Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76ce8894-53e6-350e-a448-69df79752269.roa
File:                     76ce8894-53e6-350e-a448-69df79752269.roa (raw, json)
Hash identifier:          eK6xUbCbyzzh11SX1qDKWwtKEfWUgoFBecH9WfZ0S5c=
Subject key identifier:   33:F1:39:3E:C4:06:E8:EE:C4:B7:66:20:CA:3E:F6:22:DB:89:BB:01
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213469EAA20F183EB38E33D0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76ce8894-53e6-350e-a448-69df79752269.roa
Signing time:             Sun 09 Mar 2025 10:21:06 +0000
ROA not before:           Sun 09 Mar 2025 10:21:06 +0000
ROA not after:            Sat 07 Jun 2025 10:21:06 +0000
asID:                     400198
IP address blocks:        216.130.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:69:ea:a2:0f:18:3e:b3:8e:33:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:06 2025 GMT
            Not After : Jun  7 10:21:06 2025 GMT
        Subject: CN=978702fe-6ecc-4f42-b28f-a91f9ef97d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ab:c2:71:37:e2:e9:1d:26:e8:f9:d7:71:fd:
                    39:37:4f:6d:e5:0e:9e:07:0f:27:0f:59:e1:b0:5a:
                    b5:26:6f:98:38:8b:84:a8:97:89:12:94:e7:c1:a5:
                    86:5b:2e:e1:53:3a:f5:1e:67:9a:b4:75:07:71:c5:
                    17:3a:86:81:84:cf:75:af:54:c6:03:ce:f7:45:69:
                    53:31:d6:31:f8:5d:96:3d:44:80:14:56:ed:fd:0a:
                    9b:93:0b:f6:20:ea:7b:8b:d5:01:a3:d0:26:d9:21:
                    e0:0e:ef:69:38:67:b3:9d:97:7c:da:60:8a:ab:b5:
                    8a:a1:77:c3:72:95:ff:1d:12:d7:a6:62:65:31:99:
                    dc:26:42:ac:6e:d2:a0:c3:2f:55:4d:ba:3e:32:53:
                    56:78:19:f0:16:64:86:b6:21:ab:25:36:5e:92:e6:
                    07:66:14:af:79:01:ce:09:cb:3d:fc:a8:ec:28:11:
                    92:43:46:f0:2d:83:72:b8:44:94:db:e9:d3:d6:3c:
                    44:7a:9a:78:e7:ac:61:cb:c8:4c:c4:09:8d:98:cd:
                    ab:f2:44:fb:9c:c8:1c:f3:17:a9:f2:23:7e:80:35:
                    3b:8f:5a:65:1a:87:68:2c:0d:58:a2:9e:77:ce:56:
                    90:e0:98:c7:16:2b:bb:fc:f1:95:99:ac:0d:48:07:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:39:3E:C4:06:E8:EE:C4:B7:66:20:CA:3E:F6:22:DB:89:BB:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76ce8894-53e6-350e-a448-69df79752269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.130.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8b:31:c9:e0:12:c9:d6:46:ac:3b:c7:3d:31:c3:03:e1:6d:
         37:5d:cc:2f:d3:28:4a:c3:f8:2e:ce:d8:01:4f:cf:04:a6:3e:
         e8:26:c7:15:5c:c4:4b:57:bc:90:a7:af:34:65:09:3e:02:e5:
         e1:13:a7:b8:a7:45:c0:00:40:ee:68:5b:a1:2b:92:9b:c7:26:
         c8:30:6e:02:4f:e1:d9:d5:e2:4c:1e:0c:a0:90:2f:0d:22:06:
         d3:8d:17:c2:43:b5:e2:4d:0e:7d:8e:15:d6:76:ef:08:9f:da:
         70:f0:a4:76:11:43:48:f7:a6:a7:18:dc:47:93:5d:82:ab:33:
         6c:b7:d9:c4:ed:ab:62:a5:f4:04:a1:50:f9:ee:42:30:2b:e7:
         04:42:bb:82:81:06:18:a1:c2:7c:08:85:3a:d9:9d:8b:96:8a:
         1f:a9:a6:c4:62:31:d4:e4:4b:ee:ad:1d:df:7b:74:41:9f:92:
         4a:21:94:02:8d:72:0b:ba:59:d4:96:4d:3a:8b:0b:d5:0c:f9:
         62:c7:66:14:d3:78:d1:2a:57:0c:52:4c:b1:24:58:9b:2c:fb:
         6f:db:7c:45:c8:40:35:c5:c7:56:88:31:e5:a1:e9:61:6f:6e:
         f5:7b:c4:48:8c:85:91:43:68:e0:33:9e:bd:0a:44:26:7f:6c:
         12:30:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:12 2025 by rpki-client