Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa
File:                     f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa (raw, json)
Hash identifier:          VwvmuaqUjiolfC3BHzIiX07UiS9ghE+AJlySR7VxX4s=
Subject key identifier:   2C:D9:0A:2E:B5:E8:42:4B:F9:D8:55:B9:B8:AA:D1:98:18:19:37:2C
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F43285848FB0E1F088B0CFBD24BCE8F30
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa
Signing time:             Sun 23 Feb 2025 18:23:14 +0000
ROA not before:           Sun 23 Feb 2025 18:23:14 +0000
ROA not after:            Sat 24 May 2025 17:23:14 +0000
asID:                     53991
IP address blocks:        216.105.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fb:0e:1f:08:8b:0c:fb:d2:4b:ce:8f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Feb 23 18:23:14 2025 GMT
            Not After : May 24 17:23:14 2025 GMT
        Subject: CN=3f74098b-9d2d-46fb-b8f8-07cbf3bdeda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:d3:50:f2:c6:62:52:bf:16:af:ef:37:e8:
                    d0:e2:38:92:cb:7a:ac:46:af:7e:66:aa:b9:22:63:
                    55:e8:dc:14:d2:1d:0d:46:03:86:d3:1f:f4:15:36:
                    83:4c:f0:df:06:2d:fd:3e:3c:ee:0f:73:5b:47:fb:
                    40:f2:df:d4:8e:40:98:b2:d5:12:d7:19:a1:51:39:
                    5f:b5:6d:93:61:ed:28:d3:25:08:d7:82:19:42:79:
                    3b:b8:e7:ed:47:20:ba:3d:d6:8f:89:72:a3:3c:8e:
                    b3:58:04:52:04:b6:2a:62:3b:cb:ef:56:c0:e5:ce:
                    0b:34:4f:fa:cf:e1:dd:06:ea:8b:17:00:83:ee:4b:
                    0c:f8:09:c7:aa:22:6a:1d:59:a8:63:3f:87:5a:26:
                    3d:11:08:c9:41:1f:53:7c:c6:07:c0:b1:8e:94:78:
                    82:c3:9d:fe:d9:90:06:5b:85:d8:dc:89:e2:51:73:
                    d0:7d:22:6f:79:9e:11:55:61:94:b5:a5:c5:a5:82:
                    78:39:6b:ae:dc:21:71:54:65:bd:9c:a0:8f:57:ca:
                    10:02:aa:1a:55:eb:35:f9:fb:58:66:a0:14:19:4a:
                    d4:91:66:b7:1e:12:5f:a4:8e:a7:b6:cb:fd:a6:73:
                    f4:66:2e:46:3d:28:a8:f8:10:bb:41:d3:55:4d:16:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D9:0A:2E:B5:E8:42:4B:F9:D8:55:B9:B8:AA:D1:98:18:19:37:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:bf:11:0d:e2:b8:cc:04:05:37:ae:8e:d5:a3:83:33:5f:0f:
         1c:d1:67:ff:82:d9:b6:6b:ea:3e:d4:7e:a3:1a:8e:2e:7b:28:
         95:62:c7:d8:f0:86:95:e9:13:78:c6:d0:e5:2e:77:3d:e1:c0:
         e1:57:8a:a6:d5:87:4e:fd:e9:dd:23:75:4b:f3:dd:dd:99:8c:
         f0:e5:85:52:a5:ee:77:80:f8:a1:42:d2:e9:17:d1:f1:b3:b3:
         cf:a5:39:11:5e:20:31:36:eb:30:75:3c:eb:d3:1f:3a:16:7b:
         ed:14:2c:66:43:a3:ee:5c:d2:55:df:7e:92:6d:96:f3:82:83:
         94:fb:9c:c3:e8:ba:c0:87:bd:d1:1f:d5:18:48:82:6e:99:29:
         be:2a:fb:b6:dc:6c:db:ae:4f:f5:9b:95:ce:b2:2b:b0:c3:57:
         ff:3e:e2:97:71:55:4e:d7:f6:dd:a7:c4:2e:9a:24:43:87:ac:
         97:04:80:04:65:17:f8:b6:4a:24:a3:fd:75:03:38:36:99:4e:
         48:89:6e:cf:cf:d7:ad:45:42:16:e4:bb:c5:9c:05:b1:44:14:
         c5:c7:d1:a0:cb:26:85:29:97:2a:eb:9c:68:96:29:b3:29:4c:
         0d:0b:74:f5:81:c8:77:e8:c9:fc:98:51:85:6f:03:0c:34:78:
         50:ba:af:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:55:41 2025 by rpki-client