Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa
File:                     3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa (raw, json)
Hash identifier:          ylefdJAseLyA4brhQR3o08Bftevz/30VKjoFj8JuE8s=
Subject key identifier:   46:A6:02:AF:1C:19:8E:CB:4E:8D:09:AF:06:C4:9B:55:DC:23:CD:AF
Certificate issuer:       /CN=e64236ac-e54b-4545-b57e-b971e5d37968
Certificate serial:       010D0C9F4328584A6C55D380BD725DFFE0C3D500
Authority key identifier: 1F:1E:FB:D3:BD:0C:4D:7E:4E:CA:5E:18:6C:21:A0:0B:AA:0F:0E:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     16478
IP address blocks:        216.162.112.0/20 maxlen: 20
                          216.162.112.0/24 maxlen: 24
                          216.162.113.0/24 maxlen: 24
                          216.162.114.0/24 maxlen: 24
                          216.162.115.0/24 maxlen: 24
                          216.162.116.0/24 maxlen: 24
                          216.162.117.0/24 maxlen: 24
                          216.162.118.0/24 maxlen: 24
                          216.162.119.0/24 maxlen: 24
                          216.162.120.0/24 maxlen: 24
                          216.162.121.0/24 maxlen: 24
                          216.162.122.0/24 maxlen: 24
                          216.162.123.0/24 maxlen: 24
                          216.162.124.0/24 maxlen: 24
                          216.162.125.0/24 maxlen: 24
                          216.162.126.0/24 maxlen: 24
                          216.162.127.0/24 maxlen: 24
                          2620:11f:4000::/40 maxlen: 40
                          2620:11f:4000::/44 maxlen: 44
                          2620:11f:4010::/44 maxlen: 44
                          2620:11f:4020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/e64236ac-e54b-4545-b57e-b971e5d37968.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/e64236ac-e54b-4545-b57e-b971e5d37968.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d3:80:bd:72:5d:ff:e0:c3:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e64236ac-e54b-4545-b57e-b971e5d37968
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=9c31df2c-3f41-42f8-b1c3-799fb7444e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:31:f7:ca:3f:6f:c1:79:83:04:52:4d:52:
                    fc:40:79:d8:3b:56:73:31:0c:4b:bf:13:12:4b:0d:
                    38:08:e7:ad:67:92:ed:76:8e:9a:38:04:60:b0:b7:
                    d5:c5:d4:10:8d:f9:13:4b:41:8b:16:b0:f0:0a:60:
                    11:64:1c:bc:f1:ee:6c:bd:76:ee:0c:33:9e:9b:15:
                    f7:25:d8:4b:d5:fe:10:d6:fb:ec:d7:75:d9:c1:a5:
                    eb:79:58:a8:67:db:5e:f5:b9:7a:42:19:68:28:2a:
                    62:4a:a3:d5:02:21:e0:4c:10:3f:c0:4b:b6:49:38:
                    6c:fa:85:cf:1c:5b:5f:f3:e3:fe:ed:99:6e:c7:aa:
                    e9:5f:2f:84:4f:ac:b9:db:6f:95:51:da:65:0e:ec:
                    d5:31:71:95:68:71:7e:1b:f8:9e:e8:84:bd:19:21:
                    3c:d8:3c:2a:7e:c9:32:6d:5f:e4:f6:e9:a9:ad:0c:
                    61:e3:c5:4c:bf:f7:35:2e:c3:5f:e4:a2:fb:bf:f6:
                    80:d3:6c:48:d7:7a:7d:e6:cf:0e:5b:d8:98:36:00:
                    82:a6:a3:78:ec:12:13:78:eb:55:6e:18:bf:46:6b:
                    01:e6:60:1b:13:0a:46:03:4e:91:ad:05:8d:6b:13:
                    32:6d:76:42:de:8c:93:1f:58:d9:0b:fa:8a:b1:cb:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A6:02:AF:1C:19:8E:CB:4E:8D:09:AF:06:C4:9B:55:DC:23:CD:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/e64236ac-e54b-4545-b57e-b971e5d37968.crl

            X509v3 Authority Key Identifier:
                keyid:1F:1E:FB:D3:BD:0C:4D:7E:4E:CA:5E:18:6C:21:A0:0B:AA:0F:0E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.162.112.0/20
                IPv6:
                  2620:11f:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:98:03:d8:4d:7f:68:59:5a:69:6e:63:f3:1d:35:42:3e:b7:
         77:49:93:13:3b:8c:4a:26:d6:2f:5f:f1:16:3c:d3:e2:02:b4:
         9e:24:f9:6a:40:8a:33:90:71:09:cf:eb:13:76:c0:f5:63:05:
         62:e7:45:01:d6:f0:5f:2a:54:2c:f1:e6:79:77:1d:d7:fb:7f:
         19:8c:c6:ce:ba:c0:06:dc:d4:ae:10:b5:c0:9f:d1:f3:b2:ce:
         ee:4f:04:7e:d9:0a:86:f6:7e:cd:e0:71:f5:35:d6:af:0b:da:
         8e:2c:3b:b9:88:2e:be:d6:cd:c6:15:7b:eb:7f:4b:66:e3:68:
         03:15:66:c5:50:9e:6b:cc:70:c9:87:7c:5d:c8:3f:8d:a7:ea:
         a7:78:1e:ba:5a:29:14:77:c6:5f:14:c9:e7:ef:fc:5d:3f:da:
         b9:0c:c7:ea:5b:cb:d7:8c:5e:7a:c2:75:ac:c9:c0:d9:91:27:
         1a:c8:68:4e:c1:1b:15:31:79:eb:ed:ce:e6:62:81:8f:72:5b:
         17:71:d1:2d:75:e1:89:da:31:86:8b:93:b2:27:87:5b:ed:82:
         f2:49:76:a9:3b:d7:f0:3a:2c:0a:8d:f7:af:af:2a:24:a1:f4:
         22:73:cb:aa:33:4f:74:26:f1:90:44:8e:dc:ca:f4:16:06:57:
         5b:fe:6a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:04 2025 by rpki-client