Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa
File:                     6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa (raw, json)
Hash identifier:          93IbCbRX85pG4VJP2GXddkk76eZms6KVP05JMcF7qSo=
Subject key identifier:   64:6D:3A:DA:55:01:68:1E:27:EF:65:14:0F:C6:C6:96:C6:A8:B2:1D
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584A050A7ABAA697428A7CC8DA50
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     11348
IP address blocks:        207.160.128.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:7a:ba:a6:97:42:8a:7c:c8:da:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=16874c94-0fae-474a-9384-7c312486a2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:87:1a:60:08:f2:6d:35:15:d5:27:d3:52:d2:
                    b6:a5:cc:ed:9c:10:8d:e1:81:71:b6:fe:6c:e5:47:
                    30:f2:32:b0:01:f7:b0:73:01:d3:8a:76:b2:23:9e:
                    45:23:8b:d7:37:c3:db:5c:65:69:ea:f4:5b:4e:b1:
                    34:e7:5b:9a:88:b8:bc:1f:6a:b8:18:8d:2e:31:47:
                    0a:a5:16:5f:ab:21:a5:6a:d1:bd:45:3d:62:8c:82:
                    2d:ec:33:41:d5:a7:33:84:7f:04:c3:dc:c3:f6:05:
                    76:e8:df:d2:8f:d4:67:09:5a:47:de:e5:8b:6b:51:
                    11:a8:cf:b5:d2:cd:3b:1e:20:da:0a:d1:42:ad:3d:
                    17:c9:0c:48:79:cd:36:b5:7b:37:c6:af:f9:e4:d0:
                    02:0e:c5:34:9b:65:2d:04:7d:16:79:0b:a5:8c:be:
                    7e:36:3a:84:04:0a:1f:05:aa:71:ed:e3:21:86:4b:
                    46:c8:17:f3:7c:70:81:d4:7c:f6:94:b2:3b:e2:79:
                    d3:51:67:07:03:2a:99:65:49:b2:50:dc:ec:47:41:
                    9e:41:97:15:e7:11:cb:9b:e0:3c:f0:d0:62:b9:4d:
                    7c:ae:7b:33:a8:23:cb:1d:3e:3e:4c:1c:8a:31:e2:
                    b0:b9:31:81:d6:c0:fa:cb:b7:7b:54:49:b8:0a:c6:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6D:3A:DA:55:01:68:1E:27:EF:65:14:0F:C6:C6:96:C6:A8:B2:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.160.128.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9e:8d:e7:90:28:4e:5e:1d:26:9f:fe:80:86:1a:17:58:6c:
         18:a9:11:e6:aa:6f:dd:f1:24:ac:18:79:15:5d:60:b3:22:55:
         19:67:e7:c3:72:36:2e:c6:ad:b2:96:6d:a4:4c:f7:af:33:3d:
         ae:9e:18:05:51:44:8d:66:02:e3:33:ab:d1:ae:5c:5e:30:8e:
         ce:da:bb:58:16:a7:3f:29:a6:9b:0d:ce:45:6b:94:7a:d1:61:
         61:91:c9:71:72:91:fb:3e:41:f8:d5:37:b8:a5:43:72:e8:9d:
         15:9f:12:b2:0b:ac:f1:38:52:22:5d:f5:f0:24:86:44:5c:6a:
         85:b1:7f:d9:81:0b:65:98:3c:d2:54:83:e3:91:0c:b1:4f:44:
         93:58:8a:af:62:08:ce:a4:6d:ce:f8:f4:7b:b1:e4:9f:e0:d0:
         83:dc:08:d2:62:3c:50:b3:e5:d5:06:f2:0d:4a:d1:38:cf:90:
         d1:b7:ef:b0:ef:6e:5f:ba:64:24:76:8e:eb:23:75:7c:7f:76:
         63:a2:7f:2c:2a:f4:01:53:47:c6:9e:fc:43:7b:ad:b5:b0:14:
         30:e6:26:86:db:a9:1b:f4:11:77:8f:36:fc:0e:ff:66:35:72:
         b5:dd:af:3b:19:20:8c:4d:7e:be:e0:03:7d:1c:d7:9a:d1:34:
         63:2f:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:45:42 2025 by rpki-client