Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/86de017a-6584-31e8-922e-02cebceb38a9.roa
File:                     86de017a-6584-31e8-922e-02cebceb38a9.roa (raw, json)
Hash identifier:          qJO5Ah7sJrUXjtBUNQ1WKkrQ/eh9zenjBD5flOwm2bE=
Subject key identifier:   72:67:E9:8E:3D:FF:8C:17:2B:96:23:92:57:7D:52:51:F8:4B:96:1F
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584949FE8B8553C02C2FD124F080
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/86de017a-6584-31e8-922e-02cebceb38a9.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     13779
IP address blocks:        216.93.241.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:8b:85:53:c0:2c:2f:d1:24:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=e3f348cb-6c72-412a-aa98-c03b43596894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:da:8c:0d:89:5f:fb:e6:38:04:a0:96:68:6b:
                    f4:34:7f:78:e4:ba:74:f2:a0:b7:9a:8f:aa:eb:0b:
                    d9:e9:ba:13:7a:18:a4:d9:51:86:cd:bc:f7:75:54:
                    c4:c7:57:fd:4f:4d:be:b0:f8:2b:ee:1f:e7:7d:bd:
                    fa:0f:2c:f1:81:ca:91:80:1d:9c:4b:d0:6e:ff:94:
                    ef:d6:06:f7:a4:2f:5b:8a:46:89:60:ad:5f:0e:60:
                    ce:1c:3b:fd:9c:c7:b0:ee:41:c0:f2:7e:c6:2f:7f:
                    60:17:71:c5:fd:91:5b:50:66:03:ea:85:09:cd:82:
                    e9:48:2c:99:b3:1c:05:fb:34:87:f7:07:24:fb:b3:
                    9e:9a:1b:6b:ae:3c:c7:24:d6:8f:68:ab:8b:74:6b:
                    de:96:00:cb:c8:6a:b8:56:16:b0:d4:df:3e:dd:19:
                    e1:d2:a6:78:4c:19:7e:72:e0:b7:e6:27:ed:58:fc:
                    0e:0a:57:67:bb:40:02:30:05:ef:bb:91:19:52:df:
                    64:29:5e:1a:6e:8d:a0:76:92:ae:48:6f:47:ae:4c:
                    c4:bd:93:20:0c:66:4f:77:76:44:52:b6:2d:12:41:
                    9e:3c:9c:f5:ef:bd:60:15:aa:26:c3:86:8d:3e:cd:
                    51:af:aa:8a:82:2e:48:0b:74:c0:a5:fa:6a:e6:fc:
                    79:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:67:E9:8E:3D:FF:8C:17:2B:96:23:92:57:7D:52:51:F8:4B:96:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/86de017a-6584-31e8-922e-02cebceb38a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.93.241.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:72:05:c8:b4:66:25:17:37:a2:14:a4:97:55:18:bb:7f:71:
         9a:6a:99:2c:0d:a0:5d:d4:dc:42:89:47:33:f1:0d:15:bd:05:
         df:8c:69:0e:57:9b:d9:9c:c1:63:1f:76:0c:8b:f2:12:38:0f:
         bd:c6:56:5b:ef:aa:e7:ce:40:67:be:f7:75:bc:c6:3d:e9:5e:
         82:1b:b0:98:66:75:ec:53:8f:85:81:3d:ee:9f:45:96:6a:35:
         8e:f5:a4:0e:9e:22:e5:54:bf:84:4a:52:64:c7:7b:48:5c:6f:
         b6:33:7a:e8:49:a1:1a:9b:8e:af:04:98:d8:43:ea:16:c1:39:
         d3:61:ef:39:bf:86:ac:3e:d2:ed:d2:3c:6f:6f:4e:7d:18:bb:
         c1:9b:de:67:6e:89:c7:15:27:28:ff:d3:cc:ec:8c:e2:52:37:
         b7:f7:78:c4:d9:3a:a5:e4:46:f2:a7:32:25:99:73:d7:81:aa:
         61:42:2c:a3:4c:f5:66:6c:02:26:04:60:98:96:04:73:d1:ca:
         c7:3e:d1:53:d7:ca:c7:87:1c:9f:2b:c1:9f:21:1f:9e:29:df:
         33:2c:f3:0f:2e:1f:aa:79:77:1c:4a:1c:38:81:24:04:74:bb:
         8a:a4:4d:09:7c:9c:13:db:2c:88:78:02:f1:d9:c3:2a:75:8e:
         3f:b8:01:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:31:18 2025 by rpki-client