Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa
File:                     20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa (raw, json)
Hash identifier:          OBG7bpmjMxcVI+G0O21sZuJsaLbHeC5esw9ryvXHDno=
Subject key identifier:   E9:57:30:45:D7:4A:88:5D:C7:7C:5D:6C:26:B5:CD:33:68:3D:5D:36
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F4328584AFC1BF59A655C2D56096E4700
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     16552
IP address blocks:        208.80.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f5:9a:65:5c:2d:56:09:6e:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=05596615-b5cd-4ccb-9303-5616e35e0457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f4:ca:cf:40:3c:22:12:a2:12:bb:99:4b:68:
                    12:99:26:69:38:63:9b:df:c2:43:0a:57:b9:f4:5f:
                    a7:ae:54:a1:34:da:35:d8:f6:dd:a3:2a:a2:df:8d:
                    71:2d:68:3b:7a:d7:34:66:11:07:75:a1:62:96:66:
                    12:79:33:2d:11:25:bb:70:00:a0:9c:19:b5:45:bd:
                    4c:5d:c3:fc:f9:3a:84:43:1f:2b:79:5d:03:01:93:
                    20:3b:61:6b:22:65:21:8c:aa:80:7d:60:f2:92:6f:
                    c3:7c:ca:91:e3:98:29:7e:84:c8:27:7d:a3:88:65:
                    a2:07:a8:d1:d9:0d:86:a5:45:13:45:81:7f:f9:ff:
                    7d:34:0e:05:56:5f:e0:75:6f:6a:a0:79:84:95:c1:
                    31:52:cc:d0:ea:be:72:d7:6f:de:4d:05:9b:1d:d2:
                    9e:5b:f7:90:a8:ce:08:79:e3:5d:c3:cb:4d:e9:e3:
                    59:bd:28:6b:e3:9b:4b:0b:85:77:39:30:66:a4:b0:
                    01:e2:7f:17:04:79:5b:2b:df:5f:af:39:b8:0c:f7:
                    c8:e4:55:e5:25:57:42:6a:7f:e6:23:3f:54:40:74:
                    d1:95:df:36:bc:50:f0:01:51:d4:65:46:33:04:76:
                    dd:92:50:67:ad:87:7e:a5:f4:07:66:27:9a:9d:37:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:57:30:45:D7:4A:88:5D:C7:7C:5D:6C:26:B5:CD:33:68:3D:5D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:af:d7:ec:63:75:ad:19:f3:94:b8:f8:04:a8:8b:a4:07:96:
         f0:05:fa:c8:88:4e:f2:32:52:32:cd:e0:28:b3:f1:16:f7:18:
         04:0a:7f:50:fc:87:d3:0a:9b:fd:82:c9:25:c4:1d:af:fb:44:
         9e:54:40:ef:dc:45:4d:8d:4f:2f:40:53:b7:4d:7a:e2:de:d0:
         23:a7:af:57:1b:fa:07:08:b8:cd:2a:ab:ea:8d:b6:93:be:d8:
         4e:27:da:42:5c:23:82:bd:0d:c3:13:b8:2f:d3:ce:37:c1:1d:
         11:52:69:6c:1b:28:92:18:ed:8c:bd:39:a7:04:9b:d3:6a:a4:
         43:fc:9c:0a:a7:12:4e:9a:f0:af:3c:3a:55:4d:56:a3:07:e0:
         ec:53:14:ba:53:30:b4:f1:ba:f8:26:17:07:b9:c3:5d:a0:33:
         5b:88:cd:c7:0f:84:45:79:8f:68:ef:ae:25:be:c3:e4:5b:a7:
         78:e7:20:8e:f5:66:79:58:6a:65:da:4f:cb:1a:f8:39:c7:55:
         ed:4f:8d:6c:56:97:4a:ae:b7:01:76:4b:cc:c7:67:69:8e:36:
         63:4a:66:4b:a5:41:80:09:de:d7:41:33:a5:74:54:36:aa:3b:
         fb:05:46:b4:b6:58:ed:5e:cf:3b:36:22:d5:97:b8:c1:b7:27:
         8d:b1:ab:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:30:50 2025 by rpki-client