Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/ce0975ef-2bf7-383c-895b-cc365e0764fb.roa
File:                     ce0975ef-2bf7-383c-895b-cc365e0764fb.roa (raw, json)
Hash identifier:          EeU14oN0LSg3o+Cl5iH+y8v7zW287aIqavT9CteRXBY=
Subject key identifier:   C4:83:4B:A7:F1:2E:83:55:73:C4:71:13:DB:61:73:8D:C3:5C:B7:4C
Certificate issuer:       /CN=a17da6e4-914e-42ef-9d06-8048ae444a72
Certificate serial:       010D0C9F4328584915550D117D5A02DD3CD00880
Authority key identifier: 39:35:F3:D6:61:0A:FA:4C:4D:F3:59:1B:58:7F:D4:1A:AC:2F:57:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/ce0975ef-2bf7-383c-895b-cc365e0764fb.roa
Signing time:             Wed 05 Mar 2025 04:17:10 +0000
ROA not before:           Wed 05 Mar 2025 04:17:10 +0000
ROA not after:            Tue 03 Jun 2025 03:17:10 +0000
asID:                     0
IP address blocks:        216.109.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/a17da6e4-914e-42ef-9d06-8048ae444a72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/a17da6e4-914e-42ef-9d06-8048ae444a72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:55:0d:11:7d:5a:02:dd:3c:d0:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a17da6e4-914e-42ef-9d06-8048ae444a72
        Validity
            Not Before: Mar  5 04:17:10 2025 GMT
            Not After : Jun  3 03:17:10 2025 GMT
        Subject: CN=57f60e88-9bf7-45eb-b993-5df513254db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:a6:91:ff:5d:6d:d2:1a:32:c9:cd:e0:df:
                    03:7b:bc:ab:f0:e1:70:1a:e5:c2:1c:b5:db:32:23:
                    27:56:71:5d:5a:bf:3c:5d:42:cd:a3:c9:5b:7d:a1:
                    5f:28:19:d0:42:b8:f4:9f:8d:a7:32:79:a4:b4:69:
                    ae:ea:93:38:f7:2f:69:bd:93:20:92:95:ca:a5:ba:
                    1c:04:5e:02:3a:58:bf:82:3d:f6:88:55:43:5d:b8:
                    64:21:c7:f1:b1:56:5e:cf:8e:65:71:aa:b2:e8:5e:
                    90:b0:54:2d:c1:a6:9b:1c:ab:e7:79:ee:97:50:5b:
                    30:1b:78:5a:d4:37:c5:66:1a:3c:1b:74:45:a0:64:
                    a4:40:80:ec:a4:48:b4:b1:2d:89:44:f3:12:ee:ce:
                    3c:05:d2:82:3e:cd:28:1c:db:95:47:e3:16:4c:1a:
                    96:e0:60:75:76:c6:40:a8:ef:bc:f4:e5:3d:a0:30:
                    d1:86:47:9a:11:13:d9:38:e3:a4:08:60:36:18:94:
                    fd:ed:d4:94:ce:93:08:e2:68:80:67:4e:89:f2:88:
                    d7:da:5e:d0:f2:5f:e6:81:f2:29:36:9d:c9:b9:14:
                    f4:ad:4e:34:09:61:45:a2:a2:05:ce:da:64:dc:0e:
                    1e:25:3f:90:ae:5f:32:5e:09:a8:88:07:f2:4d:b4:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:83:4B:A7:F1:2E:83:55:73:C4:71:13:DB:61:73:8D:C3:5C:B7:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/ce0975ef-2bf7-383c-895b-cc365e0764fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/a17da6e4-914e-42ef-9d06-8048ae444a72.crl

            X509v3 Authority Key Identifier:
                keyid:39:35:F3:D6:61:0A:FA:4C:4D:F3:59:1B:58:7F:D4:1A:AC:2F:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:9e:9c:06:59:c9:07:f6:ce:84:b5:e3:36:56:b6:06:42:75:
         06:91:44:ef:ad:7d:c3:bb:eb:09:12:c2:1a:b3:87:dc:02:07:
         62:9e:b1:68:cb:56:fb:d6:96:24:ac:bf:fa:cb:2c:a3:52:06:
         ce:ae:d5:c2:c7:b3:91:2c:94:05:31:8b:c3:f5:93:0d:b4:cb:
         09:88:a0:a4:62:ab:ca:e6:5a:f0:6c:88:c8:a2:70:fd:99:ef:
         9e:69:d2:1f:62:b2:85:ab:ca:f6:f1:01:ef:62:67:b7:9b:52:
         4c:ad:10:08:7b:17:bc:a7:c4:2e:c6:78:ce:a4:0b:14:65:30:
         f9:da:be:66:aa:6d:04:b7:94:4a:24:96:5b:b4:1d:1b:bf:f5:
         b7:c6:86:a2:d4:fb:85:a5:d8:83:71:a9:69:80:af:00:60:9b:
         59:0d:aa:db:ae:b6:6a:39:2c:e5:0e:ca:4b:17:fe:a1:40:d0:
         c2:5a:85:9f:27:ab:5e:cd:d8:c1:76:26:1e:b7:68:ac:36:1e:
         52:60:ea:76:4b:71:8c:be:9c:2f:e2:47:0d:ea:f3:3d:10:d6:
         05:f9:76:8c:1f:24:3b:17:62:f2:fa:46:6d:91:a4:d9:70:f6:
         6f:b7:1d:b3:ea:31:49:1e:98:b6:e8:88:ae:d2:54:31:55:59:
         cb:da:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:22 2025 by rpki-client