Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa
File:                     9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa (raw, json)
Hash identifier:          E+72db/MH3f/rMrTgi19NLafvnhM2tOUJnMgKFGPZIQ=
Subject key identifier:   F1:8B:2C:3F:A0:AD:93:BE:DF:C1:C7:26:DF:9E:8E:B6:FE:82:33:2E
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584ADECBBF1EAB4F8A6E34F53880
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     8014
IP address blocks:        104.166.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:bf:1e:ab:4f:8a:6e:34:f5:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=2d82b384-f5b0-43d6-ac9a-91ecc43d9f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:6b:28:89:9b:bc:e4:06:13:98:58:cd:19:
                    af:1f:b1:d7:68:4a:81:39:12:8c:d3:7f:1b:38:8f:
                    bb:3c:62:85:14:8c:04:aa:79:96:87:e2:86:08:78:
                    3a:3c:b2:c0:26:5f:81:9a:70:39:7e:8b:d5:53:7f:
                    10:18:65:01:1e:50:e7:d3:f8:fb:f2:f9:aa:8b:fd:
                    d1:f3:79:7d:3c:57:ab:be:e4:43:98:b8:d0:65:9c:
                    19:09:12:5d:86:8b:98:76:43:36:14:af:41:fa:b6:
                    91:05:6a:6e:3a:57:bf:c3:08:f4:13:af:84:53:7b:
                    7b:a5:f1:ae:a7:15:47:63:7f:89:bc:e4:64:b2:90:
                    bd:37:1b:d2:99:09:a1:8a:11:8e:8c:e8:e4:9d:c6:
                    5e:9d:0a:cd:09:59:fc:be:71:b0:be:52:aa:91:10:
                    9d:f1:a7:f7:27:64:ab:bb:55:b2:7e:6e:fa:e1:6c:
                    2b:e6:8e:ee:ba:8c:1b:3f:bd:16:3c:44:94:e7:09:
                    b5:c5:3b:84:f1:74:c9:d4:f3:48:57:74:be:25:59:
                    77:3d:b8:23:2d:14:8c:31:c9:f6:ef:98:b9:64:46:
                    ee:0c:77:34:5b:b9:62:09:49:9c:52:af:26:33:20:
                    45:d0:14:0c:dc:d1:35:06:98:91:bf:61:12:ca:30:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8B:2C:3F:A0:AD:93:BE:DF:C1:C7:26:DF:9E:8E:B6:FE:82:33:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:3d:71:d7:a8:ef:55:67:b6:3b:a5:c3:2c:f4:60:2c:ba:d6:
         34:cb:a5:54:a5:88:6e:36:85:40:eb:d0:eb:ec:b3:98:87:af:
         b4:d8:7d:f7:20:d4:db:04:0a:77:7d:8b:d8:de:1d:94:03:b0:
         d8:d8:8d:bc:e9:8e:c0:f1:05:d9:5b:d0:90:f3:12:cb:dc:f3:
         63:d4:8b:a1:8a:7f:99:df:9f:2f:f3:56:77:cc:00:94:92:0f:
         ef:93:71:0f:72:9a:77:6a:bb:dd:98:6a:90:b4:51:40:bf:f8:
         9e:cc:a8:aa:c0:82:a9:bc:f7:ec:ab:a5:58:ed:f8:4f:81:49:
         51:d0:75:4f:0e:de:4c:ba:08:f2:1f:d1:66:86:85:2b:3f:fa:
         1b:90:a9:f3:7f:d9:56:bc:e3:ad:40:6a:fc:c3:26:f5:03:9e:
         9a:f8:e3:55:bd:02:8f:32:3e:21:68:67:d8:6c:c5:bb:7c:7f:
         bf:71:5a:01:b0:e4:9e:8e:1e:ba:bc:d7:4c:9f:80:93:cb:04:
         78:ab:29:8b:3b:7f:c6:16:c8:5b:e6:81:49:67:a1:29:d4:33:
         19:36:17:d3:b1:ec:33:ae:89:1c:84:c6:1d:7b:a7:8f:61:12:
         a8:9f:91:78:e1:11:58:92:55:7f:44:7f:a7:cb:40:e3:d9:94:
         6f:63:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:14:17 2025 by rpki-client