Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa
File:                     589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa (raw, json)
Hash identifier:          TCxJV7mKQJsr9YNzxuj52JT34hx/Fbzw9kY9tiGz9h8=
Subject key identifier:   20:E4:8B:3B:80:F6:11:DB:F5:D5:5E:72:D7:A3:96:49:EA:FB:FD:33
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584A841235883F883020BB6D3380
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        192.104.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:35:88:3f:88:30:20:bb:6d:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5aebad8c-9a74-45b2-a2aa-2b8d10f8d51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9f:18:e0:f8:74:99:eb:e4:06:43:f9:df:fa:
                    6e:d8:90:f6:be:67:0e:97:45:47:62:80:24:31:82:
                    89:8e:b0:45:ff:c5:54:13:98:9c:5e:27:e3:f6:aa:
                    28:d5:5b:ae:f5:80:1e:61:2a:46:22:fb:6f:d7:eb:
                    b5:48:13:d8:e8:b6:cf:04:c7:c9:f5:90:b1:de:da:
                    ef:de:ea:84:e3:d9:58:b3:ff:23:7d:00:71:a5:65:
                    32:1d:f5:86:6b:80:05:a5:97:43:85:30:f7:04:fd:
                    25:ca:09:1e:a4:2a:f8:74:48:8e:c8:7b:48:ae:3c:
                    51:f2:43:0b:42:4f:86:8f:0d:53:c7:17:84:87:2e:
                    6f:89:5f:e0:58:20:78:55:8a:31:f3:a3:97:d8:0e:
                    3a:a0:20:c4:c9:c1:88:5b:8b:50:f1:7b:05:1d:f2:
                    a0:28:83:d2:07:6f:76:78:6e:46:11:0f:5d:3b:17:
                    e0:ee:ee:50:ab:59:44:52:db:7e:20:52:45:a6:4d:
                    c1:f5:fc:03:de:c3:70:1e:fd:df:81:c1:1f:df:84:
                    6c:6c:69:1b:36:2d:76:f9:a2:13:10:a1:5a:7b:0d:
                    da:bb:28:52:15:47:05:6d:ca:3c:f1:e6:cf:c8:2c:
                    71:a7:a0:48:3b:a5:9c:42:05:97:f3:00:7c:26:02:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E4:8B:3B:80:F6:11:DB:F5:D5:5E:72:D7:A3:96:49:EA:FB:FD:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/589bbfa9-ed5d-3100-a7f1-7d37803dd68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:85:47:c2:16:47:4a:ff:0a:54:27:d6:03:73:e3:18:a3:be:
         01:05:7c:51:ba:6f:95:64:41:11:db:93:b8:72:59:74:c9:29:
         15:91:2a:d8:dd:39:22:79:ca:1f:df:12:c2:f4:72:a1:41:bb:
         68:d7:39:61:75:4d:c3:18:36:d4:aa:29:34:16:6b:4f:71:48:
         dd:88:26:04:ee:b8:1d:2a:d4:2d:a6:b0:50:0e:89:df:9f:8b:
         5a:7c:f5:8f:92:77:5a:cd:60:f3:5a:11:7d:87:2d:16:8b:55:
         44:de:52:3e:4d:f6:7c:6d:ad:9f:e5:cb:63:d7:f9:b2:66:26:
         6d:05:c2:73:b3:02:e9:89:ec:52:03:a4:cf:40:ae:e6:be:3a:
         45:ab:e9:70:e3:10:fc:1d:d7:be:0f:33:bd:48:dd:54:28:70:
         d5:25:25:88:b3:28:36:70:04:85:53:70:9c:8a:50:75:58:8a:
         cf:de:10:bb:23:b9:77:a3:fc:6d:fb:88:9e:82:a0:8f:67:d9:
         46:05:5b:56:b6:f4:f3:28:e6:91:90:af:89:d3:f6:31:5a:f1:
         89:1c:4d:bc:0f:85:58:c5:aa:3a:2f:7c:d8:90:ec:f5:a8:dc:
         c6:97:79:48:30:32:9c:95:a6:16:24:c6:32:59:5a:62:3b:00:
         7e:5d:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:32 2025 by rpki-client