Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
File:                     9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa (raw, json)
Hash identifier:          z/fd0dJb9N7867CCILaVbL05w4qWobK2E3HFddHDHJM=
Subject key identifier:   0B:A8:13:D8:7B:99:B9:79:5C:7E:28:07:6C:63:D9:B9:9F:06:1B:59
Certificate issuer:       /CN=336db060-273c-4da7-88b6-6f47c8830474
Certificate serial:       010D0C9F4328584A7E7B5862098F9BA7920B2600
Authority key identifier: 75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     398663
IP address blocks:        157.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:58:62:09:8f:9b:a7:92:0b:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336db060-273c-4da7-88b6-6f47c8830474
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=dcd9494f-3112-4439-bc92-7428bdaf8733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:f3:86:91:de:e8:ce:e2:75:dd:22:8b:d9:
                    a3:d6:88:a2:97:e8:d9:af:50:04:b8:14:d3:0c:3f:
                    46:a8:90:5b:25:dd:a7:45:7c:48:84:84:33:18:c4:
                    3a:ee:2b:45:3b:e2:fd:49:64:d2:5d:a4:aa:e7:59:
                    56:ea:22:fc:c2:f6:94:38:26:dd:42:0d:4a:43:2c:
                    a9:6b:82:82:40:8b:a3:58:39:62:bf:50:36:ec:a9:
                    c2:4c:ca:7d:ae:f0:c0:f2:37:85:c5:ad:65:3c:e2:
                    d1:0c:54:b0:68:43:6a:80:60:04:17:41:70:40:c5:
                    e7:45:c3:f9:81:a2:06:60:1a:8b:d0:49:99:d3:81:
                    91:6a:62:e0:07:a1:7b:50:ba:06:40:ac:af:63:76:
                    37:20:c7:d7:8f:a9:55:65:19:39:21:7f:1b:6a:d2:
                    8e:21:7a:df:93:29:b9:22:fd:0a:71:c8:14:0b:4f:
                    61:c4:8e:89:da:4c:42:5a:a5:ac:fe:75:ec:c7:8f:
                    9f:eb:8e:15:47:c5:a1:77:c7:4b:42:da:7e:03:1c:
                    b6:c5:8a:c4:80:f1:95:7f:b0:67:a9:44:9c:a1:25:
                    31:2e:27:e3:e2:fd:ec:cf:dd:6b:71:e0:81:b6:f5:
                    87:76:5d:e3:89:3b:2b:d4:a0:8a:e6:03:aa:bb:83:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:13:D8:7B:99:B9:79:5C:7E:28:07:6C:63:D9:B9:9F:06:1B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl

            X509v3 Authority Key Identifier:
                keyid:75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:1e:db:60:75:56:54:f5:ca:a9:6b:6c:64:37:de:28:ad:
         9c:40:09:74:5f:a1:a3:8c:bb:e9:db:ba:b3:7c:58:93:cf:8c:
         7e:7e:14:05:f8:f2:63:2e:4e:44:1e:96:6a:b6:ae:d9:44:4d:
         7b:75:84:64:fd:ea:25:85:c8:24:98:a8:36:39:a1:24:cf:a2:
         90:15:00:39:df:18:9f:db:34:19:41:0c:42:fd:83:c1:1c:d4:
         82:a2:9c:8c:8d:70:d3:d2:20:0b:4c:74:fc:8b:98:53:b7:b2:
         1e:23:81:2b:f5:18:b9:50:f6:11:a2:91:1f:d9:e4:01:15:25:
         3b:27:b9:41:6d:41:fa:e7:77:85:47:7e:0c:ab:8b:a7:04:9b:
         aa:8a:81:71:9f:71:d3:93:c5:46:76:21:83:56:46:0b:77:cf:
         38:b8:76:96:fc:e6:fb:fa:ed:ea:0c:61:65:f9:61:66:23:42:
         5f:53:63:2a:ab:a4:9c:b7:c9:ba:9c:2f:2a:d0:7b:b1:c9:96:
         68:e3:7c:d9:07:7d:18:84:b8:8b:0b:b7:3e:ab:1a:92:b6:6b:
         8e:ae:3f:93:dc:5a:f0:69:05:1f:60:dc:3c:63:e5:77:b2:e2:
         1b:5a:f5:80:18:82:4f:4f:3d:aa:de:f0:ee:64:05:08:55:0d:
         73:07:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:33:26 2025 by rpki-client