLHgQHF/huBhkhu54RAYhbwY4G4gAIMbl+n/w=
Subject key identifier:   F2:D7:4B:E7:68:4C:EA:10:C1:0C:77:93:B9:16:36:CF:77:55:52:F5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921346CA81E4495A870503900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13563e16-fabb-355a-8635-f2b0f96d8ccb.roa
Signing time:             Sun 09 Mar 2025 10:21:08 +0000
ROA not before:           Sun 09 Mar 2025 10:21:08 +0000
ROA not after:            Sat 07 Jun 2025 10:21:08 +0000
asID:                     36522
IP address blocks:        216.208.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:6c:a8:1e:44:95:a8:70:50:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:08 2025 GMT
            Not After : Jun  7 10:21:08 2025 GMT
        Subject: CN=9a2f457b-9796-4a35-b2c1-93df616b35aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:55:af:c9:76:2f:63:9f:2b:88:c1:61:e5:
                    15:f4:da:ca:1e:05:0d:1a:1d:ae:9f:3f:e6:fa:f6:
                    de:24:b0:db:23:a4:07:df:92:04:4a:1d:6c:11:57:
                    fe:98:a8:5d:79:fd:da:40:bc:42:79:b4:1c:32:27:
                    f9:32:d7:d8:20:72:41:12:ca:ab:66:23:88:9f:96:
                    d9:99:0c:72:a5:fa:d2:0d:1b:0d:d1:37:87:4d:17:
                    da:7c:20:42:6f:09:9c:51:e3:b2:ac:db:48:c4:b4:
                    79:e4:07:fb:8e:63:4e:21:d3:4f:89:02:51:8d:21:
                    92:ae:ae:d8:d7:e2:db:e2:72:b7:bb:24:59:bb:46:
                    a6:d3:72:c0:20:d7:3e:8c:8a:e1:72:6a:73:72:c6:
                    f4:82:f3:8d:4c:79:bc:78:64:95:43:33:7f:f9:6a:
                    40:c4:0a:06:35:11:3c:00:48:19:a4:41:96:3c:85:
                    07:2c:2c:9c:73:0d:4a:60:5a:b0:02:fd:db:a7:a3:
                    7c:5f:f1:67:4e:a7:cd:ce:3a:40:21:97:3d:d4:bb:
                    ce:ac:9b:9b:33:f0:3a:6e:76:7f:e1:f7:54:12:8b:
                    60:54:b6:73:77:3d:3e:1b:30:ea:c0:0f:28:50:7b:
                    1e:09:65:83:78:c4:6f:13:cc:c1:ac:a3:0c:cf:82:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D7:4B:E7:68:4C:EA:10:C1:0C:77:93:B9:16:36:CF:77:55:52:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13563e16-fabb-355a-8635-f2b0f96d8ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:20:8d:a4:74:0e:82:72:35:c9:ff:82:fd:ff:82:6a:2f:52:
         9a:f5:8d:84:7b:c5:36:28:c0:11:b2:eb:8a:cc:41:f6:5f:46:
         51:75:7c:cb:0e:47:82:37:95:dd:df:58:6d:81:97:39:7b:45:
         11:3d:d9:a9:e1:bc:4d:95:1b:51:4c:39:dd:59:c6:39:1a:4a:
         f4:96:4e:1b:86:59:9a:95:38:eb:c0:ff:a9:8c:d9:55:80:c8:
         50:df:d0:e1:c6:2f:7f:81:9a:1e:ea:53:61:68:a6:4d:95:61:
         af:35:1d:a8:06:27:33:cd:c3:58:6c:bb:31:e0:58:f5:8c:8b:
         bf:5a:be:e7:1c:f1:50:d8:b2:19:61:e8:73:60:e7:bd:5e:5d:
         96:11:9e:75:4f:12:ca:19:f1:9b:08:fa:31:9f:76:aa:43:d4:
         54:be:a0:9d:45:10:35:a8:f9:1c:e3:ee:f9:97:34:dc:a8:b9:
         ca:de:fe:af:55:35:5e:eb:99:55:68:63:5c:cc:dc:35:03:70:
         4f:c3:ce:05:18:19:e0:ab:15:65:5d:01:c8:72:34:55:5a:01:
         9f:ff:dd:45:06:c9:21:f2:b2:8b:65:f2:06:87:dc:33:c9:bf:
         3f:a8:7e:db:43:d3:08:8a:a6:60:16:01:d5:86:1b:1d:f7:b5:
         ee:1d:07:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:10 2025 by rpki-client