Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa
File:                     c96c620b-bc50-3f60-a167-5552b8cc9d25.roa (raw, json)
Hash identifier:          p3s+1t2/zRxnepCV9puzOg20a447XdmqMKysVh/zFuo=
Subject key identifier:   3C:EE:64:3E:A1:E1:64:36:62:41:1D:6B:5B:3F:F6:8C:D0:BC:03:18
Certificate issuer:       /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
Certificate serial:       010D0C9F4328584A0C0568C6380A6EAC04C93F80
Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     32121
IP address blocks:        142.152.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:68:c6:38:0a:6e:ac:04:c9:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=764b3ad3-8928-4911-8519-3b9609ae7fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:00:5f:23:3d:cd:b1:6b:6a:a8:83:46:b3:
                    e2:92:a9:2f:32:c5:3f:78:57:a4:cb:5c:4a:0b:59:
                    80:ae:f7:c4:4f:d4:f0:61:2a:a5:cf:ea:02:7f:72:
                    fc:b6:80:ec:41:11:3b:83:b5:29:ba:61:6b:db:7b:
                    c5:b1:ab:0d:7d:d2:15:d4:6b:76:89:85:ba:34:71:
                    8f:c2:fe:3b:36:44:69:89:bb:f9:43:0c:70:f9:49:
                    e4:6b:44:18:1d:cf:87:db:4f:20:c8:26:7a:42:13:
                    74:0a:3d:fd:8a:35:f3:eb:d3:ab:b9:52:39:87:e0:
                    26:5f:98:18:e1:9d:58:d3:89:ea:a8:89:8b:c8:8d:
                    0e:6e:8d:0c:70:19:b4:78:7c:ea:2f:db:6d:ac:69:
                    0f:d0:be:3e:60:b5:ac:9e:35:1f:f2:97:cc:5b:1f:
                    cb:b8:00:d8:ef:21:39:b5:88:b1:0d:08:39:f7:70:
                    dd:68:37:b0:f9:50:90:0a:af:94:7e:58:c5:7a:8a:
                    43:aa:b1:fd:05:e9:a7:6c:d7:a2:30:b7:b2:76:a4:
                    ef:1f:c0:0d:3d:c9:f6:9f:e4:29:0d:92:a6:da:d9:
                    83:ef:12:a1:63:f3:8d:9c:5c:86:c9:76:bc:2e:c1:
                    9e:1e:34:4c:ac:bf:61:6f:1f:82:9d:87:79:19:6e:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EE:64:3E:A1:E1:64:36:62:41:1D:6B:5B:3F:F6:8C:D0:BC:03:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl

            X509v3 Authority Key Identifier:
                keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.152.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:4e:e6:03:b6:22:8d:a7:22:b8:86:dd:6b:8f:29:e5:77:f1:
         b4:8d:9e:7a:4c:1f:e4:a6:35:24:6b:6d:1b:b2:a9:08:68:0a:
         42:ef:c4:4a:44:9e:8a:a5:6c:0e:70:e3:50:51:61:b4:7a:47:
         3c:77:15:99:c2:cb:49:bf:ca:f7:bc:2a:34:b3:f8:be:74:dc:
         33:9b:39:8c:aa:0b:27:14:d3:d1:14:e8:db:4c:89:a8:55:6e:
         01:1b:7a:f1:24:c3:82:4e:e8:62:2d:84:1d:30:fb:14:04:1f:
         b0:eb:9a:45:37:ae:ff:d9:ac:04:1a:7e:2a:0f:1e:ac:f3:89:
         4c:8a:3e:1c:d1:0e:27:4b:2a:d1:9d:d4:ed:34:c0:43:0f:20:
         94:8c:60:59:57:fc:bf:99:92:76:a2:df:25:53:f8:1d:02:b4:
         f1:39:db:dc:28:18:a5:e6:a0:f3:80:a6:5f:28:5c:22:39:a3:
         3d:a4:71:d2:fb:d0:e6:09:02:07:55:c2:a2:e3:f5:3c:21:b2:
         ae:8a:f1:8c:fd:88:a7:52:32:09:ad:73:d3:9b:5c:c8:a5:42:
         50:24:02:8f:41:be:d0:2d:ea:45:e9:fb:59:d7:80:05:ac:e1:
         6a:89:e1:0f:3f:75:bd:95:b4:cc:8c:6c:90:55:55:71:76:85:
         fd:a5:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:42:36 2025 by rpki-client