Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/d1bcc3f0-32f8-3119-a880-ec2798ff0eb9.roa
File:                     d1bcc3f0-32f8-3119-a880-ec2798ff0eb9.roa (raw, json)
Hash identifier:          lZlj03n+0iNi1H6VqwvqyGo4BMXGzEuGs+bkshRsHyM=
Subject key identifier:   20:4A:87:7F:7B:DE:4C:9D:A8:55:A9:E7:1B:80:17:D7:5A:32:CD:57
Certificate issuer:       /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial:       010D0C9F43285849D594E0D9ED65E8536DB8BCC0
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/d1bcc3f0-32f8-3119-a880-ec2798ff0eb9.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16796
IP address blocks:        216.73.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e0:d9:ed:65:e8:53:6d:b8:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=3b7f108f-6108-4f10-98ee-ed85d576c3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a0:b2:19:d5:b0:0d:d0:7f:35:ac:2f:63:42:
                    7c:7a:d3:af:c4:17:d3:8c:e8:60:b0:1c:ae:fb:fa:
                    1b:fe:65:21:00:24:66:e8:e9:c0:5c:7e:f1:48:2f:
                    a1:28:ce:3f:f1:1d:2a:ac:46:e8:ad:d9:7e:1b:18:
                    66:21:94:55:c9:f3:3d:da:71:89:33:9e:64:d9:fe:
                    40:6b:53:6c:63:69:10:11:28:c0:95:0f:de:a1:1a:
                    51:52:29:4d:8c:f5:73:9d:73:5f:ef:03:10:61:8a:
                    0c:a0:d8:87:97:e4:a0:82:d1:8f:e7:7f:62:d4:8d:
                    c8:64:6c:dd:cc:7a:9f:bb:51:55:2f:28:ec:3b:81:
                    28:f8:6f:91:e0:70:36:fc:9b:22:1a:f3:e7:18:b2:
                    df:c8:ff:a5:6c:b0:00:14:1c:d9:8c:20:45:97:e2:
                    d4:bb:af:00:f7:cc:e2:d1:59:14:ca:e3:9b:17:d0:
                    e5:2b:62:d7:89:47:06:2c:dd:d0:c7:40:a8:b9:b1:
                    d9:73:8e:02:62:2c:67:b8:60:11:54:f0:8a:9c:36:
                    cd:65:f4:a0:d4:14:84:56:3a:09:bb:63:06:e7:83:
                    1f:44:81:eb:df:ce:38:c7:fa:0e:90:9c:b5:1f:ac:
                    66:90:ab:94:21:7f:84:34:ae:b1:c3:8e:da:c9:72:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4A:87:7F:7B:DE:4C:9D:A8:55:A9:E7:1B:80:17:D7:5A:32:CD:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/d1bcc3f0-32f8-3119-a880-ec2798ff0eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e3:02:2f:4e:75:9b:ec:46:d7:9c:f8:4d:65:0a:a2:b4:ce:
         e9:2a:df:78:88:b7:c5:a0:ce:9f:9a:07:0d:d0:c8:e6:e6:24:
         3f:76:ca:28:85:35:2d:9d:07:9f:37:04:91:d5:28:17:2a:43:
         95:41:a3:11:5d:6c:a9:96:4f:86:4a:3f:22:d3:19:1f:67:7d:
         e1:1e:35:6a:c7:a6:90:de:c3:02:ee:f7:d6:59:5f:3a:87:b2:
         2d:d7:49:54:b9:81:56:b3:a9:8a:64:40:21:1d:51:f4:b1:a9:
         09:f2:7d:04:9e:25:08:b5:3a:f9:03:87:66:a7:4e:3c:c3:1c:
         b4:a5:58:93:f8:15:8c:cb:9a:27:56:b4:b6:aa:50:0f:95:f2:
         9f:61:e0:80:f9:b6:67:6c:1a:5f:02:aa:4e:26:38:dd:dc:bd:
         b7:e8:c2:3a:eb:42:d6:f9:f6:b1:f2:0b:24:5a:2d:71:f0:a7:
         61:b0:51:ce:5d:f4:8a:9f:0c:8c:58:fe:0a:5c:a8:e4:e4:20:
         c1:16:70:41:d3:15:07:28:6a:8c:43:68:a9:37:e8:de:30:a1:
         40:cd:1e:88:d4:4d:91:a3:8e:84:be:12:97:21:d5:ea:ec:06:
         4a:e9:8a:cb:a1:93:f2:52:6c:17:c7:cf:30:b2:0d:49:69:18:
         0a:6d:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:03:16 2025 by rpki-client