Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/4f237dd8-f898-37e0-8290-0c7181165279.roa
File:                     4f237dd8-f898-37e0-8290-0c7181165279.roa (raw, json)
Hash identifier:          4FCjEXNUz20RsHOFXeL8sAOgG8FZQ/klgWcQKi5G9w8=
Subject key identifier:   FE:C6:76:28:80:BB:B2:F3:54:4A:EA:D6:6D:86:C4:CF:1E:FD:6A:AF
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584A6DBB408297048BB2E3E31F60
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/4f237dd8-f898-37e0-8290-0c7181165279.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     13492
IP address blocks:        216.37.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:40:82:97:04:8b:b2:e3:e3:1f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=2c2c0704-dc1f-4710-a3c8-da610c3cb550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:32:14:85:30:fc:63:0f:92:ef:92:ab:06:af:
                    24:5d:dd:7e:33:d2:77:97:c3:2c:58:41:40:b6:94:
                    fd:81:a0:04:e4:97:c8:45:12:5e:d8:61:d8:93:32:
                    c1:23:8f:3c:6b:8f:32:f6:a4:1e:17:fb:79:64:18:
                    32:81:ce:69:2e:9f:f1:ec:c7:8c:48:e1:10:78:96:
                    0a:2a:49:10:c6:24:66:d3:3d:f4:49:23:cb:d1:8e:
                    a3:47:2b:11:5a:37:c5:df:cc:4f:13:29:c0:07:b9:
                    f2:c4:1f:12:6e:7f:2f:a8:ca:67:85:a7:dd:71:9c:
                    6b:21:c0:7c:bc:0e:8a:73:fd:24:cd:26:60:ef:c0:
                    56:a4:bb:ac:3c:85:f5:82:81:fb:71:ca:5b:66:a3:
                    15:75:f7:82:7c:e9:a0:83:7a:0b:82:f5:77:2d:8e:
                    e4:13:89:86:12:91:aa:ce:e9:30:5b:cc:a5:12:20:
                    aa:ee:23:55:30:7b:cb:3f:ba:25:eb:03:9e:e3:83:
                    b4:e8:71:4a:cc:f5:15:08:bd:fe:22:6b:a8:ff:db:
                    7c:e6:6a:86:68:37:6a:cc:e0:e1:43:f3:c2:28:f1:
                    69:8f:0c:e0:f3:95:6e:c4:4b:32:6e:ed:e2:3b:29:
                    c9:37:18:40:42:53:b0:dc:57:d0:f5:25:35:45:45:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C6:76:28:80:BB:B2:F3:54:4A:EA:D6:6D:86:C4:CF:1E:FD:6A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/4f237dd8-f898-37e0-8290-0c7181165279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.37.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:02:b6:f8:1c:8c:34:7e:e6:1e:d6:f5:7b:e1:c5:66:b8:e1:
         91:d5:2f:1d:9e:58:86:9a:4e:d7:ca:00:dc:14:ef:08:e4:c1:
         d1:e8:83:f7:b7:fc:9e:35:a7:3f:56:81:df:dd:09:7d:f7:bb:
         c4:e2:f2:10:b2:bb:e0:cf:45:c6:38:7e:c7:b4:71:d0:ba:a2:
         46:0b:c4:3b:04:08:87:de:b5:ef:9d:9f:d2:51:ff:a7:87:7b:
         13:f7:59:de:d6:5b:36:3e:f1:af:94:16:d4:ce:47:f2:d1:cf:
         43:9f:a2:45:5d:b6:f9:c6:62:5f:5b:6c:2f:7a:4f:a5:10:fb:
         b9:ce:64:42:f8:2b:29:48:b9:24:c3:11:3a:d3:7d:f6:19:73:
         4c:4a:7a:97:90:7f:5d:aa:9d:48:c1:6f:03:24:f0:ec:7a:f2:
         7e:1a:05:83:82:aa:f3:c8:97:e7:e5:23:7d:d9:4e:39:04:a1:
         1e:78:a5:74:47:af:c5:8b:4a:b2:4f:a3:2a:dc:4b:57:b3:bf:
         d6:18:80:3b:1f:8c:a3:51:30:a4:48:b7:5f:56:db:75:89:67:
         b7:74:84:5c:2c:08:5f:83:97:23:e0:9f:13:db:04:7e:f5:2d:
         54:0e:f8:7a:05:6d:e0:2e:1e:22:d8:c9:39:e4:4f:1a:06:3a:
         c3:2e:49:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 05:44:05 2025 by rpki-client