Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa
File:                     67680324-7caa-3bc8-a0da-d5b9782851fa.roa (raw, json)
Hash identifier:          Msd9soLeCRO/nFgmqfw/gZJ/7/45f6pn3/0lpwWypL0=
Subject key identifier:   3C:F2:11:D9:DC:D7:C4:1A:E9:5B:ED:61:F2:5D:2E:E2:DF:ED:B2:D0
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584A03A54CA4416B11B449355540
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     32133
IP address blocks:        169.197.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4c:a4:41:6b:11:b4:49:35:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=31f2c561-c125-4fda-bddb-3b7a729af9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:57:05:0c:e9:e9:49:68:41:11:68:fe:22:
                    08:6d:a0:7d:87:84:f8:4b:bc:9d:62:c1:96:37:6d:
                    31:55:e0:b2:ad:af:3e:8a:66:38:ec:a2:fc:10:31:
                    ad:ff:3c:8a:49:1a:51:45:61:cf:cc:9a:eb:bb:89:
                    ca:29:f2:14:18:15:36:3a:d2:f4:73:23:c9:9a:9c:
                    43:a3:3e:38:68:d8:1c:aa:ce:62:f8:bd:66:a2:ac:
                    22:dc:84:28:a6:a6:f5:57:ad:2f:74:46:93:2d:76:
                    b8:bb:e9:0a:9b:98:d9:e2:9c:1e:e0:85:d5:2b:9d:
                    0a:62:6d:d8:8d:04:7d:f8:83:0a:fd:65:36:02:2a:
                    4d:81:a9:0b:6c:32:e7:d4:f1:ed:d3:ef:33:d9:af:
                    91:6f:28:4a:9b:0b:ee:8a:31:4d:1c:22:01:6d:1a:
                    9e:ff:43:e8:7e:51:e4:15:97:28:8f:dd:ec:8f:d8:
                    7d:08:ef:18:5f:b3:be:35:fb:ea:00:aa:35:0d:77:
                    b2:70:6b:ff:4c:bf:65:04:30:33:47:c6:77:41:19:
                    c4:65:a9:18:ca:fb:16:4b:a7:a3:a2:5d:99:31:32:
                    aa:c0:ee:66:af:9c:65:f5:5f:f0:19:73:c8:9c:5b:
                    62:20:4b:12:b7:83:ca:e5:07:87:87:7b:55:fb:33:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:11:D9:DC:D7:C4:1A:E9:5B:ED:61:F2:5D:2E:E2:DF:ED:B2:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:09:9f:1d:a4:85:33:62:72:d2:3e:b7:b9:6b:31:85:f7:ac:
         0f:07:e0:c6:4f:83:22:e9:5e:41:5e:43:52:b2:9c:0b:3b:f3:
         d1:09:69:23:58:47:2e:0e:00:66:d7:f6:52:15:b1:fb:56:a6:
         85:dd:5f:54:cb:72:ee:bf:3e:cd:a4:a1:99:e9:d9:72:2a:6f:
         c4:c3:c4:99:fa:26:04:ac:ec:1a:c6:c7:ae:a5:0e:78:f3:6e:
         08:0a:29:43:24:41:95:9f:e1:45:3d:15:c5:d0:ca:ad:80:f0:
         2a:9f:f7:92:55:46:eb:52:0d:91:ab:56:9b:3b:9c:f5:b6:c6:
         5e:a6:88:d8:3f:ce:78:ef:27:f2:48:bc:1d:92:aa:f6:95:29:
         1f:29:f4:c7:2a:6e:76:28:aa:7a:64:1f:81:1c:3d:57:0b:e5:
         ef:e1:4e:6a:fd:d6:4e:4a:02:86:e0:63:f4:39:1c:c6:73:17:
         dc:8b:0b:c7:36:19:db:86:0d:61:b0:4a:fa:f7:c7:61:1f:55:
         89:ce:6b:73:72:a6:ec:48:53:1c:81:63:19:fc:8e:51:8d:a0:
         f4:9c:28:4b:58:3d:50:d4:e7:97:3c:0a:27:47:f1:83:eb:39:
         a7:0e:ba:8e:84:94:70:56:32:61:c8:47:bb:f0:33:75:b5:6f:
         b0:78:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:49:38 2025 by rpki-client