Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa
File:                     ff7900da-0420-38fc-8569-0df46155e9fa.roa (raw, json)
Hash identifier:          8F9uCsVJ+sOoP9FGGXwR63ww/gKqGO85vXoeGhErB2A=
Subject key identifier:   39:68:32:E3:A6:6D:23:F7:23:67:D5:79:4E:C4:C8:5E:CC:22:CF:19
Certificate issuer:       /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
Certificate serial:       010D0C9F4328584A2ABAEC4A0AF19982B19943C0
Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     14701
IP address blocks:        104.232.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ec:4a:0a:f1:99:82:b1:99:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=88ab6a70-231a-4f3a-b9d5-5c2adead26d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:8a:79:ee:91:cd:53:67:2f:8d:7f:28:07:
                    43:21:d7:e0:32:66:c7:68:ca:38:1e:9f:25:cb:85:
                    39:b9:56:3d:a2:b6:e3:cb:48:7e:dc:e9:e4:5e:0f:
                    9b:ed:e5:d8:a3:35:0f:86:74:e0:1d:da:8a:f6:13:
                    28:e9:23:43:7e:3e:ab:12:26:12:be:4a:2c:46:e3:
                    c8:73:b8:2f:15:4a:49:14:da:c6:e6:e6:df:44:aa:
                    6d:38:4d:f9:08:c9:71:1f:46:6d:a9:a4:80:95:ff:
                    bc:f8:af:c8:8c:9d:e6:81:19:2e:10:e7:b0:87:8c:
                    09:f9:28:d5:cc:ef:a4:e2:86:0c:20:fe:7d:10:89:
                    f0:09:9d:38:56:87:10:2e:14:b3:28:09:bf:c4:f5:
                    6d:4b:d3:9f:c3:8a:62:7a:37:72:d3:f6:9b:5c:05:
                    93:12:91:be:46:11:a9:6b:ae:80:ae:18:ca:5a:10:
                    cb:64:57:c7:65:13:f9:39:3c:55:96:43:d5:b9:83:
                    88:b2:79:7d:df:0f:ac:03:71:74:5b:7c:e2:dc:6c:
                    a9:93:a4:90:26:80:5b:ce:16:81:b8:74:43:45:12:
                    b3:80:09:25:e9:0a:2c:07:89:e0:9f:34:0e:a3:de:
                    51:b4:a9:3d:8c:ec:e7:6c:49:2f:12:46:cd:6e:ec:
                    2b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:68:32:E3:A6:6D:23:F7:23:67:D5:79:4E:C4:C8:5E:CC:22:CF:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl

            X509v3 Authority Key Identifier:
                keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:05:74:1a:c4:c3:20:2c:6c:16:ae:fb:00:83:ea:1d:95:
         9f:c1:f5:02:c5:07:38:c2:80:ef:eb:33:5b:ce:ce:25:f7:50:
         f4:d1:a5:86:62:04:30:64:9c:e8:e4:01:80:e5:36:ce:f3:4b:
         89:64:7a:bc:8b:ce:c2:77:e9:56:27:93:e5:23:9d:06:9d:73:
         86:cd:16:70:0c:d4:fe:db:6c:56:63:2d:3f:7f:87:cc:37:c2:
         46:01:69:81:72:c7:02:40:b3:dc:b9:f8:7a:d2:fb:a7:da:6f:
         75:54:1f:8e:46:ad:41:58:9b:0f:7e:8c:92:ed:44:a8:c5:fd:
         c4:b8:f4:3a:2f:71:ec:0c:42:47:fa:4f:38:34:62:4f:14:17:
         df:cc:82:2a:3c:51:b2:4f:98:f0:c8:68:77:3c:1c:88:32:22:
         fe:c3:79:ab:8e:e6:52:f7:c9:e1:e0:08:e7:98:61:26:50:81:
         80:06:65:b2:b1:fc:a2:3c:d8:9a:a9:a8:72:ff:98:7b:e0:64:
         33:a1:48:4a:f3:53:67:91:d8:25:4a:1f:06:59:75:ef:99:02:
         ff:c7:d3:4c:ea:d4:48:39:f3:6d:90:e8:2b:b2:67:52:e8:ef:
         e8:54:89:51:fd:5f:8a:ec:cf:12:52:0a:9d:db:eb:de:e6:c2:
         3b:94:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:39:27 2025 by rpki-client