Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9175e562-78bc-3b02-861f-aa51f3b0b8c5.roa
File:                     9175e562-78bc-3b02-861f-aa51f3b0b8c5.roa (raw, json)
Hash identifier:          KNbvbHcJiWPEzU17YJq8MrSOGI05JDAZDYYrwbPIVMo=
Subject key identifier:   EB:C1:F3:CE:CA:9D:73:03:61:C5:99:41:30:FD:DF:19:05:D1:DE:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4F79230696AE2B51A9480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9175e562-78bc-3b02-861f-aa51f3b0b8c5.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        174.160.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:f7:92:30:69:6a:e2:b5:1a:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=5ce8f003-e353-401a-8f5f-b6d859add1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a3:72:29:98:a3:ba:d3:fa:e7:99:74:a0:b1:
                    a6:92:ec:46:ed:f2:b7:14:d9:fb:a6:85:82:05:ed:
                    b7:10:90:3f:83:4f:63:b2:8a:e0:44:85:df:03:1a:
                    16:4c:43:f1:96:cb:ad:21:cb:66:59:fd:fd:0f:2a:
                    6b:45:98:61:0a:f7:ac:ae:db:32:a1:1d:7f:5b:6f:
                    50:04:9a:dc:a7:df:9c:1e:a5:e6:b9:39:7d:7f:91:
                    30:e0:9f:ae:1b:3b:67:ca:23:77:3d:80:c7:68:6d:
                    f1:46:e1:b1:4c:07:e3:39:c9:e8:30:a4:6d:10:49:
                    63:3e:a0:42:dc:06:5e:d1:ce:11:8d:56:d9:30:ea:
                    77:13:b6:f6:a0:fc:6a:95:05:d8:47:f8:ec:09:12:
                    88:1f:67:8d:ea:51:bb:7c:2c:dd:bb:95:cc:c8:9a:
                    6f:e6:2b:aa:d9:de:78:6f:77:d0:ca:c4:d5:b8:6b:
                    6c:ce:b8:5a:68:22:82:5f:05:84:aa:ea:af:65:f6:
                    46:b4:56:d2:ff:a7:17:7e:20:fb:3e:0c:4f:b8:40:
                    5f:15:d8:05:61:ad:94:db:58:3a:16:79:eb:72:73:
                    18:59:67:ad:1c:64:58:06:aa:4f:c1:36:aa:f8:9b:
                    7e:30:37:53:5b:3f:5b:0f:5a:5b:79:04:68:e2:e8:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C1:F3:CE:CA:9D:73:03:61:C5:99:41:30:FD:DF:19:05:D1:DE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9175e562-78bc-3b02-861f-aa51f3b0b8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.160.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:76:90:36:14:dd:eb:55:cd:47:4a:eb:d0:16:8b:83:d9:29:
         fe:7d:a4:d4:64:61:09:de:76:70:ea:e7:2e:10:71:87:ce:f7:
         12:6e:2f:6e:8e:35:ca:4f:3b:3f:69:99:2f:44:ec:1e:6c:01:
         03:23:be:12:6d:8c:45:30:27:51:7e:0a:df:dd:b1:51:a1:55:
         fb:98:47:22:8e:ee:50:f1:13:20:49:40:72:2d:41:37:c4:17:
         52:25:6a:de:13:55:8c:64:68:05:09:23:25:0f:92:59:03:50:
         06:e4:9f:bf:13:da:ab:f6:ef:5d:02:f3:e6:93:81:61:a2:13:
         e0:27:90:7b:7b:fa:24:9d:68:f5:aa:af:b8:97:d7:15:9d:e0:
         dc:bf:1f:f8:2c:54:56:cd:e7:3b:ac:e9:b4:04:e7:68:a5:33:
         cf:01:30:98:5c:bb:43:a2:2f:98:15:97:b6:90:c2:82:e3:42:
         d7:e8:f7:fe:e8:6f:2b:59:d7:91:f8:79:8c:5d:5f:cc:81:a3:
         f0:6e:e0:40:51:0b:40:09:fd:4c:78:f5:a6:bb:20:69:4a:0b:
         2c:e4:c1:29:7b:6f:0b:8c:4d:a6:31:93:56:c5:c1:ea:47:b2:
         7d:c6:96:03:88:a8:19:e0:e6:16:e9:89:e7:72:46:af:39:46:
         f4:b7:d8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:21:23 2025 by rpki-client