Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/093003ba-90c6-36fb-816f-facad7584763.roa
File:                     093003ba-90c6-36fb-816f-facad7584763.roa (raw, json)
Hash identifier:          VZ2sVhku8K2JpJPG/ooAjGERvizTED4jLYvlPEDPg68=
Subject key identifier:   AA:14:31:99:AE:F9:FC:6A:46:0D:9D:FD:E1:47:92:14:03:BE:D9:43
Certificate issuer:       /CN=96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4
Certificate serial:       010D0C9F4328584A0D6A970D690C81825CD0C360
Authority key identifier: 09:C0:4C:C5:8B:0F:EA:FE:B4:5C:B4:FB:86:5B:28:9F:51:AA:88:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/093003ba-90c6-36fb-816f-facad7584763.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     27208
IP address blocks:        198.161.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:97:0d:69:0c:81:82:5c:d0:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=6d415b55-ec86-40cd-835d-7abbfc6f03c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7c:85:16:f8:ca:1f:d0:81:46:20:43:6f:50:
                    02:49:61:bf:6f:de:c3:e2:2f:e9:76:92:3d:ca:84:
                    8f:be:0f:e0:9b:82:19:95:96:5b:86:c2:fa:8c:9e:
                    c9:45:75:8d:05:f3:00:3a:1a:54:4e:3b:8c:da:f1:
                    6c:db:d9:13:52:8a:d2:86:4f:6b:93:3a:d1:87:66:
                    76:53:49:53:18:be:22:81:62:40:1f:4a:33:a6:38:
                    ab:db:06:50:5a:60:68:53:f5:ae:9f:74:6b:1f:45:
                    a0:a1:a8:9a:0f:88:1b:16:8a:14:5d:b4:c5:33:cd:
                    0f:84:49:49:67:69:77:0b:48:01:7e:c7:22:e2:7b:
                    97:f7:1c:57:be:01:99:41:7b:79:00:70:90:de:54:
                    50:1c:48:40:82:e7:36:f1:2f:bf:56:86:ed:11:94:
                    8b:da:6b:7b:7e:61:d9:12:0e:53:9b:42:95:9b:49:
                    4d:de:71:0a:3b:67:ab:4a:96:3b:21:ca:68:4d:75:
                    4b:77:48:c6:a6:c2:fc:d2:f1:0c:91:36:76:6e:5d:
                    34:20:17:21:dd:aa:b9:50:5f:e2:14:f1:8e:30:37:
                    6d:d9:d2:a5:1b:75:08:e2:0c:ad:f9:06:c6:a1:35:
                    e2:2b:f5:68:7c:26:d9:42:ff:f3:62:94:2d:be:c4:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:14:31:99:AE:F9:FC:6A:46:0D:9D:FD:E1:47:92:14:03:BE:D9:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/093003ba-90c6-36fb-816f-facad7584763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.crl

            X509v3 Authority Key Identifier:
                keyid:09:C0:4C:C5:8B:0F:EA:FE:B4:5C:B4:FB:86:5B:28:9F:51:AA:88:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:b2:ce:46:df:fc:57:13:27:14:85:81:21:6c:98:7c:1d:
         32:2f:f1:36:b9:9c:90:05:54:34:40:88:74:2d:50:e3:bb:aa:
         0f:39:93:cd:09:d9:14:68:22:be:50:d2:e3:66:f7:2e:68:4b:
         d2:d0:52:37:e7:d4:66:b6:3b:95:7f:22:ae:f1:e7:d3:24:55:
         27:f4:2e:6a:c5:8d:0f:d1:ec:88:60:4b:be:51:eb:a3:33:fa:
         89:e0:fb:9e:b9:63:13:d6:e7:25:85:7a:a9:78:84:2a:d3:38:
         4e:a0:49:82:64:52:25:70:42:ec:d2:1e:02:9f:6e:99:2a:e2:
         c0:83:14:0e:18:cd:2d:2e:aa:c3:ba:8d:3d:37:54:06:85:90:
         e1:78:8d:2f:00:e1:3f:0f:a0:5a:61:9f:20:b8:a2:7b:a0:af:
         66:95:1f:ed:dc:ce:69:7a:af:d2:dd:d6:e2:d7:ba:09:65:ca:
         d0:da:22:c2:c8:ad:a1:9f:39:b3:1f:49:97:2b:75:2e:9f:63:
         ef:8c:40:64:24:2d:e7:9b:67:03:5e:e2:3d:cf:b3:0f:1f:2e:
         3d:47:f3:f6:4b:9e:31:07:a2:2e:0a:ba:85:f4:6f:37:c3:75:
         d0:a1:42:4b:09:86:7f:c6:1f:d3:31:72:db:9d:f9:55:47:27:
         b5:3d:50:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:32:32 2025 by rpki-client