Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/988454ca-96f4-3cee-bbde-cef59d93d902.roa
File:                     988454ca-96f4-3cee-bbde-cef59d93d902.roa (raw, json)
Hash identifier:          CpBClPbKUgYIT0w1T3ggA4aWg6cyVvUgq+xSK4PJosI=
Subject key identifier:   25:D5:A9:2A:A1:DB:7C:4B:1F:4A:8C:3E:C2:8F:55:33:8B:43:6F:EF
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F43285849D85FA0F73FB2BD45B49BC980
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/988454ca-96f4-3cee-bbde-cef59d93d902.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     14773
IP address blocks:        206.82.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a0:f7:3f:b2:bd:45:b4:9b:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=6a595af9-dfac-4247-8862-f3e87fc7145a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:72:2e:66:46:c9:f3:ee:4b:22:9d:a1:ab:e8:
                    1e:6f:ad:3f:af:b7:d8:a4:75:98:68:70:54:b1:64:
                    a1:ea:a5:eb:45:be:51:6d:8a:33:56:6c:5e:e4:72:
                    3b:48:99:bc:94:49:c9:1d:aa:71:f4:37:c9:4f:c5:
                    ec:87:49:1b:90:77:f7:5b:6e:14:03:64:2c:cd:86:
                    c9:0c:1e:5c:7b:44:c4:49:0f:fd:96:2d:9c:ac:74:
                    9f:63:16:27:a6:3c:de:ec:a3:47:6d:1e:11:10:55:
                    f4:20:7b:c4:4c:1c:58:61:74:04:91:11:3e:6f:88:
                    11:5f:7c:59:64:cc:3d:d3:2a:25:c0:cc:57:8a:c4:
                    e9:5d:b3:d3:13:3d:e1:d7:fa:c6:94:68:f9:87:3e:
                    52:c4:28:34:a0:53:d4:80:49:42:38:2a:0c:12:49:
                    45:6f:f3:a9:5d:f6:98:0f:f3:a7:ca:dd:f1:ae:f3:
                    64:9f:c2:9e:d9:6c:66:43:a7:2f:c1:93:d5:99:18:
                    72:9f:fa:7f:ba:83:94:a2:9b:29:fc:03:bb:e7:ea:
                    d9:db:7c:be:e9:e9:42:cb:23:c5:cd:06:70:a8:5a:
                    0a:c7:d2:10:a3:1a:95:74:c6:b7:90:c3:e7:1b:16:
                    76:ef:a5:1b:c4:62:2f:8e:d4:7f:e9:8f:08:04:28:
                    f3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D5:A9:2A:A1:DB:7C:4B:1F:4A:8C:3E:C2:8F:55:33:8B:43:6F:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/988454ca-96f4-3cee-bbde-cef59d93d902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:59:a1:e9:fe:90:1b:e2:6f:15:a5:6b:6a:f6:22:8a:aa:aa:
         26:54:bc:f5:e4:e2:06:09:2f:97:3f:55:ac:9e:af:ea:5d:1b:
         f6:a2:8d:8e:16:46:db:9f:35:51:5f:2c:39:a6:9f:34:51:60:
         7a:92:c7:03:2d:b0:f1:0c:fc:90:69:1b:2a:54:8b:72:5e:ed:
         9b:30:07:95:fb:8a:e1:b5:fd:e0:6c:84:ae:74:90:52:83:7f:
         af:27:93:52:40:92:fe:9b:19:49:5d:31:d0:9f:47:59:a1:ac:
         dc:3c:65:a0:d4:86:c2:25:a6:44:04:e2:ea:eb:f6:9a:48:07:
         ff:11:70:25:00:1f:9f:d8:42:5a:51:eb:08:ca:96:ee:71:93:
         8f:d1:6c:f5:b6:a7:18:06:6a:ee:10:bd:f0:05:b2:19:1e:0c:
         ce:9f:44:ec:c9:ae:0a:15:c9:a9:1a:72:22:94:b4:00:69:7a:
         47:f7:0b:f5:1c:1a:ed:b6:40:f0:4b:ef:9f:56:d8:1d:49:45:
         fb:05:a8:5a:1a:a1:f1:b8:e3:de:f9:c5:02:bc:8f:31:7e:30:
         99:0f:67:ec:31:43:8b:ac:56:04:f1:ad:e8:a0:32:f4:0e:7f:
         03:5e:8d:6a:4f:61:87:a3:33:5b:b4:bc:88:5c:05:24:9b:e2:
         8a:36:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:00:32 2025 by rpki-client