Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa
File:                     7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa (raw, json)
Hash identifier:          58Y7GTwk3jYD7dKvtUDEmz0rPMkRzAe7lqzjVAWpwCo=
Subject key identifier:   F5:1D:17:43:6E:0D:6B:58:98:47:9A:2A:66:9A:51:44:85:F0:60:AA
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858491ED6D95C2CAE4971ED7A0880
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     13414
IP address blocks:        199.16.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:d9:5c:2c:ae:49:71:ed:7a:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=a8dd0df2-a9f3-4c3c-b599-cb5c6ee06bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:c1:61:4e:e4:16:db:05:ee:79:0a:d7:e9:
                    57:04:f5:56:21:52:c9:fb:f4:a0:11:1b:3c:ec:fb:
                    7a:bd:ee:a0:6a:7d:d6:8f:e4:56:19:64:4b:aa:e7:
                    6b:a0:54:81:0f:2d:df:4f:f2:9e:97:9d:22:c0:35:
                    b2:e3:28:74:9a:c8:00:66:cf:95:bb:d4:16:e8:ac:
                    74:23:d4:40:17:e4:82:04:5d:04:96:cf:08:53:8b:
                    99:db:17:79:1f:95:ce:a2:0c:ce:9a:19:a8:df:34:
                    84:0c:8c:36:8f:9b:6b:e3:d8:35:e8:ec:ad:8f:47:
                    4a:a2:a5:56:9a:58:cb:88:2c:c1:28:f5:bb:bc:b2:
                    96:8a:b1:ab:f8:fc:07:d9:15:51:b6:eb:5e:8f:03:
                    ed:e2:44:aa:15:ff:56:03:08:c7:29:fe:9b:91:f9:
                    4b:7e:b2:c7:76:90:89:14:5a:d2:5d:ff:99:4a:aa:
                    1a:4b:c5:97:f9:59:c3:eb:06:16:6e:28:88:d1:fd:
                    46:0c:99:74:3d:5d:da:5a:d4:d9:ac:ba:80:d8:5f:
                    44:0a:fd:2d:c7:0c:19:24:72:9c:fa:7d:57:5a:1e:
                    09:ff:db:0e:97:13:6d:52:59:4b:6e:36:7f:8f:98:
                    2a:c1:41:23:b6:36:74:aa:cb:aa:5a:e2:72:fb:56:
                    50:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1D:17:43:6E:0D:6B:58:98:47:9A:2A:66:9A:51:44:85:F0:60:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:63:b7:54:3d:c8:20:71:2b:48:e7:7e:a2:f5:72:c1:9c:96:
         d6:aa:01:f1:73:46:52:60:2f:d3:6e:d4:95:54:65:b5:ff:fe:
         ae:7c:7e:eb:e4:e1:81:45:47:cd:a3:06:28:8e:f5:92:e6:c6:
         d9:72:a5:bf:d1:d5:ef:03:29:0d:00:d0:e5:1d:c4:ba:bf:a0:
         7a:f0:2d:af:61:f8:24:b9:d2:5b:03:d8:21:3d:12:1e:86:ce:
         6d:56:82:27:3a:5c:f6:ae:ee:76:1a:c4:12:5c:e9:37:94:eb:
         e3:15:d3:b4:5f:1a:cf:b4:ea:62:62:f8:68:ad:8f:f5:bb:b6:
         6a:d6:79:ae:c7:d6:3f:ec:d2:02:db:67:b4:de:f5:c8:60:21:
         2c:f9:a5:47:9f:b5:01:94:de:fb:de:a3:d2:ea:b2:96:e1:af:
         f2:40:a6:0a:80:5f:8b:4b:93:ca:9a:a4:9a:e3:f8:02:c9:7f:
         f7:83:c5:83:3f:9c:27:6c:c0:15:c8:9e:93:82:a6:5a:d7:e6:
         c6:d6:c2:9f:4b:7f:49:c5:26:86:09:bf:ca:c3:01:60:87:5e:
         b1:06:6b:95:d8:10:61:f7:7d:c4:0a:7c:8b:b0:c7:ad:cd:1b:
         8a:4b:bd:c3:1f:e7:db:44:6c:73:3d:56:f6:de:67:da:65:ca:
         b5:b6:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:09 2025 by rpki-client