Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa
File:                     771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa (raw, json)
Hash identifier:          Jz7K1DQpXcwBNPk1j2TC9Ly1Qd6chNz7Ng9cnd5s8uc=
Subject key identifier:   F7:3D:C3:DB:83:DB:F0:01:B4:0B:B6:73:05:87:6E:9C:A8:8C:B8:3B
Certificate issuer:       /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial:       010D0C9F43285849FE0FFEA07B6C67A728366E70
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     13506
IP address blocks:        164.95.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:fe:a0:7b:6c:67:a7:28:36:6e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=26825dd2-2c4a-45e7-b1f3-5750142e1508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:db:5f:45:9d:a1:d4:b3:b8:06:c1:e2:7d:26:
                    62:d1:56:49:56:51:e7:7a:cf:7b:b3:10:9b:b4:d5:
                    2d:b9:c4:a2:3c:1c:28:70:69:8f:36:90:c4:e5:4c:
                    3c:5a:e6:78:6f:25:e3:88:55:c0:f6:bc:fe:09:6a:
                    83:a9:71:1a:af:b4:fc:b3:c6:27:00:60:b3:5c:50:
                    9b:9e:9d:a1:2c:3f:59:dd:a8:00:5b:da:b1:68:4d:
                    53:57:88:0b:0d:96:c3:57:43:d1:5d:f9:a0:b5:c9:
                    a1:fd:d3:82:f0:84:28:6d:86:91:d2:bd:41:d2:c1:
                    be:93:b9:51:47:a5:04:c3:ba:d1:5e:cf:69:2e:43:
                    e2:a3:7c:14:b5:d2:0e:8b:45:ae:0e:9a:b0:9d:c5:
                    1d:88:6d:ec:05:01:b9:5c:3c:f2:05:9c:0e:db:30:
                    57:c2:0c:e7:ef:04:43:c9:2f:b8:4e:54:c3:46:bb:
                    e8:c8:ff:29:7b:59:cf:69:9b:f8:36:d7:01:07:76:
                    3f:57:e4:32:e7:7c:e4:66:a6:01:60:8f:44:7c:cd:
                    b9:04:f1:5a:d8:45:ef:63:35:8f:3a:bb:88:b4:74:
                    1c:7b:1a:d5:3e:3f:62:d3:f6:92:fc:c9:02:e9:33:
                    8b:0c:11:3c:61:a1:ee:80:93:da:c3:b2:69:82:43:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3D:C3:DB:83:DB:F0:01:B4:0B:B6:73:05:87:6E:9C:A8:8C:B8:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:fa:7a:61:95:b6:47:53:d5:49:ff:4c:a8:40:85:8e:7c:40:
         99:ea:bb:0a:a6:af:ac:13:14:f0:35:1f:42:65:ab:36:64:27:
         1f:eb:37:f3:e0:05:d0:45:a5:74:12:ee:a1:5b:bb:76:a3:7e:
         83:46:e6:29:aa:59:3c:fd:6c:d0:50:94:d2:c1:39:24:96:64:
         8c:ef:19:7d:05:02:ba:36:f2:ad:95:db:7a:57:0f:b4:a2:f3:
         68:01:77:8c:84:d1:d1:f9:c5:a0:36:9f:57:55:62:c2:56:f6:
         ca:7c:1e:19:44:62:38:16:f7:b0:5d:96:5e:21:d3:8b:b3:d7:
         1d:41:6d:9e:02:55:3b:9b:4a:38:df:2a:88:53:9c:af:4b:31:
         c4:9b:80:63:9e:51:6d:57:69:f7:7a:68:22:85:c7:40:18:6d:
         7f:1e:3a:ee:f0:9d:5d:e0:d0:29:b2:1f:74:af:d6:62:d0:6d:
         f8:03:bc:03:55:21:80:f6:32:64:3d:1e:c4:d6:4b:b4:83:1e:
         c3:b2:d4:4c:a5:86:b2:90:cb:74:98:bf:18:0a:8f:1e:2c:62:
         9e:ef:1b:25:3b:b8:fb:c8:43:2b:76:29:da:ea:63:b3:1d:99:
         32:6b:68:c9:6f:1d:95:c1:b3:a0:51:2a:e6:a8:73:de:68:12:
         99:b3:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:09:40 2025 by rpki-client