Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa
File:                     c94ce2a3-4802-3ebb-ac84-90080f08baea.roa (raw, json)
Hash identifier:          XGR2JL+x+2P5jLx68AGgAvQ6su7seGo6JAx1aYqjjaE=
Subject key identifier:   6C:05:8A:54:FF:C5:F0:3E:04:0C:BB:44:80:46:56:A8:40:6C:D9:51
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584AA160DCE90879343FA965C740
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     22418
IP address blocks:        209.151.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:dc:e9:08:79:34:3f:a9:65:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=41e0a2c0-d443-44c3-a335-04f922fb39a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:26:63:06:d0:da:94:fc:7f:26:c9:52:d4:
                    bc:bb:e6:de:b8:fb:d0:21:cf:c5:11:22:c3:53:f7:
                    2c:df:1b:06:7e:b3:6d:e0:1f:1c:25:20:d1:c4:2b:
                    cd:96:35:94:2a:1f:3c:26:00:10:f4:06:e7:55:f6:
                    0f:33:f9:1a:75:4d:06:a6:1b:c2:87:92:d8:cb:a9:
                    f9:21:43:47:75:0c:c5:3b:3e:85:ff:96:d6:2b:34:
                    75:3a:a9:3c:14:45:16:24:f4:eb:c1:ad:cb:b9:96:
                    98:50:23:c4:d4:94:07:04:22:48:b8:67:18:94:47:
                    35:e3:ba:38:7e:6f:22:e9:f8:0d:50:34:e3:98:b2:
                    f8:35:db:d1:72:28:e4:b8:de:37:d3:06:d5:f6:0a:
                    23:a0:8b:99:a4:05:86:b5:5b:ad:91:9d:d7:90:ae:
                    06:e5:24:e0:eb:15:92:cd:24:a1:51:8a:2a:4b:ef:
                    e3:9c:c3:27:4c:c3:88:cc:dc:9e:b8:8d:1a:ed:08:
                    4c:dc:18:ac:37:72:df:7f:bc:97:9c:46:b0:f1:de:
                    12:d3:cb:1a:43:c5:ce:93:23:c6:28:1f:d6:cb:b7:
                    5b:19:68:2f:0e:fa:59:a9:4c:ab:0a:32:14:c9:fd:
                    75:7b:84:cd:ef:be:9e:64:f2:7f:30:72:f2:35:12:
                    1d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:05:8A:54:FF:C5:F0:3E:04:0C:BB:44:80:46:56:A8:40:6C:D9:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:0b:ee:99:bb:e2:45:c5:9e:ee:cb:6b:8a:76:a0:93:fe:
         f0:8d:7e:86:d5:3b:ab:af:0f:cf:07:c0:d5:c4:2b:62:1d:f3:
         c8:36:f3:bd:8c:bc:d6:a3:b5:75:74:ae:1d:bc:7b:8a:4c:2d:
         fa:f0:59:70:1c:9b:f3:3b:e7:4c:8d:37:3e:61:88:88:ec:08:
         ab:4d:fe:2c:73:ea:6a:14:ac:eb:d3:af:9d:ee:57:2a:61:bb:
         af:4e:92:cb:44:a8:a7:cb:fc:ae:53:db:ef:b2:66:0b:fc:ca:
         4a:3e:47:f2:e7:a5:08:7b:af:f5:3d:59:69:2c:68:19:cc:4e:
         5d:dd:f4:54:2a:e3:e3:ba:c2:9e:c8:4d:f0:b5:b5:a7:78:c3:
         f7:87:cc:d3:f3:7b:81:9a:c7:f6:24:34:82:f0:ef:2f:79:68:
         fc:17:a8:59:16:30:14:76:6d:52:6f:04:63:59:df:38:21:17:
         1c:3b:0d:d6:f5:6f:14:c9:ce:78:18:44:fc:e4:b6:3e:37:de:
         f2:a9:f3:ea:71:b1:38:01:3e:f7:c6:cb:2d:9b:ab:a2:74:d4:
         74:8a:db:3b:74:59:5d:c7:1d:61:17:8e:bd:13:d8:d7:5d:f6:
         c8:55:94:9a:72:2a:ab:13:c8:5a:61:96:a9:9e:ea:4d:7d:75:
         69:73:83:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:00:42 2025 by rpki-client