Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa
File:                     ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa (raw, json)
Hash identifier:          7V5aaOr6omE3bohebeX3V950XxmRZWhObvjYvp7a9fs=
Subject key identifier:   B6:3B:2F:20:12:EE:34:5D:46:B3:F7:E8:D6:A6:25:E8:64:55:F5:F0
Certificate issuer:       /CN=41025fc8-e6c8-4422-acea-8126840c20bb
Certificate serial:       010D0C9F43285849DC8FB35DA93B96B7E7139E80
Authority key identifier: C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     14574
IP address blocks:        216.176.96.0/19 maxlen: 24
                          2607:a700::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b3:5d:a9:3b:96:b7:e7:13:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41025fc8-e6c8-4422-acea-8126840c20bb
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=7833ebd4-19fa-4244-a46b-435e673a34b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:f1:c3:26:4c:cd:04:1c:6e:67:fa:e2:79:
                    4f:dd:95:6c:d9:64:1f:e8:0c:1c:f4:65:55:ab:5b:
                    48:a4:7d:ca:c1:15:4e:7d:99:d1:94:4b:c6:ee:b1:
                    03:74:2f:0a:50:16:64:79:27:98:20:f4:3a:ee:42:
                    c1:31:91:0f:9e:42:53:3f:97:25:cf:2e:5f:b1:93:
                    d8:06:ef:14:56:15:49:60:80:0b:65:8f:f2:06:53:
                    f0:dd:27:5f:ea:b8:54:fa:ed:70:df:53:4f:18:c9:
                    81:d9:12:92:68:54:81:51:c0:d6:2c:af:1a:02:b6:
                    5f:64:4a:1e:08:bd:92:55:6b:f9:56:46:a1:c9:6a:
                    af:d3:84:55:0d:16:e5:48:95:9e:40:44:6b:8b:2e:
                    19:c8:5c:cc:0b:6d:20:0d:78:7f:81:b2:ab:1b:5a:
                    47:4f:27:fe:9a:cb:73:8f:0e:69:b4:c7:fe:ec:73:
                    9d:fc:c0:c7:60:9f:39:38:8a:e6:4c:11:25:cf:e1:
                    c8:f6:f5:09:a5:5d:96:07:c7:bd:21:97:8c:6f:78:
                    29:3e:6d:dc:0e:fa:89:53:a0:d7:21:64:90:7e:37:
                    b5:e2:72:94:85:ab:e7:ee:ef:e6:22:5a:90:40:01:
                    e3:b1:88:27:34:0d:ed:60:f4:03:00:85:18:45:20:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3B:2F:20:12:EE:34:5D:46:B3:F7:E8:D6:A6:25:E8:64:55:F5:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.crl

            X509v3 Authority Key Identifier:
                keyid:C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.96.0/19
                IPv6:
                  2607:a700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fc:10:0f:ee:4e:f4:48:8f:ec:74:18:f2:98:7f:58:d6:b8:
         df:7f:6d:16:0e:1f:ce:74:1e:d0:ab:8e:f0:58:c6:40:f5:48:
         4f:aa:c2:1c:94:81:d1:90:ba:99:f7:87:e9:37:d0:11:6a:31:
         ea:d4:8e:34:21:ce:4d:b4:09:61:10:26:94:4c:5e:1f:4b:56:
         32:f8:17:c3:0e:e5:11:ef:cf:f4:09:8e:4d:02:14:91:3d:b5:
         46:58:59:d7:c9:24:4b:98:14:d7:bb:a4:6f:91:1a:19:f2:67:
         30:a0:06:1e:e1:9e:13:6d:b9:12:e7:bc:43:fb:d9:58:f3:14:
         2c:08:07:b0:f1:cd:c4:a0:24:a0:4b:81:33:33:4b:a0:71:e5:
         4a:67:98:25:7f:d9:53:95:f6:d6:41:25:1d:4a:d2:a2:13:33:
         b9:2f:1c:41:06:1a:63:67:07:d7:a1:a1:e0:97:14:8f:cf:a5:
         ea:f9:12:40:44:3a:9c:e0:38:c5:6c:ea:c9:c6:a6:50:04:10:
         a2:ac:59:3b:0c:a2:6a:8f:b4:04:5f:ac:43:93:66:1f:77:04:
         94:5c:e8:e7:44:df:cc:3b:0f:4d:e1:ec:af:c1:00:8e:85:4b:
         68:d0:cc:dd:9b:51:cd:38:36:68:d0:31:60:29:7b:cb:8e:ca:
         fa:72:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:00 2025 by rpki-client