Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa
File:                     b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa (raw, json)
Hash identifier:          qlGORvpAEeVSXUWRWEyvR0b1MKl+lRjfjTCNwOgjiF8=
Subject key identifier:   BE:8C:20:8C:93:C6:C9:C6:86:6A:1B:6E:86:69:2F:E7:A8:F7:E2:80
Certificate issuer:       /CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f
Certificate serial:       010D0C9F432858498769B32DB3AC824944FBEA00
Authority key identifier: 3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     26962
IP address blocks:        207.71.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b3:2d:b3:ac:82:49:44:fb:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=6fbc5ef7-4fc7-49a4-a0bb-7a15aaba134b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:5e:61:c6:33:b8:2a:2b:d1:d5:98:ca:c2:
                    d4:d8:86:19:4a:ec:29:5e:1c:ff:44:4c:6b:fe:7b:
                    ad:b6:92:b8:25:f7:52:ef:36:2e:89:55:da:53:49:
                    97:98:15:b2:8d:03:51:f8:e5:34:af:bd:11:b9:8a:
                    30:fd:4d:70:c9:6e:f8:be:d7:c3:7e:ad:2c:d4:ad:
                    8d:66:56:8c:01:8b:a3:e6:95:18:41:61:98:2d:5b:
                    2e:35:3f:a0:79:a3:a5:cb:57:d8:88:03:67:09:cb:
                    93:91:39:e2:e7:bc:00:de:db:bb:1c:ea:50:52:25:
                    4e:c7:20:ad:b1:77:8b:d8:05:a2:93:9f:44:91:5e:
                    1e:41:13:f4:aa:2a:97:06:69:55:d5:94:95:21:6d:
                    30:11:47:40:7a:5d:e0:1b:93:2c:86:6b:15:15:ee:
                    cd:76:8a:44:d7:66:da:f9:10:72:cd:dd:ed:6e:19:
                    47:82:36:55:fc:3a:65:2c:73:99:a1:a3:74:ad:44:
                    39:0f:6e:cd:72:a3:a2:ea:60:03:72:84:7c:58:4b:
                    c4:60:6f:ca:3b:ae:56:e1:93:e0:7d:ab:a0:b9:17:
                    15:c0:8b:ab:4c:da:cf:db:b1:6d:f9:1e:26:31:2d:
                    bd:62:10:0c:36:a4:15:81:93:7d:6f:0f:37:58:21:
                    71:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8C:20:8C:93:C6:C9:C6:86:6A:1B:6E:86:69:2F:E7:A8:F7:E2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.71.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:4e:f9:50:1e:1e:85:4b:35:72:9b:37:5a:38:0c:d5:93:d2:
         b8:3a:6f:b2:02:2a:3c:b3:e4:3b:fc:8d:34:b6:6b:bf:ba:1a:
         90:7b:e8:f9:4e:5d:be:e1:f6:c7:c0:e5:0d:c8:da:ff:8e:4f:
         cd:f3:f0:64:75:b2:99:d6:01:7b:24:50:7d:7d:cd:c9:f9:42:
         40:0b:f6:d0:a3:bb:f8:eb:1f:0e:a9:7f:46:b0:eb:96:9b:a5:
         b7:74:3d:85:fc:e6:bf:94:45:54:34:82:1f:53:cc:06:d7:b8:
         c3:98:81:de:38:20:ca:aa:43:12:4b:c9:c3:2e:41:88:2b:c2:
         e7:fa:51:13:e1:6f:05:30:c8:8e:3f:13:e5:df:9c:e5:ae:7a:
         f0:3c:8e:1f:d3:a8:7c:ca:32:1d:31:2c:ff:3d:ce:7d:1e:3b:
         ae:e3:68:5b:51:79:97:a1:f7:2a:dc:d8:38:a3:da:1a:36:e6:
         2f:8d:3d:53:75:d4:ea:b5:d8:b3:4c:54:17:60:0f:df:be:3f:
         42:75:f0:9a:40:b6:d7:4a:51:de:33:1c:3b:d2:a0:93:f1:d5:
         e6:84:1c:7f:38:7f:bc:5c:69:fa:81:b1:bb:df:c6:29:2e:46:
         6f:60:de:c5:08:c4:3b:d2:ae:9d:23:c8:6a:fa:cf:68:b3:ca:
         79:25:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:28:30 2025 by rpki-client