Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/402d792e-55f9-359b-9600-499299195f62.roa
File:                     402d792e-55f9-359b-9600-499299195f62.roa (raw, json)
Hash identifier:          qEdwFDgI45oc4qS8UiL7A+YDh4g0T+pabxBMbP8ocOI=
Subject key identifier:   16:14:F9:43:C1:F1:FE:0F:47:ED:C9:6A:78:79:6D:89:DA:AF:C1:B5
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858493847A03059D2EB8DF45B9600
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/402d792e-55f9-359b-9600-499299195f62.roa
Signing time:             Mon 17 Mar 2025 16:43:25 +0000
ROA not before:           Mon 17 Mar 2025 16:43:25 +0000
ROA not after:            Sun 15 Jun 2025 16:43:25 +0000
asID:                     16696
IP address blocks:        216.120.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:38:47:a0:30:59:d2:eb:8d:f4:5b:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Mar 17 16:43:25 2025 GMT
            Not After : Jun 15 16:43:25 2025 GMT
        Subject: CN=669c0d59-307a-4580-967f-319a1e0ccb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:56:9f:60:f2:0c:be:2d:ea:14:59:89:4d:
                    c8:b6:3f:6c:91:49:bd:13:dc:33:33:27:0a:47:df:
                    82:fc:e6:df:03:45:57:7a:05:ce:b1:87:ec:2c:f8:
                    28:9f:e3:a2:5e:1c:20:49:d1:c7:fe:ed:1c:e9:22:
                    09:18:d0:4b:09:66:74:92:06:b5:2b:33:be:bf:2a:
                    ca:c4:7f:92:cb:c5:87:c0:f1:87:73:25:fc:84:af:
                    e1:e2:65:32:b2:fa:29:06:64:94:68:ad:e6:fa:a2:
                    5c:71:71:15:26:e4:b4:74:a7:1a:d8:d5:a3:8b:e1:
                    f0:54:df:c6:1c:d2:ef:19:70:9c:ac:3a:54:aa:f7:
                    32:68:33:e2:52:42:69:74:83:9f:21:d1:d6:43:0b:
                    f6:16:56:0e:74:03:40:9d:33:ad:8a:27:e8:18:13:
                    1c:38:e7:04:f4:ff:28:54:17:b1:d8:75:66:07:2c:
                    ce:fb:dc:cf:91:0b:23:cf:49:f8:4f:a4:83:b1:0a:
                    0d:b8:8a:25:0d:32:65:d4:f6:23:e4:ec:70:0a:79:
                    ba:dd:fc:79:d2:af:32:6f:4b:02:30:5d:fb:89:d6:
                    e4:ab:bd:fe:4e:c9:ec:22:31:17:92:05:48:26:9e:
                    b3:d5:99:c1:18:5f:7a:53:81:f7:ca:b6:55:7b:89:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:14:F9:43:C1:F1:FE:0F:47:ED:C9:6A:78:79:6D:89:DA:AF:C1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/402d792e-55f9-359b-9600-499299195f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:33:1e:b3:e0:dd:5b:03:a0:ea:df:23:f1:ae:4a:21:e9:69:
         37:c2:16:b7:ad:c3:6b:ef:15:26:9a:5d:fd:1a:1f:41:26:70:
         f0:31:b7:20:1a:b1:0a:b9:05:43:5c:98:19:ef:90:06:09:5d:
         05:2e:dd:ba:4e:f6:02:b5:36:9f:d1:53:75:cc:e9:b4:3e:f8:
         db:d3:47:db:ed:26:52:6a:b4:f6:9a:18:85:50:c0:03:c1:ab:
         f6:c3:74:d6:26:32:60:bc:fb:f8:a1:58:6f:fa:2c:13:83:02:
         d0:04:73:f7:e5:9a:37:8a:d7:be:79:b6:71:6e:5a:f4:53:d2:
         4b:c5:af:3f:37:f8:3f:a4:b1:44:94:13:57:8e:cc:91:07:56:
         51:06:7e:a5:ca:c1:91:b0:1e:b1:5b:fc:64:07:a1:b0:c2:73:
         b6:11:40:3d:21:e0:38:ce:ba:f6:5d:f2:3d:54:68:8a:bc:a6:
         f0:8a:93:da:b1:a1:6b:9d:61:25:0b:3d:b8:75:e8:71:f9:6f:
         a8:cd:ab:fc:df:ec:27:22:75:7b:15:96:b3:df:5b:5a:4d:d7:
         c0:dd:77:72:dc:39:fe:29:90:37:01:33:68:c6:43:66:21:7f:
         8d:be:64:68:d7:0c:e9:1b:7c:3d:7e:29:f1:1b:a4:a4:02:a2:
         0e:c0:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:58:55 2025 by rpki-client