Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaecfca3-d1da-334c-8303-a1be6d98218d.roa
File:                     eaecfca3-d1da-334c-8303-a1be6d98218d.roa (raw, json)
Hash identifier:          yutr4WwS1SdfYpifeRD7h4JACnUD0d0CMJ4YV3BvJ68=
Subject key identifier:   D9:3C:99:BF:DB:C5:A3:ED:24:93:5D:F0:6D:01:E4:DA:E4:5B:4D:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4F6CF902A7AC532604580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaecfca3-d1da-334c-8303-a1be6d98218d.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        174.160.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:f6:cf:90:2a:7a:c5:32:60:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=97610305-eda9-4f30-9521-b00a80ffbf6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:6f:c4:53:f5:fc:4e:a4:d1:3a:2d:bd:8a:
                    bb:7a:95:f6:3b:1c:05:f6:dd:94:24:63:23:df:7e:
                    ea:6b:ee:62:d4:38:ea:9d:03:48:42:3d:ff:1e:de:
                    ab:ab:89:c2:6d:78:1d:8e:85:e2:da:0b:63:ec:71:
                    d2:7c:9e:bb:6b:6b:c2:df:dd:27:b0:86:1b:32:14:
                    72:3f:26:44:d4:78:cf:54:98:08:b2:1e:81:d2:0a:
                    54:82:e1:6a:53:34:a9:bb:17:c8:b9:d9:b7:a0:60:
                    de:1b:50:4c:5c:e9:cd:c7:8f:22:1a:c8:d5:a3:03:
                    bb:47:a6:19:9e:7f:b4:46:4d:2e:c1:91:cd:77:b5:
                    c1:87:25:5c:26:96:52:7c:0c:07:74:99:41:c5:39:
                    44:5b:ae:10:a8:cd:ee:b0:3a:9c:e5:af:a1:10:a7:
                    7e:20:c0:42:d7:b5:e0:20:da:5e:68:35:74:36:04:
                    43:22:80:ee:26:99:ec:27:10:93:11:a9:a0:01:62:
                    c6:2e:75:86:b4:87:31:8d:8d:9f:f8:cd:17:e4:9c:
                    d9:fa:72:1e:45:7b:76:59:77:1e:ca:fe:79:c8:b9:
                    b0:64:ca:a6:11:90:1b:b4:24:e3:db:cf:13:91:9a:
                    90:2d:11:9b:5c:50:88:39:74:b6:0b:7b:00:86:cb:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3C:99:BF:DB:C5:A3:ED:24:93:5D:F0:6D:01:E4:DA:E4:5B:4D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaecfca3-d1da-334c-8303-a1be6d98218d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.160.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:12:4e:55:71:32:16:25:c2:7b:96:40:46:ac:74:66:b8:b3:
         f0:70:b0:ba:f3:c8:71:09:2a:62:ad:a3:2f:27:4b:da:b1:0b:
         ef:d4:ec:5d:69:98:21:e7:88:52:7f:05:e7:53:38:15:3f:24:
         e9:42:3c:c0:0f:ac:e9:30:aa:3d:ff:dc:3a:76:9c:96:e8:22:
         ac:4e:af:94:a0:f1:7b:b1:32:a5:90:dd:df:ea:f0:0c:97:7b:
         5c:0c:56:ba:13:ca:90:0e:80:16:29:45:d6:ac:0c:12:0c:29:
         32:b3:af:35:89:3e:a1:ff:3d:6a:7c:4f:c5:03:71:c2:fd:1a:
         f4:9d:13:ef:57:f2:4a:c4:d4:61:36:ae:ff:da:06:de:f0:a7:
         8a:7a:d4:a0:af:6f:15:c8:3b:59:3c:fe:e9:3a:0f:6a:b2:0d:
         0e:20:b0:07:62:34:d8:25:16:f4:75:a7:6a:8f:f2:2d:38:60:
         68:8b:77:4c:75:6c:19:09:44:30:c4:6e:31:b6:8d:70:a7:41:
         c5:41:a2:87:05:e5:95:e7:c5:ff:51:34:d5:ec:65:a4:1c:4d:
         10:92:46:5e:7d:49:ea:3e:d3:e0:d9:86:e3:cc:f8:62:ea:96:
         98:85:71:d8:fa:c9:d1:eb:05:31:02:4b:41:ae:b3:ae:9a:ae:
         86:dd:90:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:06:41 2025 by rpki-client