Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f92c8-1e89-30bc-9b44-33795e6719a9.roa
File:                     b18f92c8-1e89-30bc-9b44-33795e6719a9.roa (raw, json)
Hash identifier:          dGvUGohtxKmSzmUxlKB6BiYD5yUyO1P1OpMJCXZ4ZyY=
Subject key identifier:   CA:11:E3:88:BF:B9:96:02:96:F5:FA:4B:CC:E9:22:05:A2:AB:0A:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36DE02367C9B9EA1773E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f92c8-1e89-30bc-9b44-33795e6719a9.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        151.201.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:de:02:36:7c:9b:9e:a1:77:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=6880721c-03cb-44cc-9efb-61d443d29992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bd:22:3f:4b:b2:da:ae:43:9b:dd:93:3f:cf:
                    ca:93:c0:e9:bc:76:97:1b:40:a4:f8:64:e3:da:1f:
                    cd:cb:ef:8d:c5:0e:be:27:35:36:f2:ef:df:35:29:
                    d7:d4:39:3f:54:8f:ba:a7:81:13:a6:ff:34:f1:07:
                    23:d6:63:02:58:be:22:39:13:b1:3c:47:5b:6f:0e:
                    bf:f0:4c:57:da:e8:73:73:88:4b:a1:dd:f0:cd:05:
                    31:e7:03:0d:c0:f7:a5:63:5b:ed:6d:a6:95:b0:47:
                    68:c7:9b:07:15:1a:ad:1e:57:81:ed:84:70:22:4c:
                    d8:2f:b6:99:fb:ac:49:4e:73:17:3b:03:0e:cc:d1:
                    73:8a:de:68:65:1a:52:e5:2d:b6:9f:ae:e9:08:b1:
                    b7:ff:75:38:5f:2b:59:c4:b8:a1:8d:09:c0:7a:fa:
                    6f:80:a4:b5:41:9c:fb:d5:d2:8c:97:d1:21:27:b6:
                    34:02:f3:d8:b2:b9:b2:09:bb:dd:9c:40:b4:23:8e:
                    00:20:bb:3f:32:53:b4:bf:e6:fc:af:73:b4:2b:ba:
                    b5:4a:0d:59:6a:5f:fc:af:8f:70:91:a0:d0:3a:56:
                    52:f6:73:ac:06:45:c6:4a:74:33:85:c3:d0:ef:8d:
                    ad:50:e8:a8:44:35:82:5c:62:3b:ce:8a:5a:90:16:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:11:E3:88:BF:B9:96:02:96:F5:FA:4B:CC:E9:22:05:A2:AB:0A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f92c8-1e89-30bc-9b44-33795e6719a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:67:c0:c3:26:58:66:8b:8f:b0:ea:f8:8f:11:25:2f:97:
         71:6e:92:3a:26:a2:06:7c:fc:da:10:4d:f3:d9:fb:21:ec:8d:
         83:b7:cd:b4:a8:3a:fd:dd:c1:ab:ee:f3:77:63:f1:5a:fa:4b:
         85:cb:2a:37:cf:31:e2:ad:0b:d2:e3:8c:3c:30:90:7c:28:6f:
         e6:35:0b:9e:b5:38:96:10:5b:1c:90:e6:50:1f:f9:f0:dd:05:
         d8:9a:c8:52:58:dc:b0:d2:41:1d:f1:75:81:fd:ce:d9:fa:ee:
         c7:71:de:b3:61:b7:65:10:14:c9:38:78:62:9b:ab:4f:10:ed:
         e5:4a:2a:a9:c6:46:19:2c:8c:bb:e6:0e:db:5a:c7:78:50:82:
         d0:9b:5b:dd:ca:a8:eb:11:bc:a0:8d:96:db:51:24:ff:c9:36:
         38:77:b8:e7:65:59:24:0f:98:29:a6:92:1f:d7:aa:9e:d6:f0:
         ac:0c:6a:2e:98:ce:95:77:d7:af:9d:97:6e:d1:4f:44:ae:98:
         53:ce:c3:24:99:cd:33:05:6e:93:7f:1f:9d:95:9f:54:86:fe:
         fe:9d:ff:0a:0d:d4:4b:a6:6b:7b:3f:79:94:02:ed:74:56:67:
         18:68:cc:f4:8b:40:bd:83:8d:00:7e:96:3d:f5:50:e7:5d:76:
         0f:2f:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:17 2025 by rpki-client