Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/e435fae9-0730-3b11-a8a1-03164503f229.roa
File:                     e435fae9-0730-3b11-a8a1-03164503f229.roa (raw, json)
Hash identifier:          BZp/QTZUmEUOQ/Gal9ox5g5U8g/nPcAzKSQzXqnB8aA=
Subject key identifier:   9F:EF:52:60:30:0E:7E:66:BE:27:61:04:8A:49:3B:1D:E2:4F:4C:EB
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F43285849C904E0E5A86AD4561AA96B80
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/e435fae9-0730-3b11-a8a1-03164503f229.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e0:e5:a8:6a:d4:56:1a:a9:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=ceb60250-d8c3-4550-88ac-e32e738cf3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d4:c0:3b:01:bd:8f:4a:10:ea:95:44:07:cc:
                    38:c8:a1:b8:8c:22:e3:3b:3e:0c:59:30:9b:52:4c:
                    75:87:14:b0:cf:98:56:48:43:49:d4:d3:28:e5:7b:
                    f1:98:6d:7f:b1:20:32:5a:6a:99:a9:9b:9c:7c:00:
                    ab:06:f2:78:97:7f:1f:47:77:a5:60:ed:2a:39:61:
                    c3:0e:ff:5f:0c:a5:a7:da:88:35:9c:d3:ae:4a:53:
                    fc:5e:de:5d:a7:1e:db:bd:e8:93:c8:d0:f6:6c:d2:
                    70:97:74:30:fb:1c:ca:cd:e1:b2:01:1b:05:0b:80:
                    97:02:70:c5:2b:af:9e:60:cc:f6:3e:a5:13:a9:8c:
                    e8:11:01:85:31:24:2a:03:03:96:5f:43:5b:42:ce:
                    43:2e:87:5f:aa:e4:0f:94:eb:af:fb:00:58:8d:bc:
                    88:48:e3:fc:b1:75:58:c8:fd:ab:68:40:94:f9:91:
                    02:0d:d9:28:55:1b:7c:b3:4d:15:df:b9:b0:d7:9e:
                    4e:53:49:a9:68:47:71:ba:8f:b3:f5:d3:af:b4:b1:
                    af:ed:53:cb:68:80:b3:50:06:33:95:d9:02:d0:93:
                    44:1a:72:53:e2:79:5e:3a:cb:81:bb:1b:fe:58:c1:
                    10:49:62:5c:0b:58:41:50:c1:bd:ce:55:98:91:9f:
                    62:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EF:52:60:30:0E:7E:66:BE:27:61:04:8A:49:3B:1D:E2:4F:4C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/e435fae9-0730-3b11-a8a1-03164503f229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b8:f3:02:a7:57:0d:bf:6f:5d:3b:a3:3a:7c:59:50:d8:4d:
         4b:ab:ba:d8:f3:1c:82:bc:5b:91:83:50:2c:68:bc:a1:84:fa:
         9e:6e:98:4d:48:5e:4b:5d:35:99:7b:55:c0:24:ff:56:0a:0a:
         0a:56:03:70:5f:ee:f3:34:26:c3:08:54:a2:a4:77:e4:6c:6e:
         23:19:92:5e:d1:3e:93:53:46:a3:01:c1:e0:10:e2:46:c8:aa:
         c0:10:6c:18:80:ee:03:89:53:19:70:cb:fa:44:d2:7a:40:bb:
         03:50:4e:33:07:56:ad:ff:d8:d6:e3:d3:34:1f:bb:57:d7:01:
         f5:37:dd:86:67:af:9d:f7:af:4f:e0:a8:f6:37:6b:13:6d:6d:
         d6:16:8a:18:ca:51:d5:d9:a6:0e:2d:f3:ad:88:2d:a4:d5:45:
         8f:0e:c2:a4:75:58:8a:c1:00:44:71:0d:0e:82:e1:cc:37:d7:
         4b:de:b2:b1:ec:e8:51:e1:06:fd:d7:75:0e:7f:a5:af:df:b7:
         42:e5:75:42:80:f3:09:fc:13:fa:77:a8:ef:d2:b9:0a:91:ee:
         74:71:3c:19:19:73:c8:49:a0:52:46:03:f3:4a:31:2a:29:ca:
         a2:86:1d:98:d0:11:a7:92:2f:e0:4c:e8:2e:0d:f8:a0:96:91:
         3f:51:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:28 2025 by rpki-client