Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa
File:                     5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa (raw, json)
Hash identifier:          PL6tXmS08UoIsirIbWXrxfObY0duDGOLBqwHxNhQYMY=
Subject key identifier:   16:2D:86:58:17:5E:6C:09:E8:14:3D:99:18:5F:87:ED:87:CC:EE:0D
Certificate issuer:       /CN=4047a12d-1fef-4e6b-b868-76444464eabf
Certificate serial:       010D0C9F432858499AF4826026C708E81C511FC0
Authority key identifier: EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     15199
IP address blocks:        140.160.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:82:60:26:c7:08:e8:1c:51:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4047a12d-1fef-4e6b-b868-76444464eabf
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=ea6a7161-2885-420f-9fbf-39c83b7e6129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:fb:07:32:ef:2f:6f:3f:6f:20:9c:c1:c0:
                    d5:eb:90:3a:5a:02:51:59:dc:4a:51:5e:6a:7d:43:
                    23:c5:1e:64:09:46:cb:c2:c8:e4:a2:fd:ce:34:39:
                    b7:41:b7:44:40:6e:33:38:f2:19:2d:50:e3:ba:7e:
                    81:c0:45:52:7f:52:39:ff:3a:3f:28:e6:5e:29:09:
                    43:5d:90:67:47:80:ff:1d:97:ba:27:34:37:5f:78:
                    12:c8:39:fb:dd:aa:0d:69:44:27:f2:cd:36:11:c6:
                    48:d5:7c:95:02:23:ab:f2:08:de:23:5d:9d:45:12:
                    5f:c5:c4:8a:36:2e:3c:e3:ef:ac:d2:32:42:c7:62:
                    96:c5:f6:6b:f8:0b:68:65:db:51:d9:1d:b8:0a:9b:
                    a7:b3:5e:66:3a:02:63:05:8f:6a:21:d2:fa:ea:f0:
                    94:89:46:b5:50:d0:39:1a:fc:73:45:5e:42:8f:3f:
                    0d:75:58:f0:04:c8:eb:32:ad:71:58:16:14:f8:aa:
                    70:5a:1b:aa:47:1f:9f:63:fe:9f:ab:32:31:f6:d8:
                    67:af:72:d2:8b:9b:20:d8:82:d5:c4:a6:01:12:ce:
                    f6:e1:71:9a:ea:f5:85:5f:8c:1b:b1:5c:49:f0:2d:
                    81:25:49:4e:3b:cc:96:bf:92:ad:71:f7:b6:60:c4:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2D:86:58:17:5E:6C:09:E8:14:3D:99:18:5F:87:ED:87:CC:EE:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl

            X509v3 Authority Key Identifier:
                keyid:EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:68:ec:7c:40:4c:74:8f:d2:d6:19:13:59:dd:76:f0:01:b4:
         cd:33:43:e8:81:ea:7e:e6:a8:fe:3c:6a:a9:9d:74:b1:c0:2f:
         84:01:05:3a:35:7b:aa:7a:98:de:6b:d8:22:2a:cc:f0:65:dd:
         c3:a7:fe:09:0e:f4:e1:e3:50:25:38:f1:fd:1a:0c:c2:24:f7:
         17:9f:2e:70:b4:50:10:dd:a5:dd:ec:1c:23:15:b4:68:50:97:
         34:5e:d4:c6:f4:1f:13:7f:dc:3b:5e:7a:fd:f9:88:4b:d5:a3:
         9d:4b:a4:f4:ee:78:b0:42:51:8e:e0:ec:ca:ab:36:53:f2:82:
         c6:44:76:f5:00:2e:73:af:f7:0d:26:20:12:d4:b1:25:ce:04:
         4b:c2:41:7e:85:3d:00:f6:60:76:23:45:97:0d:4d:90:c0:83:
         5b:27:aa:32:35:50:6e:43:4f:58:1a:1d:3d:30:f9:17:29:36:
         d0:1f:10:62:15:92:61:e8:99:f8:70:cd:65:16:2e:c9:f0:0f:
         45:fe:77:53:84:ae:0d:53:b4:83:5c:9b:9a:5c:c4:9f:4a:1d:
         b9:db:e5:bd:91:dd:1d:3f:e4:b2:05:2e:9f:8b:47:5f:6e:7c:
         eb:28:89:2a:8f:ce:e5:58:82:85:88:40:89:84:5c:c3:c0:20:
         b1:b0:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:42:21 2025 by rpki-client