Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ca41f978-1d3e-3538-b87d-f15e2497272c.roa
File:                     ca41f978-1d3e-3538-b87d-f15e2497272c.roa (raw, json)
Hash identifier:          VCZgBUDuotAovdVvZQBeqgkGzPciO8TeBH7uE7EbQkU=
Subject key identifier:   D0:F3:80:ED:42:79:7B:35:27:1C:33:BB:97:CF:8C:87:6C:02:AF:D2
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584A46A5AC6B145A7B04D7016480
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ca41f978-1d3e-3538-b87d-f15e2497272c.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     32133
IP address blocks:        64.99.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:ac:6b:14:5a:7b:04:d7:01:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=02252de7-d326-4c1b-9a15-f9d2a3356b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:47:56:81:8a:a4:93:50:0a:1e:59:cd:6a:99:
                    c7:4e:b9:26:d0:bd:08:e0:33:00:13:fc:1d:ab:69:
                    4d:62:5b:38:03:30:95:02:29:1e:fc:bd:53:08:6b:
                    c8:02:c0:9d:87:f9:56:6e:fe:b8:61:b9:98:93:71:
                    ae:19:91:d4:2e:3f:53:ef:80:cb:36:1b:a7:53:a0:
                    7b:6c:cb:f1:2d:05:cc:6f:00:03:e9:e1:44:cf:17:
                    de:ac:34:38:6e:7a:f6:2f:be:59:6b:a9:04:22:8e:
                    52:e4:ac:0e:8b:bf:b6:95:e0:a8:08:56:1a:ee:1f:
                    4f:7f:a6:70:da:35:cb:ef:12:91:09:81:8a:a1:f2:
                    a3:4d:83:49:60:7c:07:f5:52:92:50:03:64:26:48:
                    dc:27:c1:ee:53:32:63:3d:cc:b0:c8:2c:d0:63:71:
                    53:8e:58:c3:2e:11:b4:6d:8e:c9:9c:99:24:aa:29:
                    e7:09:d0:dd:7d:02:bf:a7:b6:6d:fa:e4:fa:d3:57:
                    25:9a:e6:28:b6:ce:e0:85:e3:82:fc:e7:3f:c8:74:
                    e2:fe:a3:55:17:f1:90:2e:78:0a:5b:6a:90:b0:a7:
                    d8:22:5e:12:b8:51:8d:c5:74:29:36:34:32:a4:f3:
                    47:21:e1:82:27:33:20:c3:ff:87:a8:b4:d3:d9:90:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F3:80:ED:42:79:7B:35:27:1C:33:BB:97:CF:8C:87:6C:02:AF:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ca41f978-1d3e-3538-b87d-f15e2497272c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:79:99:01:c8:90:a4:14:21:93:f8:2f:19:50:4b:0e:d9:46:
         ca:0e:e4:8f:8b:57:7c:13:27:13:20:c7:f5:4f:c6:4d:4b:60:
         07:5d:c1:0d:01:76:bd:a7:a2:d0:4d:9a:9c:da:59:ee:ac:49:
         1f:79:2f:61:f4:60:e5:b2:d6:4e:6a:c6:42:c2:a7:55:34:9d:
         9e:78:60:50:1f:3c:e3:f7:03:74:cf:f1:b5:c9:e7:6f:60:8e:
         d7:17:8c:4b:2c:91:7c:0a:99:94:64:c2:36:a6:ce:6d:54:40:
         6b:5a:18:7c:89:3a:de:04:56:35:01:4b:f1:85:dc:e8:17:47:
         f1:80:8a:7c:9d:89:d3:7a:46:ad:40:90:bd:53:d4:8e:79:8e:
         ed:79:74:6a:0c:ff:4c:51:8e:da:46:18:ad:88:c3:58:ab:5e:
         d1:cc:41:51:1c:03:b7:f0:32:24:37:7c:c0:82:57:70:db:04:
         2f:78:0a:29:86:41:0d:16:6d:c7:15:ed:6b:e8:77:04:cb:01:
         4b:d6:0e:87:4e:15:7f:48:d0:0e:42:bd:96:01:1e:a7:0e:62:
         8e:24:bc:82:3a:64:13:e5:89:5f:0f:81:9e:9d:b6:df:c1:12:
         de:84:35:dd:6d:4c:ca:6c:72:7b:35:e5:00:21:d1:98:49:8b:
         a0:1d:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:22:11 2025 by rpki-client