Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ae766c58-45e2-3b4f-897c-d52aded9706a.roa
File:                     ae766c58-45e2-3b4f-897c-d52aded9706a.roa (raw, json)
Hash identifier:          AZiNxydqUOqFIx2TxJDomg6tmkUuy+FPemy6crX32Lg=
Subject key identifier:   6D:CE:E8:3B:A6:3E:B9:53:99:DA:03:3C:CE:52:B2:1D:9E:FB:A2:8D
Certificate issuer:       /CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Certificate serial:       010D0C9F4328584A8B0B58C4EA6B3BA14B0E9E80
Authority key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ae766c58-45e2-3b4f-897c-d52aded9706a.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     20101
IP address blocks:        216.18.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:58:c4:ea:6b:3b:a1:4b:0e:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabfd0c-f982-470b-a430-b95c3c76868d
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=b3392492-4e0d-4d27-a268-e26522e05f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7c:e0:a2:0f:e8:5f:bd:1b:0d:40:b4:56:cb:
                    e2:91:d6:ab:90:d0:3f:59:ee:6b:8e:05:cb:da:66:
                    ee:94:6d:bc:2f:31:da:e0:86:ef:f1:4c:71:7d:13:
                    78:57:db:e1:ee:c2:f0:37:d6:82:42:cb:91:fc:32:
                    22:a5:46:08:48:d8:40:43:2d:b5:ae:d6:95:4e:87:
                    b0:9b:93:46:6e:02:8c:1a:c8:39:0a:ad:ed:0c:47:
                    33:f5:0f:5d:cc:26:87:b6:40:aa:af:c6:e3:71:d7:
                    40:f6:93:26:03:b0:1d:f0:04:92:1b:b9:75:e1:1a:
                    20:5e:e6:1d:aa:5b:7b:6b:86:a1:c4:a5:4b:14:2c:
                    bc:af:08:d7:a7:26:b1:27:c5:53:32:b4:7a:78:e4:
                    52:da:ff:00:cb:bf:31:94:8d:79:bf:62:ca:a3:e7:
                    2a:58:eb:a7:db:34:30:e1:24:4e:86:06:9b:8c:e0:
                    fb:8b:1b:4d:0a:a7:26:10:91:59:e6:fa:12:3d:5e:
                    d6:95:a5:b7:6f:00:0a:f7:5c:0c:e5:a8:d3:4e:2f:
                    70:88:00:fd:97:9e:7d:5c:02:f4:55:7d:ba:1b:f9:
                    c3:67:1e:10:36:8e:88:31:b1:d9:36:15:ca:ce:8b:
                    84:72:4a:2c:74:ac:2d:f2:22:a5:63:e1:e9:e3:60:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CE:E8:3B:A6:3E:B9:53:99:DA:03:3C:CE:52:B2:1D:9E:FB:A2:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ae766c58-45e2-3b4f-897c-d52aded9706a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl

            X509v3 Authority Key Identifier:
                keyid:70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.18.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:65:05:1b:31:63:0b:cd:06:54:a1:c0:5a:95:bc:15:65:
         23:59:50:f8:48:8c:71:9f:73:b2:c2:df:e0:5b:0e:d5:cd:a2:
         42:7a:d7:7d:7c:c6:d0:5a:35:27:e1:ad:71:76:fe:74:20:2e:
         0d:14:b7:f0:9e:a6:a5:83:d2:a3:f8:2b:b3:84:bf:77:c7:7c:
         62:f9:30:c0:6a:6e:93:24:e2:b4:6c:71:8d:75:d8:91:e3:ee:
         75:21:d5:65:79:65:bf:20:80:b0:23:e4:44:bb:49:54:b0:b9:
         85:8b:4e:72:e2:f7:d9:5e:dc:2b:36:2e:a0:43:7d:e0:4f:4c:
         2c:a1:45:d9:71:8e:97:dd:f6:46:37:da:4d:97:82:df:8c:c7:
         78:12:ab:59:de:19:0f:69:31:78:e1:2b:fb:44:96:54:6c:38:
         c0:88:c4:26:d8:4e:3b:e3:23:9f:f0:2f:19:13:f4:20:28:88:
         07:e7:87:c6:af:eb:94:c6:b8:40:bc:e3:9e:0f:9d:5f:aa:82:
         f1:27:ac:76:50:8b:a7:5d:53:c8:c1:c1:2e:49:72:cc:b3:ee:
         06:a3:9e:8c:dc:80:82:16:d8:3c:c5:7d:8d:11:14:b9:e9:87:
         14:b7:6c:59:86:d3:94:45:6c:e0:3d:ff:01:70:a4:93:74:e6:
         18:34:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:46:16 2025 by rpki-client