Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa
File:                     b7134fac-817f-3d3b-94d7-fe93439e4a04.roa (raw, json)
Hash identifier:          kgazdN4XchfCjK8+wTEVLhikVTrtB0o0LjrnzN7FUpE=
Subject key identifier:   3C:9D:59:E0:0C:FF:36:FF:72:FF:8B:7B:5B:34:8C:7C:B7:FA:2F:A4
Certificate issuer:       /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial:       010D0C9F43285849F7151BBDD2C8F95D119A8B00
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     20326
IP address blocks:        64.130.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1b:bd:d2:c8:f9:5d:11:9a:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=cf20236d-b159-4c26-b570-97454262dfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:b9:27:88:95:f6:bf:ea:77:84:c8:fd:81:
                    bb:53:d4:72:38:77:82:30:61:ee:aa:b6:73:98:ad:
                    27:94:41:f1:0d:ce:28:15:1a:55:2d:40:88:b7:68:
                    db:c5:63:90:d5:71:93:dc:97:8c:08:1b:40:d5:ff:
                    1d:2a:c7:4f:89:5f:f5:2c:25:18:86:09:ee:17:98:
                    42:49:4d:da:49:01:a9:54:7a:9c:ff:68:2a:ce:c9:
                    a9:ec:1c:6f:4d:f8:c2:55:92:ff:3b:69:7e:2a:97:
                    0f:5d:be:19:ca:31:8f:47:dd:72:5b:84:36:b4:61:
                    94:c0:5a:87:28:dc:49:2b:17:c7:33:4b:90:89:89:
                    f2:13:29:5d:3e:21:e2:b3:8a:54:52:f0:96:61:3b:
                    0a:d0:c8:cb:1a:00:bb:0a:3a:27:18:72:44:33:5a:
                    67:67:9e:e6:10:59:84:b7:84:08:12:56:f9:7c:02:
                    92:45:59:df:3e:a5:23:0c:78:c2:26:a6:38:f5:29:
                    35:f8:de:6a:c0:28:ac:58:ee:fb:0b:f1:97:a3:db:
                    a2:0e:bc:ed:a7:ea:e9:37:2d:65:df:82:f3:5e:95:
                    f2:7b:50:ad:d9:07:9c:e4:70:db:b9:45:ef:68:b6:
                    0e:7a:16:16:9e:a0:18:47:31:64:e0:52:9c:b9:c4:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9D:59:E0:0C:FF:36:FF:72:FF:8B:7B:5B:34:8C:7C:B7:FA:2F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0a:69:16:84:9f:a5:22:5b:44:dc:60:94:2f:87:a8:3e:a6:
         4e:d4:4d:0b:86:82:8c:58:0e:d6:9a:74:0f:74:fc:48:5b:66:
         95:c2:56:0d:16:7d:40:35:4d:de:08:71:30:96:1e:4c:36:de:
         61:56:a0:63:76:8e:2c:aa:1a:9e:26:74:5c:de:06:3f:62:4d:
         5b:f7:42:35:da:72:8c:a1:b0:be:8d:de:73:1b:d5:27:1a:9b:
         38:34:96:2c:5d:68:3c:91:47:23:7a:28:ad:d9:c6:16:c5:d6:
         6c:d1:73:af:38:9b:c6:2a:00:6c:b9:c9:e9:fb:4c:2d:9e:d2:
         4f:3a:d3:f4:c1:16:a4:70:4a:ec:21:6c:b1:37:27:93:c6:21:
         16:03:d5:1e:25:81:0c:de:29:70:a9:8c:b4:2c:8d:7c:09:aa:
         bb:a5:f8:7c:9f:47:99:1d:e2:01:f0:8b:5e:c0:c0:db:1f:b4:
         1f:f5:a9:66:fb:24:95:de:91:53:1a:8b:4e:24:f4:98:de:3f:
         8f:14:31:56:76:c9:5f:f0:da:86:e7:17:1e:a3:12:40:9a:6f:
         8e:e7:75:b3:cf:80:76:a9:f9:1e:5c:16:9d:60:7f:bf:f8:5f:
         ef:63:9f:38:a8:9f:01:db:d3:c5:b1:55:f4:f6:e7:90:50:43:
         2c:24:28:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:25:38 2025 by rpki-client