Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/b93e562d-2881-3bc7-b23f-74418e8a5662.roa
File:                     b93e562d-2881-3bc7-b23f-74418e8a5662.roa (raw, json)
Hash identifier:          4n34N9Cx7LggRkh95ShPnsJ7Bmr5Dc4ciO8D7Nsm65I=
Subject key identifier:   E5:2B:A2:C6:83:D3:E2:D5:04:C6:49:35:FD:24:E3:1B:FB:07:E3:82
Certificate issuer:       /CN=c732f1a1-a4d1-4822-8730-10a209755167
Certificate serial:       010D0C9F432858490B4C21F06C7E79FE640FBA20
Authority key identifier: B1:C2:D6:1A:E8:39:38:C1:60:C3:AB:2F:11:83:19:4F:4B:22:37:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/b93e562d-2881-3bc7-b23f-74418e8a5662.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        216.241.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:21:f0:6c:7e:79:fe:64:0f:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c732f1a1-a4d1-4822-8730-10a209755167
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=ac2b8682-955b-453c-b811-5f140aab43fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b9:1e:f4:8e:f8:42:e9:0e:4a:bb:7d:23:41:
                    04:c0:81:0e:0e:8f:ff:12:c5:94:da:a2:6b:31:42:
                    72:45:7a:86:01:03:a1:81:6c:f9:69:ab:f3:21:c6:
                    f0:53:71:e1:27:1f:74:65:5b:de:31:fc:37:e1:cd:
                    36:9b:87:3a:e5:a9:01:56:0e:db:c6:37:a8:53:de:
                    dd:41:b8:a2:72:39:50:15:ad:dc:27:11:52:6d:24:
                    b4:3c:56:57:86:1c:e3:c5:f9:f4:53:16:0c:87:f6:
                    35:3e:88:df:ec:f8:e2:b6:41:c7:ea:88:ea:b5:e5:
                    25:44:54:79:8d:55:02:18:9e:df:3d:f9:90:1a:9b:
                    89:f5:6c:04:1e:f7:2a:5c:88:a3:53:77:cf:79:2a:
                    21:0e:e8:2d:c0:f8:5a:4c:67:13:c0:59:cb:9e:a6:
                    69:46:8a:61:61:82:27:f6:01:51:cc:36:0f:c2:a0:
                    c6:93:22:76:d4:b1:d1:ae:6a:a6:d9:b2:59:e7:b2:
                    71:bd:5b:79:6a:11:55:ee:81:c5:b8:6a:5b:0a:74:
                    ef:f0:0d:35:d0:84:7b:f0:54:fd:8f:b9:ce:38:6c:
                    66:06:b8:f5:82:5d:98:41:f6:8d:20:8f:df:8e:40:
                    d9:29:aa:7e:3d:94:09:a6:79:27:67:01:51:cb:68:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:A2:C6:83:D3:E2:D5:04:C6:49:35:FD:24:E3:1B:FB:07:E3:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/b93e562d-2881-3bc7-b23f-74418e8a5662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.crl

            X509v3 Authority Key Identifier:
                keyid:B1:C2:D6:1A:E8:39:38:C1:60:C3:AB:2F:11:83:19:4F:4B:22:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:4d:1a:a0:5d:c1:5b:ae:99:07:0e:7b:a5:77:23:e0:84:
         94:36:0c:aa:b3:65:b4:56:fa:81:41:1c:b9:09:02:41:25:9d:
         16:1b:17:fe:4a:96:27:82:32:b5:2c:7e:a1:99:55:7f:2d:45:
         3d:3a:e3:8a:54:39:20:42:f1:e7:4e:b5:53:5f:5e:76:24:62:
         9d:26:3f:89:49:63:fd:d8:9e:fe:f9:31:93:10:29:9d:3f:aa:
         af:ec:c9:63:d7:e5:4e:6b:01:d8:4c:a5:e0:db:a4:ac:19:f6:
         21:df:ef:7b:3a:47:7f:44:22:52:53:5e:f3:29:d9:76:ed:96:
         b4:c4:4b:7d:e3:76:47:f4:cf:2c:0a:d2:44:eb:b6:18:35:90:
         f4:8f:77:47:c1:13:23:dc:85:16:ff:df:81:05:56:75:bc:7c:
         bf:b0:53:83:6e:67:13:01:fb:91:ab:2a:5c:0f:d4:9d:fe:9e:
         26:fb:61:5e:2e:2b:4a:d0:9f:5f:d3:d8:97:b3:92:cd:19:80:
         f3:18:fa:d8:00:41:72:11:5a:7d:96:11:13:2e:35:c6:f7:98:
         2d:fc:be:3d:d0:84:cd:c2:6d:6b:11:35:3b:df:62:e5:b7:c6:
         75:95:a7:e6:ce:4d:52:1a:a5:5a:ee:f2:53:fb:a8:a4:13:2e:
         b4:18:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:07:31 2025 by rpki-client