Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa
File:                     20551fed-8091-3df7-8169-f36d6f164c32.roa (raw, json)
Hash identifier:          Gf0ZcJQ6I5ioQdOp0xJU7DKyplyofIL85BldQi7ucE4=
Subject key identifier:   B4:0C:7C:D5:0D:6C:07:99:F4:C1:0A:F8:1E:09:5C:27:6D:2C:56:41
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584ADD6683722155F7E1A42CA500
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     11650
IP address blocks:        216.176.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:83:72:21:55:f7:e1:a4:2c:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=d722734b-b8bd-48b0-980b-35e1920905c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:0f:61:1b:f3:7d:ee:f1:23:3b:a3:2a:b5:
                    79:6e:5e:5f:02:fe:3a:1d:80:6f:ae:0d:88:b5:88:
                    bc:4b:a5:bb:5d:cd:6f:a0:58:f9:a4:9c:e7:d2:fc:
                    bc:f0:3e:51:d8:a8:93:92:a0:35:20:44:2e:1c:e5:
                    a5:d7:8a:ab:f4:62:e9:12:8f:f7:2f:9a:d2:64:82:
                    54:6b:8f:77:0a:f0:6e:cf:bb:0e:d1:d6:97:fa:b4:
                    d3:b4:73:f8:4d:4a:fa:7b:1e:2b:c7:36:13:d5:e2:
                    04:25:f6:24:c2:0a:ad:ae:96:2a:30:2e:8b:67:a5:
                    2a:a5:ef:4d:6e:8f:9e:e9:cf:a8:63:f7:00:f7:81:
                    b1:25:59:f7:e0:bc:23:c4:a4:0f:2c:4a:4c:c7:33:
                    6b:76:fe:f7:2b:31:7a:1a:61:ff:da:98:16:c7:c2:
                    fa:f8:9d:40:a7:09:d3:5d:c4:7f:b5:18:7f:bd:71:
                    7c:79:cb:aa:0a:f3:45:40:8f:30:88:ad:83:ca:1a:
                    03:86:be:67:d7:06:91:80:fc:8a:8a:f0:bd:de:b4:
                    9b:46:2c:49:2c:f9:18:70:ea:74:d0:a0:9a:f4:de:
                    9b:bf:ec:a5:23:e5:f9:56:e3:b7:38:8a:44:78:f1:
                    0b:97:04:3d:53:9d:e3:62:19:ef:8f:db:86:03:f2:
                    33:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0C:7C:D5:0D:6C:07:99:F4:C1:0A:F8:1E:09:5C:27:6D:2C:56:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:37:e6:2f:7a:4a:88:7f:d1:a8:ef:6f:8f:e4:9e:5b:b2:a3:
         af:bd:49:1d:c1:a1:38:5e:b5:ef:61:a6:37:e4:f3:58:be:c3:
         a7:c6:1e:ba:61:11:cf:78:09:0a:cc:c3:76:e0:9e:bf:c5:17:
         e2:45:0a:bc:3f:18:ea:56:ec:27:d8:9e:e6:b2:93:5e:8a:04:
         b0:e5:c8:c9:ac:c2:64:d0:bd:9c:bd:87:8c:a7:af:38:21:b2:
         9f:71:8c:9f:85:01:32:60:25:17:5e:07:71:1b:ce:01:55:5c:
         07:aa:e8:83:f3:71:9f:c2:92:87:7e:ab:7b:7a:6b:f6:5d:2b:
         6a:da:da:1c:dd:24:e6:c0:03:3e:40:e0:24:4d:e6:ba:e4:8a:
         ab:d6:d0:7f:1f:c9:60:de:a1:36:a3:3b:a4:1b:08:8d:b9:fa:
         2b:b1:79:6c:ce:f2:ab:c6:af:db:4a:d1:17:99:b2:d6:83:86:
         26:7c:44:aa:92:2d:0d:6d:6b:72:ad:d8:7a:8f:ac:87:9e:8b:
         36:85:bc:a3:79:05:77:0e:88:8d:a4:b2:be:9e:1d:b2:48:d5:
         15:e8:3b:29:d8:27:c4:15:19:94:ae:af:6e:de:10:bd:a1:a4:
         8e:20:0d:e9:60:ec:07:45:66:91:ee:6c:1f:d8:52:1d:a0:8d:
         a8:cc:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 00:59:52 2025 by rpki-client