Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/20476913-9c8c-312f-bcc1-4f9bf6fb665c.roa
File:                     20476913-9c8c-312f-bcc1-4f9bf6fb665c.roa (raw, json)
Hash identifier:          e+M3iBzB4mo2V+PRthhT/q3Vn2s+Yd84YEWWA8ky5ik=
Subject key identifier:   62:0E:48:2D:E0:A9:93:81:06:B2:91:04:E2:3C:32:F9:48:5F:F6:BE
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F4328584A9FFB8C6A9018F0005E18E440
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/20476913-9c8c-312f-bcc1-4f9bf6fb665c.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     11550
IP address blocks:        162.219.196.0/22 maxlen: 24
                          173.243.176.0/20 maxlen: 24
                          199.96.120.0/22 maxlen: 24
                          204.89.253.0/24 maxlen: 24
                          216.249.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:8c:6a:90:18:f0:00:5e:18:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=b0c207d9-66a2-489e-bc23-0ed50b6946a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4b:cc:ab:89:6d:00:94:57:3f:02:0c:11:04:
                    4e:7f:3d:42:95:97:a6:71:29:40:97:99:0c:b1:f8:
                    ac:b0:42:88:a1:68:1a:af:58:0b:c7:88:c2:1c:56:
                    06:ff:d4:95:0f:40:13:22:28:22:49:ea:ca:1b:86:
                    df:cf:60:79:78:60:fb:54:7d:27:14:30:18:33:06:
                    22:05:de:d9:c3:9c:8d:9f:f3:54:0b:ff:5e:b2:50:
                    06:98:82:cb:38:a6:7b:ad:7c:1a:09:c3:d3:f9:23:
                    a0:78:b6:99:6e:a0:5d:84:ca:fd:f4:be:94:0a:2a:
                    ec:2d:8f:77:f1:39:74:6d:97:33:c6:9a:4e:06:80:
                    20:9d:e0:c3:13:cf:b9:71:5e:95:c4:ff:f1:63:44:
                    eb:53:21:4c:9b:9a:50:6b:f8:6e:33:6e:54:2f:7d:
                    72:da:bd:3c:0c:f6:bd:c9:ce:c4:97:73:f3:c3:b7:
                    8d:2e:1d:43:cb:04:65:4f:cb:83:c7:bd:07:89:27:
                    7a:fe:89:c9:ac:f2:da:e3:66:57:a6:bc:7d:87:24:
                    ba:12:26:f8:90:9f:ce:24:a7:db:bd:61:df:37:3d:
                    5e:de:92:c6:7a:1d:66:c7:0e:a2:c2:10:0e:50:19:
                    c8:4d:51:d0:5f:ad:3f:88:35:65:50:b1:74:bb:d5:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0E:48:2D:E0:A9:93:81:06:B2:91:04:E2:3C:32:F9:48:5F:F6:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/20476913-9c8c-312f-bcc1-4f9bf6fb665c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.196.0/22
                  173.243.176.0/20
                  199.96.120.0/22
                  204.89.253.0/24
                  216.249.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ba:42:cf:66:af:f2:03:88:b6:a6:10:d8:01:47:65:41:b0:
         31:e1:37:5a:15:88:6b:c2:1f:e1:5c:77:a2:88:c9:99:62:7c:
         07:5d:41:db:5d:7f:40:69:2a:52:26:87:ed:09:38:e4:f6:7c:
         51:77:86:7f:5c:2f:09:90:c6:a7:d2:18:31:43:25:84:70:ff:
         94:85:ec:7b:23:39:e2:73:9f:96:b1:62:ae:6b:f3:02:e4:51:
         96:95:a9:46:62:ad:76:63:aa:10:3b:f5:51:f4:49:8d:ea:70:
         bb:10:40:7e:90:6e:40:a3:b5:91:9a:01:0a:d3:cb:4f:96:22:
         de:66:95:64:62:e7:18:e4:8c:c4:e9:8e:9d:28:82:e0:05:78:
         fe:03:ba:25:c6:9c:2a:2d:87:19:ec:b6:48:c3:53:2f:98:0f:
         6a:0b:a1:4f:7e:f7:8d:d1:4e:ac:de:db:e4:1c:af:f0:ed:33:
         c7:d4:ee:83:4c:6c:08:e5:66:d7:75:25:89:f9:a2:2b:fe:0c:
         e5:57:95:63:c8:5e:de:80:1e:f1:19:20:d0:28:4c:48:32:2f:
         3a:11:a5:92:7c:d6:ca:86:8d:69:b6:bc:ca:06:a6:87:4f:ea:
         65:6f:bd:16:f6:2e:05:48:0f:83:a9:e2:03:11:a6:a9:a7:ba:
         9a:6f:d1:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:11:51 2025 by rpki-client