Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa
File:                     7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa (raw, json)
Hash identifier:          YN6yAIIMyXSWoSO/7k6QNIw5Br/sQg4xqP+JNu7xuwc=
Subject key identifier:   3D:D6:9E:98:04:98:4C:E1:45:FB:15:BA:65:01:E3:5E:9B:4A:18:93
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285849C904F1B93125D5C7CF40C600
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     20040
IP address blocks:        216.68.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f1:b9:31:25:d5:c7:cf:40:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=58740443-58aa-41cf-a856-111fda210dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:08:df:60:b5:49:78:7e:c5:7a:6e:0b:9d:
                    03:7e:72:ed:6f:74:48:93:ed:be:24:2f:d8:1b:7f:
                    90:5b:2a:81:72:0c:b5:b6:66:d2:db:f2:d9:aa:68:
                    e4:d7:fe:77:9f:a0:f8:d7:3c:a5:40:9b:1a:46:d2:
                    df:d2:a1:26:8b:99:e1:87:a5:67:36:c3:79:25:77:
                    30:9a:d8:2b:50:0f:93:e1:a3:3f:40:fa:a6:58:0d:
                    2b:53:00:52:bb:94:f3:a1:e1:dd:dd:ef:8e:c0:51:
                    62:58:26:90:fb:a0:66:e4:eb:5c:db:f0:bc:8e:3e:
                    31:23:0f:b0:ee:1c:a0:ff:6e:85:f1:af:45:65:2a:
                    1e:d7:e3:1d:0d:2c:e4:4e:47:c4:f4:7c:de:a3:72:
                    04:7c:ac:73:66:c9:a4:6f:8c:69:3f:cb:36:60:76:
                    43:5d:04:e0:f9:d6:e3:0f:03:0b:34:25:92:4c:5a:
                    b7:93:7c:44:d7:d4:54:76:06:1c:f7:42:4c:ac:95:
                    d0:8b:68:3b:d6:ff:ef:72:4e:6b:52:cd:84:83:7e:
                    9e:75:6c:3b:7a:9c:f0:9c:68:46:66:a6:f6:83:4f:
                    c4:71:fd:71:e1:1e:39:e8:b2:9b:37:6d:90:18:63:
                    0c:3b:4e:8c:d9:09:53:8a:71:96:05:ce:91:b8:46:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D6:9E:98:04:98:4C:E1:45:FB:15:BA:65:01:E3:5E:9B:4A:18:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f4:ce:2c:40:e0:26:33:82:b1:21:b9:87:5b:a1:bb:a5:75:
         0f:df:51:53:14:24:24:67:49:a8:f6:0b:8d:b9:17:69:5f:90:
         62:bf:22:b5:ed:1f:6d:bf:1a:1a:c0:9f:cf:39:52:1c:23:b6:
         df:a9:6e:ec:ff:f0:e0:f1:ca:44:fb:12:4d:02:d9:84:18:88:
         dd:1d:c7:0e:68:3d:fb:cb:c8:d0:d8:4e:94:47:e3:5f:91:d1:
         6a:d0:7c:d6:a0:4a:60:09:c4:63:25:28:5a:d8:fb:8e:5f:59:
         98:87:67:ad:84:21:48:34:b6:22:ed:c1:08:01:2f:1e:5f:4f:
         67:a5:7a:fc:1c:71:ae:76:40:c3:f1:44:bb:11:4c:fc:93:2a:
         44:97:02:fb:a8:1b:98:41:95:b6:77:92:06:85:4b:f0:1f:36:
         4f:3b:25:5b:42:08:90:43:38:58:84:62:1a:aa:a8:e1:3a:ad:
         35:5c:c2:24:85:0a:92:7d:48:4f:0e:20:eb:3f:c1:f2:6c:69:
         08:8e:36:93:49:3b:bc:6c:de:5b:58:4c:8f:62:a4:be:54:99:
         5c:b6:92:61:ac:df:5c:84:e6:0d:f2:26:26:d9:87:4b:31:3b:
         7d:26:03:96:0d:eb:52:9c:aa:f0:68:4c:77:6a:a1:56:15:dc:
         2d:69:b0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:47:10 2025 by rpki-client