Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa
File:                     7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa (raw, json)
Hash identifier:          FdWqJVUJyR7UYrCviAor5P2WglvOLl2L1GGE2/A0Fmc=
Subject key identifier:   2F:54:19:44:82:6C:1C:C8:40:C1:11:A3:2D:BF:44:6B:F0:99:8F:76
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F432858491ED6E49BCD51715C7EB41AC0
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     30698
IP address blocks:        216.213.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e4:9b:cd:51:71:5c:7e:b4:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=1f59978b-25c7-4866-bc56-d45175efc21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:ae:e7:21:c6:78:d7:10:49:d5:d7:c0:ff:
                    e7:c8:58:ee:8f:21:86:d0:b9:70:6d:c4:da:ea:e1:
                    7d:59:75:b1:bd:1f:60:7b:a9:b5:79:18:73:0b:0d:
                    b3:c1:59:37:ba:c5:21:92:16:4a:2e:b7:f2:c5:a2:
                    34:06:6b:0c:6a:5b:63:9a:6f:1f:0f:cc:62:d4:e5:
                    57:93:a8:61:44:ee:b5:46:0c:38:b4:b0:70:1c:af:
                    07:ea:c1:f8:98:a9:22:14:80:b9:a5:d0:be:02:2c:
                    53:af:50:0c:35:27:5e:f5:ce:24:c9:04:0e:c9:d6:
                    d6:57:e5:c2:c4:a9:e1:7c:04:63:fc:9b:99:5e:15:
                    13:f1:09:b3:f0:b4:c1:69:e1:7d:64:97:52:00:e8:
                    d4:80:69:53:05:28:13:cc:c8:da:b4:00:b0:5f:c6:
                    ec:e5:91:a2:28:4c:0f:af:91:4e:85:7c:9c:3f:80:
                    5e:d1:79:52:4f:22:e1:04:4c:ad:be:cd:6a:f3:a2:
                    f6:d7:67:29:2f:27:2f:bc:67:fb:dd:50:34:3f:95:
                    45:aa:84:e7:b6:b1:fd:67:6f:58:4d:e5:b2:6d:e0:
                    34:df:9d:f8:cf:38:aa:7d:d6:36:91:c4:71:66:c8:
                    9b:9c:e4:b6:50:f2:72:43:5f:8d:2a:ae:d8:7b:06:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:54:19:44:82:6C:1C:C8:40:C1:11:A3:2D:BF:44:6B:F0:99:8F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:23:0b:b6:11:db:bd:a4:e4:7d:e4:be:ec:11:9f:84:e2:cf:
         b1:91:55:88:a7:c8:45:d8:d7:90:49:50:55:6e:05:75:ad:91:
         cc:7a:64:a8:64:63:9d:dc:f1:bc:7c:3b:da:35:62:54:ee:f5:
         95:72:b0:e4:05:24:54:f6:42:6b:44:e5:b5:9e:ae:ad:23:b6:
         2f:cb:4f:3b:b7:b8:7e:48:21:d4:1f:84:b6:54:b4:6b:62:e8:
         15:e0:b8:8f:9c:95:43:62:bf:10:b4:6f:63:da:94:42:7b:29:
         b1:b1:48:bb:0f:01:c9:fc:eb:10:23:27:3d:c1:01:5e:e8:21:
         4f:d0:6c:b5:91:da:62:ed:79:e1:39:2a:a8:96:ff:9c:3d:9f:
         a1:c7:26:e8:8c:31:5d:72:11:45:ce:bb:0d:cd:a3:3e:eb:9e:
         94:51:ed:44:d7:2e:d0:b2:0f:73:35:49:2b:98:de:95:c4:b4:
         31:d2:b4:28:ee:06:1e:6a:b9:cd:4d:da:c6:9f:74:11:d2:1f:
         91:67:df:f5:8f:66:c9:ac:37:b5:f3:5c:83:b5:2e:56:86:1a:
         05:c4:b0:ef:12:a6:7b:c8:49:1e:2a:b9:f8:7f:7d:5f:70:a6:
         09:16:fd:7e:53:6f:77:94:42:10:0c:59:c5:07:ec:67:02:8d:
         65:36:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:24 2025 by rpki-client