Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa
File:                     008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa (raw, json)
Hash identifier:          gapwaDATJvwo8P2RgG8aLF/ISI6K52SE4kJI4aIbokA=
Subject key identifier:   69:A8:27:3F:38:DC:44:36:B6:06:D4:7F:06:42:87:65:86:D2:0A:6C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584AC9DB9999601F48155D238380
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        170.114.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:99:99:60:1f:48:15:5d:23:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=6c5b792d-03d4-4af0-8671-35de0701755d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:75:26:3a:8c:dd:7b:60:27:32:09:21:d2:
                    37:17:4b:0e:f5:72:7b:64:a2:8f:32:3e:54:1e:c9:
                    36:c7:c2:71:a4:d1:71:50:c5:9d:17:60:9e:42:0d:
                    6a:ef:6a:76:27:4c:62:b6:51:d5:26:25:59:99:98:
                    c9:48:e3:3b:a2:bf:ca:91:23:5e:8c:2d:48:6a:b2:
                    c4:89:88:c7:22:ca:55:45:e7:f6:4a:df:0b:18:96:
                    e6:e9:08:85:b5:9e:b3:5b:e8:4a:36:54:bd:8e:80:
                    dd:2d:e9:5e:54:85:c7:3e:bd:c3:cd:ea:eb:1a:22:
                    85:a2:c8:1c:d9:00:da:b1:d5:6b:24:77:39:13:8a:
                    a7:76:ee:b8:e8:23:9e:e0:45:65:0b:b5:3e:23:cd:
                    3d:16:d5:d1:9a:bc:cf:c1:f4:96:d1:4e:55:d1:cb:
                    ab:93:19:b4:5e:76:af:f3:27:4e:6d:ac:f0:b6:b2:
                    9c:3b:dd:95:df:95:ea:7f:b3:f5:d7:1f:10:1c:d8:
                    01:14:c4:e1:94:a1:7f:95:5c:94:ad:45:fa:75:56:
                    aa:fe:3b:c8:4d:28:e3:b4:8c:02:e0:3b:11:31:b6:
                    66:10:d9:c9:d7:b7:71:e2:27:25:a3:48:31:c0:10:
                    c2:5e:5f:e6:1a:6c:d7:dd:d5:14:37:ef:d8:46:5f:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:27:3F:38:DC:44:36:B6:06:D4:7F:06:42:87:65:86:D2:0A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:9d:72:4f:c6:fd:2a:bc:b6:bd:d8:9c:16:e3:e2:44:29:59:
         db:db:9d:89:5d:45:08:05:7e:72:a2:3d:4e:04:11:eb:d9:92:
         42:eb:d8:82:b6:c2:e5:3d:82:b6:87:f3:a6:65:c6:c1:d6:0f:
         cb:8f:5e:3e:63:24:f0:af:77:61:95:c3:13:33:f4:55:68:05:
         55:77:17:ea:b9:fc:d3:63:2e:45:5d:35:b8:b0:43:90:0d:f5:
         70:ee:0a:f7:26:fa:10:f5:3c:15:c4:8b:48:ed:56:4e:47:6b:
         e9:dc:16:ae:d0:13:b8:90:89:06:14:8f:be:22:ea:1c:36:a8:
         f3:59:b5:84:6a:24:2d:e0:36:e3:59:21:c2:99:8f:32:bc:f4:
         6d:47:70:8d:6f:5a:8e:5d:e6:47:39:17:09:13:b7:7a:59:c3:
         c9:a4:5a:94:6c:3b:c1:27:02:b1:81:b9:f4:60:37:10:9f:1d:
         38:de:09:3d:a1:04:31:53:d7:98:5c:cb:a2:2a:60:b4:51:81:
         97:15:0f:5e:4e:17:05:29:0f:5a:af:05:11:4e:b3:82:5b:09:
         d3:4c:d5:77:2f:4d:2d:ec:8b:26:dd:17:bc:7e:94:bf:da:ae:
         65:70:78:a8:4d:66:3b:6e:70:f2:09:50:63:6b:d4:c5:8a:24:
         fc:6e:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:11:16 2025 by rpki-client