Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7f4b1fe-2e46-32d6-bae8-6a687475ce60.roa
File:                     f7f4b1fe-2e46-32d6-bae8-6a687475ce60.roa (raw, json)
Hash identifier:          Xu3ONSZERb0u384VCeBp+fBgCT3T44GLarcQojeVPmM=
Subject key identifier:   B1:E6:70:E4:92:1E:F5:26:A0:47:B7:8C:4C:54:9F:FF:CE:17:FA:83
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926C2F0D16CC9D0E91E7C40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7f4b1fe-2e46-32d6-bae8-6a687475ce60.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     396106
IP address blocks:        216.66.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:c2:f0:d1:6c:c9:d0:e9:1e:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=acabbac1-a894-47ab-bfc0-ffaa708f92fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:f9:d2:d8:b4:bb:14:eb:f7:ba:92:a1:a7:
                    33:25:34:61:37:fc:3c:56:4a:3e:3c:db:aa:cd:f8:
                    e1:e1:6c:eb:e8:58:0d:1f:fa:ce:09:42:f5:32:1a:
                    9b:75:5e:e6:5d:78:ed:a6:a0:6e:15:18:3a:aa:68:
                    91:cf:f2:95:7a:81:5a:67:f1:9a:81:e1:09:ae:14:
                    ff:1a:0a:1d:f4:4e:ad:12:b7:b5:c5:30:22:89:3b:
                    51:30:5e:ac:ac:75:de:1c:bb:aa:da:97:fc:1c:f5:
                    ed:83:bf:22:e8:95:89:ba:a5:1e:5c:9a:e3:57:09:
                    5c:5b:d6:37:30:07:d4:87:02:e3:d5:16:48:0b:6c:
                    87:1f:34:39:02:db:7f:93:fb:ad:15:d5:e7:95:66:
                    3a:74:7f:c2:7e:cf:71:31:0e:dc:dc:b2:b7:3a:c5:
                    6d:27:8f:17:73:80:c8:cb:56:6e:be:ea:2f:19:dc:
                    7e:fc:43:88:84:e7:0d:81:1f:39:38:b5:82:be:48:
                    cf:6a:67:85:9d:18:54:e2:42:63:ef:25:1d:61:82:
                    f0:85:6b:6a:01:e2:26:dc:16:9d:d0:aa:60:da:31:
                    ba:ef:55:d7:93:42:8c:11:2e:c1:fe:6b:4c:ee:f3:
                    60:94:86:65:c6:c0:d3:69:3e:c8:d3:94:f9:38:84:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E6:70:E4:92:1E:F5:26:A0:47:B7:8C:4C:54:9F:FF:CE:17:FA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7f4b1fe-2e46-32d6-bae8-6a687475ce60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f7:39:50:6b:9b:e6:fa:72:c2:dc:29:d9:9b:80:12:55:91:
         f5:83:53:ac:b3:b4:6e:74:89:85:b3:2d:70:76:fd:80:be:5e:
         9f:65:72:10:57:d6:d7:78:a4:89:31:47:df:2d:d7:7e:2b:a8:
         e8:45:f3:ba:a6:1f:fc:a2:4e:a1:82:13:86:4d:d7:ef:89:cf:
         2e:b8:12:0b:01:02:7b:68:d1:78:a6:86:b0:0f:76:2e:a3:9d:
         43:bb:24:3d:1b:b5:1f:6e:d4:48:dc:46:be:65:6b:ac:24:97:
         03:96:95:32:f4:0f:1f:a5:0c:1e:fe:67:e9:d7:7d:79:18:5e:
         d1:e5:e9:2d:54:7b:fe:db:cf:14:ce:d9:2e:ee:e5:c7:e0:46:
         53:cd:c7:95:45:a6:7d:02:91:6c:c7:ba:6e:44:a2:74:d2:48:
         d7:a1:a3:bf:ac:12:3c:f6:e2:bd:b9:db:ee:c6:51:0e:99:7e:
         7f:b7:d5:f9:11:c6:5c:06:33:16:b1:34:63:7b:b1:b9:5f:89:
         f3:cb:d5:a0:42:8a:f2:4b:40:6f:dc:8c:7d:4a:d5:26:10:a0:
         da:1b:1e:53:64:64:c9:56:73:63:9e:90:e0:22:21:b2:9e:b1:
         e3:0d:17:d5:2a:cd:50:ae:c7:0e:34:18:d6:4b:13:a6:b3:8e:
         6f:a1:19:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:05 2025 by rpki-client