Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa
File:                     c94ce2a3-4802-3ebb-ac84-90080f08baea.roa (raw, json)
Hash identifier:          Oq5HjSu3BW1rTfqO1TyeO0FRC8lN3aJDrFcRAC9RCN8=
Subject key identifier:   14:81:70:03:D6:F4:B8:7D:D1:5F:B5:65:7A:10:98:E3:B2:3F:D7:F8
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F43285849C20A1DF1DF0949B72FE9CA80
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     22418
IP address blocks:        209.151.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1d:f1:df:09:49:b7:2f:e9:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c47d7b59-5230-4c0a-85eb-2890094dc5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:01:90:e5:d1:06:9d:99:41:d6:77:9e:bb:
                    ba:cf:ac:df:55:c9:83:f3:35:a9:9f:63:50:06:9d:
                    94:98:c0:85:42:96:f5:6e:d6:37:1d:bc:11:a4:e8:
                    e2:b0:1e:25:9d:64:ac:b9:97:75:57:c7:1c:20:9f:
                    f0:e6:91:3d:db:99:3f:2c:e5:fa:d1:58:2b:2e:c6:
                    34:96:78:26:83:61:dc:54:2d:08:b2:c7:aa:b0:03:
                    bf:d6:a8:3f:22:f1:51:b6:e1:cd:9e:7b:d4:96:63:
                    05:eb:1c:7f:56:c4:e2:b1:02:1f:a7:23:8a:ea:a9:
                    5a:60:ab:c2:d0:7f:6b:60:ab:eb:2d:19:16:ab:ff:
                    e3:bb:1a:91:b9:81:2b:22:5c:2f:11:af:a5:00:70:
                    55:70:99:14:11:eb:06:c0:d5:a3:4b:91:44:10:a1:
                    5a:56:44:49:d9:ac:67:69:b8:bb:1f:33:3f:6e:e5:
                    45:50:87:02:87:f4:b7:61:95:a0:9a:7d:7f:3c:e6:
                    79:1c:b9:df:2b:dc:67:76:e6:7b:da:ac:be:04:93:
                    7e:6d:29:c2:c9:7a:f5:cb:65:84:dc:79:40:98:e7:
                    50:17:68:e3:b9:ac:60:e0:40:4b:b7:dc:01:fc:dd:
                    2a:67:fc:0d:f9:6a:f3:4e:22:28:be:a4:d1:cb:f8:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:81:70:03:D6:F4:B8:7D:D1:5F:B5:65:7A:10:98:E3:B2:3F:D7:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:8f:ae:3f:af:cb:c9:d4:21:93:4c:b4:28:77:bd:20:ba:
         09:0d:f1:d0:f8:b0:61:01:b3:06:02:f1:ab:4f:1a:78:7c:77:
         23:b2:ad:ae:62:f7:1d:73:c5:64:e1:33:31:4e:06:c4:d6:23:
         36:9c:be:97:c5:df:3c:18:e6:10:ea:6c:0c:4e:b4:61:f1:69:
         26:ed:01:12:65:38:7d:98:5c:57:1f:71:b2:e8:c9:c2:59:af:
         de:11:0b:88:c8:32:28:e3:80:31:3c:35:2d:7c:68:ba:4e:2f:
         8b:04:d4:b7:1d:38:f8:4b:20:87:98:f8:28:44:b7:69:44:12:
         ca:d9:f1:28:8d:61:00:07:b3:e3:79:a8:e7:3e:d7:19:95:3f:
         b8:d0:28:9a:65:76:a3:13:6c:60:cf:ab:70:26:85:80:6d:c7:
         21:65:b1:f3:7e:50:a6:60:31:6f:34:66:ff:f5:58:f9:83:ec:
         86:22:7e:45:1c:47:70:fc:03:bb:b5:e2:50:75:39:6f:66:cf:
         e5:6a:6e:03:81:fd:9a:03:f8:17:2c:9f:af:25:09:9b:24:3b:
         2e:3b:cd:b4:e3:80:75:e3:80:12:0b:6e:0c:82:21:2a:dc:e0:
         82:4a:d1:d0:38:30:3a:fa:4b:ea:d6:75:d7:59:f3:40:4b:db:
         d8:a8:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:22:46 2025 by rpki-client