Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/021ee080-938d-3d1d-a45d-a26f37869c9e.roa
File:                     021ee080-938d-3d1d-a45d-a26f37869c9e.roa (raw, json)
Hash identifier:          X2CtTCQqi3j6Kkko/fOyLGp9YEJ7aVhWGg62+NwZYsA=
Subject key identifier:   EF:71:AF:E1:50:FB:98:4A:93:5F:98:EB:EE:59:17:CF:C9:83:08:3E
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F432858498CFF14C7DFAA73F0D115EA5C
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/021ee080-938d-3d1d-a45d-a26f37869c9e.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     6250
IP address blocks:        76.164.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:14:c7:df:aa:73:f0:d1:15:ea:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=9bcbb87f-f714-4760-b342-2d4436cbef76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b0:d8:f0:67:65:bd:30:01:73:1f:59:6a:9f:
                    63:21:b4:56:3a:62:45:ce:04:68:d3:a1:39:44:e2:
                    e3:02:03:d5:42:7a:76:86:bc:5f:6e:76:e4:ad:64:
                    bf:1f:e2:94:6c:95:af:85:46:9c:b0:0d:73:ec:0b:
                    49:62:cf:fb:50:ab:7e:7a:f6:15:a3:57:1e:26:d6:
                    34:e8:b8:07:3a:53:39:fd:e9:70:ee:39:e3:7a:e6:
                    82:9d:c7:1d:2f:31:2f:66:d3:f1:65:e6:61:f8:3f:
                    48:b7:3d:ae:23:34:56:7c:f0:fe:64:6e:f5:e7:6c:
                    f6:9a:45:9e:e1:b9:2a:79:8a:e8:3d:40:90:f6:bb:
                    ef:29:61:ef:a2:a3:70:13:d3:8d:71:14:7a:09:a7:
                    4b:89:08:09:54:f5:2d:e6:b7:5d:19:d3:7d:fa:a7:
                    23:fb:33:54:b7:66:6c:b5:93:1a:05:b0:f8:df:ab:
                    dd:f2:66:67:0e:85:07:3a:d6:f8:ca:a4:09:38:06:
                    79:60:49:48:17:7f:4b:af:bd:03:d1:96:8c:4e:1a:
                    3c:01:b8:0f:93:df:fc:ba:cd:66:22:db:f7:bb:eb:
                    9d:4a:a5:e7:32:c1:6f:2e:90:fd:13:e4:26:9c:83:
                    ff:8e:1c:17:52:a0:a3:af:0f:37:6f:25:4f:d7:74:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:71:AF:E1:50:FB:98:4A:93:5F:98:EB:EE:59:17:CF:C9:83:08:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/021ee080-938d-3d1d-a45d-a26f37869c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:5f:3f:51:5c:a0:7d:68:fb:d5:da:b9:aa:b8:fe:ea:02:
         d1:84:6b:b3:64:ff:61:87:b9:2d:03:07:8b:5b:76:3d:f9:15:
         0b:d3:ff:f6:48:06:8e:7c:4f:1a:85:5f:ca:eb:e5:1b:cc:a5:
         77:a3:08:b6:cb:9f:40:59:81:dd:82:21:5d:71:b9:f0:e6:68:
         5c:81:1a:ce:83:b0:dc:68:7f:85:4b:09:75:29:cb:40:76:cd:
         a0:ae:ab:d1:fa:1b:bf:77:0f:23:ff:bc:e8:ce:9f:82:60:03:
         96:65:93:9f:e3:d8:81:f8:01:1d:eb:30:62:c8:05:fa:fc:0d:
         6f:d0:1e:de:b7:82:48:2d:fc:91:24:17:db:bd:fb:a5:31:43:
         f8:3a:3c:f3:bc:f3:ab:1f:3d:76:e6:9b:13:8d:94:06:0e:d6:
         17:8e:ef:b6:0f:40:75:0c:c0:3a:8a:58:27:ba:0d:16:d6:85:
         de:68:d0:ea:01:63:c6:53:53:c8:79:44:8b:77:69:16:ba:3c:
         6b:ed:4b:36:c5:fe:c3:93:be:b4:bc:7a:40:35:64:29:a1:d6:
         7f:ff:1e:82:7f:5b:87:c3:0f:54:f1:fa:87:a7:3b:8f:0c:2e:
         e7:43:dd:93:e8:4d:47:f2:57:a8:4b:a8:3b:8c:e1:96:9b:3a:
         e3:b6:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:23:13 2025 by rpki-client