Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/1a6cb8fc-cc6c-33e5-9e36-7349f28620bd.roa
File:                     1a6cb8fc-cc6c-33e5-9e36-7349f28620bd.roa (raw, json)
Hash identifier:          U7UiI807y2xuiqYui2nTVnMneoJJSvVpJopOojRB4io=
Subject key identifier:   38:E8:D9:37:E0:59:30:A0:1E:50:C9:07:23:13:BD:54:D4:A7:34:95
Certificate issuer:       /CN=9dd784e6-1b7b-4aa8-8457-76bb387e1d98
Certificate serial:       010D0C9F4328584965E97E3139D937786B7C8600
Authority key identifier: 09:E8:A2:01:3A:79:5E:3E:CB:23:2C:79:AF:64:B9:6A:85:E3:A1:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/1a6cb8fc-cc6c-33e5-9e36-7349f28620bd.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     25826
IP address blocks:        216.48.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7e:31:39:d9:37:78:6b:7c:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd784e6-1b7b-4aa8-8457-76bb387e1d98
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=6a7db8df-09aa-4860-9ccb-ef314e4937b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:00:fc:5c:76:06:a4:2e:21:44:fc:de:b1:76:
                    a7:ce:64:28:88:c2:b5:61:26:9f:65:28:c6:59:8c:
                    d1:07:27:6c:2e:b2:c3:7a:f8:7c:90:13:f9:b3:4a:
                    e5:9c:91:71:1e:a0:06:41:70:85:a2:b6:bf:a6:f7:
                    fc:5e:f9:19:f2:f5:0c:47:90:35:f3:f1:26:25:47:
                    13:4a:8f:18:ef:70:1c:d4:da:39:0c:19:e1:e6:d0:
                    ab:07:3b:53:70:61:dd:a1:78:c7:cf:35:6a:56:18:
                    1e:f0:fe:3e:d2:fc:a3:98:b5:14:97:95:c5:f2:cc:
                    3c:e8:78:bc:5d:71:8f:9b:be:be:6f:6f:c0:5b:8d:
                    46:a8:2a:b6:6d:0d:c2:04:b9:d5:ad:7d:de:8a:8f:
                    9d:ea:9d:3e:aa:67:e1:94:86:23:33:5b:8d:5c:64:
                    ff:e4:44:9e:e5:de:20:17:64:26:53:37:06:ec:3b:
                    60:06:6c:b0:a8:42:14:68:4a:06:5a:84:1c:43:d4:
                    6c:6e:31:69:7a:3b:85:1a:47:51:83:0f:a8:1d:1a:
                    78:1d:a7:bc:07:6e:81:ea:9a:c5:05:79:7a:fd:ee:
                    cc:7f:4d:64:f8:18:ad:32:30:f3:de:5d:dc:f0:9a:
                    c8:44:79:d9:b1:35:24:e9:e3:6d:84:c2:0a:a3:44:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E8:D9:37:E0:59:30:A0:1E:50:C9:07:23:13:BD:54:D4:A7:34:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/1a6cb8fc-cc6c-33e5-9e36-7349f28620bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.crl

            X509v3 Authority Key Identifier:
                keyid:09:E8:A2:01:3A:79:5E:3E:CB:23:2C:79:AF:64:B9:6A:85:E3:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.48.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:bb:a3:dd:3a:e1:fa:2c:58:b7:ca:46:74:c9:65:d6:af:
         c5:f0:a6:74:a7:6a:63:12:1a:cc:88:87:d0:4a:f4:2c:95:6c:
         3c:87:4c:76:72:b8:07:4d:99:ac:f9:aa:fe:96:37:35:35:4b:
         26:7e:4a:19:01:bd:6b:79:6e:d2:1c:90:b0:3a:3b:41:f7:5d:
         cd:7f:a9:ec:49:4a:b7:fa:89:99:dc:fd:0e:04:eb:fa:df:48:
         a9:74:f5:67:b0:f5:55:9d:91:6d:6d:27:c7:8e:f8:8d:b4:79:
         2d:cf:99:84:9f:94:65:5b:8c:f3:60:25:a8:7e:cd:5e:9e:ab:
         8e:90:24:84:e7:91:98:87:35:44:3d:a5:d0:a2:c9:c2:92:4a:
         e8:0e:77:3d:29:5e:e4:12:73:3a:bb:6b:86:d0:1a:9e:56:54:
         be:9f:3c:af:c1:17:a8:9f:10:ce:4e:21:0d:4c:33:a4:a2:60:
         c1:8a:e0:e9:02:c6:26:c5:e4:8a:7a:40:6a:fa:d0:a5:c2:a8:
         71:f8:a3:2b:a4:e0:90:a5:2b:63:d7:f4:8b:62:16:43:4d:f2:
         2a:01:7f:d0:f5:83:e0:b4:66:dd:c2:15:d0:7d:4e:4c:8d:aa:
         51:b8:fc:2a:c4:9d:34:90:f9:c0:f2:67:72:f0:a5:3d:a4:31:
         34:4d:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:42:21 2025 by rpki-client