Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/0cf7be41-62e0-3469-a068-cbd4f7928764.roa
File:                     0cf7be41-62e0-3469-a068-cbd4f7928764.roa (raw, json)
Hash identifier:          f46XZ9ANmmhlddjXBeXHsbnTz8IB2ouKVWBaPWwhGXM=
Subject key identifier:   A9:1F:24:17:BB:13:13:AE:B9:A6:09:E7:83:D7:E0:89:FD:89:76:8C
Certificate issuer:       /CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18
Certificate serial:       010D0C9F43285848BE862D6C2CFB501603CF7680
Authority key identifier: 56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/0cf7be41-62e0-3469-a068-cbd4f7928764.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     11666
IP address blocks:        216.168.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:2d:6c:2c:fb:50:16:03:cf:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=d1b7c17e-d0b0-4148-bd85-a8c1db1b74ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2e:b6:9f:14:34:21:4c:af:12:54:f5:6d:e1:
                    f4:cb:d8:ff:75:a9:51:4c:06:df:7a:fe:5d:89:2d:
                    eb:c0:fd:01:a9:90:05:44:0f:77:25:b5:82:e5:fc:
                    dd:22:c4:9a:59:a8:08:7a:f2:3e:17:70:ce:74:43:
                    96:ee:1e:13:fd:c5:3e:07:19:df:98:f8:fa:fd:08:
                    cb:f4:ad:16:4b:31:0a:e9:88:b7:79:c6:55:96:89:
                    ef:5e:43:66:5e:22:51:30:b1:71:4c:82:4d:b0:4c:
                    61:5e:76:c5:fb:19:46:39:a7:ae:e0:a4:0c:76:b1:
                    4f:71:9f:16:0b:c9:b3:95:d0:9d:42:47:bf:cb:74:
                    d7:b9:47:44:80:57:cb:27:f4:b7:aa:b2:4e:98:27:
                    ab:32:36:22:be:8b:63:d3:49:d9:8c:d2:67:c9:1f:
                    a3:e9:84:79:d8:6a:5f:1b:68:01:e5:21:a6:99:07:
                    ce:6b:9f:da:12:8a:04:44:b3:5b:39:44:0c:cf:17:
                    19:71:f5:03:10:0d:79:2c:10:ad:ab:ab:89:de:7a:
                    93:37:9c:cf:a0:bb:24:a0:d3:48:54:b2:5a:fe:4e:
                    25:c4:f0:48:4b:82:ee:93:2b:3b:2f:08:23:c5:69:
                    f6:8c:57:c1:8e:39:12:ec:9e:74:e6:fc:bb:80:f2:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:24:17:BB:13:13:AE:B9:A6:09:E7:83:D7:E0:89:FD:89:76:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/0cf7be41-62e0-3469-a068-cbd4f7928764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl

            X509v3 Authority Key Identifier:
                keyid:56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b1:e3:66:12:ba:51:6d:ee:f0:dd:ad:c7:c5:10:9e:ce:c6:
         e8:b9:50:44:57:26:b8:0a:68:ec:ce:6e:14:99:71:71:d4:55:
         ec:09:fc:74:fa:64:46:7b:d4:38:3b:93:f2:29:dc:a4:35:5c:
         45:93:2e:ac:2e:87:a0:99:68:32:f2:d1:91:a4:fa:b2:86:d2:
         06:66:bd:eb:40:ce:85:76:6a:cb:74:6b:b3:e3:d5:2a:41:84:
         7c:85:71:e8:02:ab:51:ff:2d:87:a7:0a:d1:a9:cb:a5:fa:54:
         5d:8b:fe:3e:ad:db:26:f7:af:60:a5:b9:b4:65:2d:ae:c1:fb:
         7a:14:fa:58:59:22:ec:9b:9e:51:ce:3a:58:66:b1:4f:e4:4d:
         3c:32:9b:4e:71:18:64:0e:82:54:dd:43:90:56:fb:d6:9e:f9:
         6b:03:0c:af:4d:32:f3:84:47:be:6b:e7:a4:fd:01:c2:e5:7e:
         12:17:7a:2a:31:a6:61:44:f3:7d:05:20:63:2f:db:e6:d1:d0:
         6d:35:ec:12:6e:09:bd:75:c6:ea:c5:15:e4:f9:ef:7f:01:93:
         ac:cd:03:65:28:6c:dc:7d:e2:cc:aa:6e:3a:83:db:60:66:24:
         f5:8f:fe:c0:b2:a9:66:f1:69:23:59:59:b7:63:11:68:50:dc:
         8d:05:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:11 2025 by rpki-client