Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/5a81912e-b5f7-37d2-8547-45679ec607c1.roa
File:                     5a81912e-b5f7-37d2-8547-45679ec607c1.roa (raw, json)
Hash identifier:          xjpPP8dRaRiVhwFXtiSBhzFnjjvtfbPCJMTXlP1os1U=
Subject key identifier:   31:79:C8:DA:24:F8:EC:E1:2B:63:FE:82:D4:D3:A5:CA:09:53:50:40
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584A77808BD81FBCC37119614D00
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/5a81912e-b5f7-37d2-8547-45679ec607c1.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     11273
IP address blocks:        167.16.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8b:d8:1f:bc:c3:71:19:61:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=b3b0af36-82b0-4703-b626-2cf942d98c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:b0:8e:56:31:3d:d7:40:18:ee:2f:fb:d6:
                    d1:56:1f:74:d6:c5:52:a1:7b:25:e1:53:3c:32:37:
                    83:c6:66:30:fc:03:0d:1c:53:fb:4a:03:d2:d8:99:
                    a0:21:a0:30:e8:2a:45:39:b8:c5:10:40:ec:18:49:
                    dd:22:f5:59:85:6b:b4:64:7b:f4:5d:37:c1:dc:cb:
                    d8:c7:e4:39:02:7e:71:63:85:ce:d3:d4:8e:04:4d:
                    22:86:f8:47:b7:31:7a:72:0b:ac:94:a6:50:de:31:
                    5a:7b:00:2c:91:b4:e8:c1:a7:47:8c:bd:db:bc:cd:
                    2d:3e:ff:79:dd:96:11:d0:b0:24:53:5a:ed:c0:47:
                    a5:5b:fe:af:84:56:22:87:1f:94:a1:e4:2d:f3:b1:
                    13:7e:cd:62:32:a2:30:e4:78:4a:74:58:fc:46:b6:
                    75:44:dd:9a:ad:4c:e1:be:8d:02:be:aa:ca:86:21:
                    e9:8e:6c:e1:02:2b:cc:68:16:e8:2d:7a:2c:c9:4a:
                    3d:5c:ed:52:70:f2:25:d0:ef:75:9c:ee:0d:00:da:
                    32:62:f3:da:4d:3f:e3:66:a6:ab:e4:35:b5:4c:54:
                    7a:81:27:ec:d4:01:46:44:b2:01:f3:a2:c4:81:bb:
                    ce:c6:19:1f:12:c1:a4:b0:41:f2:7c:ee:17:72:36:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:79:C8:DA:24:F8:EC:E1:2B:63:FE:82:D4:D3:A5:CA:09:53:50:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/5a81912e-b5f7-37d2-8547-45679ec607c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1b:e1:c5:32:73:10:69:f1:75:cf:d9:ed:7e:b2:f5:52:41:
         0a:eb:ed:f5:ea:97:6c:f0:b8:d2:90:d5:d3:74:9b:f0:d7:9e:
         69:ae:4e:b0:79:1a:30:19:11:87:83:0e:7d:b7:6e:0d:9f:95:
         ce:96:e2:a3:05:38:bd:42:8d:e1:f2:c4:c2:29:c9:d3:6e:5b:
         03:3a:a5:e7:50:b8:0d:c9:93:03:c1:db:ae:49:46:d6:9b:c5:
         d2:87:4d:80:26:21:ef:49:2b:2c:ec:ad:75:c7:ae:c1:65:a5:
         3b:e6:ba:b1:2f:69:79:0d:6c:90:bd:81:c5:60:45:d9:8b:48:
         f4:05:18:1e:ae:3e:d8:bb:93:de:c7:f0:3b:41:67:5d:0c:c7:
         65:bc:2b:b6:73:86:6b:cd:47:24:8b:25:34:3e:c3:1d:64:0d:
         40:0c:c7:54:45:88:b7:9e:40:2b:29:1f:3b:70:0e:f1:f6:8b:
         88:7f:3a:ec:2b:8c:bd:fb:a6:d9:7a:6f:e3:69:63:a3:ee:37:
         0b:b8:54:49:4f:eb:26:82:bb:d9:2a:29:3c:40:95:2c:61:e0:
         d6:a0:9b:24:26:da:19:d9:99:be:e9:c4:b7:ff:48:04:62:80:
         74:53:c4:e0:31:24:b2:bf:e2:e5:8c:69:b7:37:78:60:e9:fd:
         54:c3:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:30:13 2025 by rpki-client