Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/a9a3e9c8-2402-336a-afdc-870114a71c7d.roa
File:                     a9a3e9c8-2402-336a-afdc-870114a71c7d.roa (raw, json)
Hash identifier:          jBHkhUv59hKzy3ljs1vee60ynH/dgg5Z1fTGI6yblJg=
Subject key identifier:   AB:53:82:1F:6D:08:C4:45:59:56:1E:E5:C8:2F:65:AB:07:EB:21:D8
Certificate issuer:       /CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
Certificate serial:       010D0C9F432858496A19A462A2C49C440B1AB580
Authority key identifier: 4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/a9a3e9c8-2402-336a-afdc-870114a71c7d.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     33302
IP address blocks:        64.111.16.0/20 maxlen: 24
                          96.47.0.0/20 maxlen: 24
                          2607:2800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a4:62:a2:c4:9c:44:0b:1a:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=c852b43d-26b3-4224-b481-2a71abf0cbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:59:1e:da:a6:5a:20:13:07:c3:f1:b7:03:
                    d2:34:1c:fb:6c:87:bd:44:67:07:f2:6d:85:3f:f9:
                    f1:02:f4:c2:79:88:51:44:de:4e:dc:63:5a:89:c0:
                    84:25:7e:8d:af:fa:59:da:50:6b:98:bf:48:8a:41:
                    21:32:5e:80:7b:f8:fc:bc:b7:da:2d:8f:ca:04:57:
                    67:f5:4d:2b:0a:6c:73:80:52:52:8d:35:46:18:cc:
                    2b:23:84:3d:cf:02:c1:77:40:73:85:fb:f7:ed:f1:
                    d1:2d:4f:58:49:17:bd:a4:a4:0a:5a:51:e8:44:67:
                    f3:18:94:19:5d:19:20:57:b0:f1:c7:c1:30:9e:f7:
                    29:ec:95:67:9e:1a:2b:60:90:5e:24:fc:44:72:45:
                    10:7a:71:39:65:a7:c6:67:2a:d4:94:c0:1f:3a:1c:
                    99:ac:7b:a2:c8:f1:99:cf:76:96:9a:2d:d7:3d:86:
                    f3:e5:bf:99:bc:93:3b:60:e1:fc:e3:b7:45:8c:91:
                    f0:79:40:3d:f4:88:4e:00:82:2b:7c:05:bc:b1:e5:
                    6d:0b:f9:81:c4:ba:dc:3e:c6:92:b4:fe:b4:de:5b:
                    1e:06:29:9d:80:96:6e:aa:68:f8:b6:db:a0:f5:d1:
                    07:38:7d:35:21:52:70:3d:c5:fe:68:d0:d9:2b:48:
                    33:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:53:82:1F:6D:08:C4:45:59:56:1E:E5:C8:2F:65:AB:07:EB:21:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/a9a3e9c8-2402-336a-afdc-870114a71c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.16.0/20
                  96.47.0.0/20
                IPv6:
                  2607:2800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:78:fa:0c:d4:12:6e:40:21:c0:b8:6f:1c:6d:d1:49:55:0a:
         84:8d:f6:60:e6:b5:c5:2f:9d:49:2a:83:0c:22:f6:06:56:e4:
         09:86:62:e6:0f:26:d1:b8:cb:5f:c6:68:63:9a:a2:15:e9:9a:
         ec:af:40:16:83:39:f2:d1:06:f0:5d:4d:8b:f0:a3:cc:7c:e9:
         83:3a:0a:38:b8:9d:b8:30:3e:d2:00:e3:6b:8f:08:5a:bd:5c:
         e0:3b:76:61:e3:a4:f0:0c:8f:0b:35:89:3d:51:e4:d8:30:e6:
         4c:4a:bf:15:d9:42:5f:08:df:bf:88:af:4c:c2:0c:84:8f:f5:
         c9:ac:cd:d8:ac:70:af:00:f4:ea:4d:b3:f0:c4:cb:9f:fe:18:
         7a:7b:06:bd:06:49:e1:57:77:c9:60:63:0e:78:18:04:ae:9a:
         57:fd:47:63:0c:4d:d9:32:3a:ef:3d:22:b2:5b:cc:49:55:58:
         33:f5:01:0f:11:88:e1:fa:dc:b1:d5:b8:ad:3a:af:78:35:e0:
         fe:a2:9b:d6:8e:60:ec:73:d0:1e:c7:fd:8f:98:b7:90:2a:c0:
         83:83:aa:53:ab:1e:07:5b:a5:d2:73:74:d1:5b:12:09:fe:78:
         d2:75:6c:06:da:55:14:1c:ea:91:6c:09:49:da:b8:ed:2a:7f:
         6a:ea:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:13:23 2025 by rpki-client