Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa
File:                     a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa (raw, json)
Hash identifier:          Tq9rE+D7EzAXAp0DHN8GVA1XKUOwuLHpufA0iuUVqXo=
Subject key identifier:   25:18:D1:00:A9:FE:FB:F5:C7:86:72:43:98:8E:7B:F8:9E:1B:A3:DE
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F43285849F17FB410E25E8245BA047340
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     30170
IP address blocks:        66.113.96.0/20 maxlen: 24
                          70.35.112.0/20 maxlen: 24
                          209.147.112.0/20 maxlen: 24
                          2607:f6f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b4:10:e2:5e:82:45:ba:04:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=3a7b5f21-0719-41d4-b0c8-038d1ba01902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:ca:11:31:69:1b:d6:41:93:1f:de:be:47:
                    5f:b5:9b:16:46:d3:fd:b6:17:8c:36:16:4e:16:00:
                    09:00:36:a5:fc:a0:49:03:43:c2:80:4f:1b:90:4a:
                    2e:c8:8a:b9:2d:75:28:be:5f:72:f2:96:2c:08:55:
                    3a:b2:61:63:27:98:92:ee:5a:7e:45:8a:b9:ae:53:
                    45:dc:33:50:32:4a:97:13:da:c3:47:af:3b:82:0c:
                    0c:26:af:5b:ec:b4:1e:cb:ea:28:41:85:4a:37:b8:
                    1e:a6:7d:7d:1d:64:d6:ab:34:5c:f4:23:5a:2c:49:
                    06:18:ef:c1:a9:f1:e8:25:50:22:c8:dd:70:10:44:
                    ea:4a:34:c1:af:4e:fc:9a:44:62:ab:19:02:77:cb:
                    22:ad:2e:96:a3:84:19:9b:a7:cf:67:da:7c:a3:c0:
                    5b:f4:47:0a:22:7d:60:9e:4d:01:80:32:cf:f4:02:
                    9c:72:0f:d0:16:20:41:46:28:ee:0c:21:ee:e4:0e:
                    21:62:7a:22:81:1d:32:1e:4d:47:67:c9:48:fd:5c:
                    17:25:a4:c1:4e:dc:03:41:69:18:ef:5a:b6:a9:b6:
                    11:72:90:0a:3c:54:ee:50:55:b2:56:8b:63:39:f5:
                    13:a0:69:f3:7f:ba:b0:4d:80:22:c9:b9:cf:66:6d:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:18:D1:00:A9:FE:FB:F5:C7:86:72:43:98:8E:7B:F8:9E:1B:A3:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.113.96.0/20
                  70.35.112.0/20
                  209.147.112.0/20
                IPv6:
                  2607:f6f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:14:e9:e7:7c:f0:a6:f5:90:e8:f5:de:9c:86:6d:1d:34:7f:
         85:f3:cf:a4:e7:58:2d:84:4f:9f:54:f1:be:da:eb:d9:cd:e9:
         0a:cb:94:29:95:a7:98:c6:69:7d:73:9a:df:58:ce:c3:d2:c2:
         c5:f4:e5:45:55:e2:16:cf:2b:fe:3f:c6:99:21:c9:ef:f3:24:
         ff:86:25:e5:2e:a7:6a:ae:81:2b:6c:f4:cf:35:42:1b:bd:74:
         ec:0d:5c:83:5a:c6:1a:e0:9a:25:b2:ef:26:9a:54:1f:ad:15:
         2d:11:e5:27:ff:f4:0a:25:a0:f3:00:59:3d:93:97:14:a1:e0:
         7e:89:2b:b2:9a:96:ac:42:12:57:68:cb:fd:ba:ef:87:1f:58:
         62:5a:6c:9f:74:c3:af:ee:64:46:4e:f6:81:73:01:8a:c1:96:
         83:b1:d0:ca:cc:1b:a7:16:ce:c0:34:3a:4b:8b:6e:c1:d0:b1:
         5e:93:8a:b9:02:70:11:20:00:e9:0b:bd:90:aa:14:70:15:29:
         f0:5b:f9:c2:50:2a:59:5b:8e:97:bb:d6:58:ed:3a:50:e9:80:
         b3:d0:0d:c6:bb:88:a1:6b:da:43:f0:ab:ae:91:b3:ca:0b:1e:
         2f:67:76:f3:c5:93:32:66:2f:39:7a:3c:00:7b:4c:2b:2f:36:
         90:a4:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:42:58 2025 by rpki-client