Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa
File:                     16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa (raw, json)
Hash identifier:          TQ25xMN1KJIzCt0Wv3olREMaTt7t/z7eabuW4Qdb2OQ=
Subject key identifier:   10:54:09:85:F9:B9:6F:E1:EA:E7:B0:96:2C:3B:54:5E:8B:27:8D:57
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285848ADC617A00AB6545EBB2B7580
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     202
IP address blocks:        192.25.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:17:a0:0a:b6:54:5e:bb:2b:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=ffe5c5ad-ede5-48b1-a351-0413e7548f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:7c:e7:74:a0:e4:26:99:85:0a:33:98:b0:
                    b8:3c:5f:70:8f:ac:aa:4c:ca:f0:76:76:1e:95:4d:
                    ef:30:0d:52:58:fd:8f:86:d6:65:d5:68:0d:dd:df:
                    48:4e:bc:fd:59:90:22:b9:bc:a4:1f:71:45:20:a8:
                    89:5d:97:ea:76:47:13:9e:6b:42:50:58:e1:dd:44:
                    c3:0b:87:8b:f0:fe:37:62:b2:51:df:5c:fb:6c:06:
                    80:fe:29:71:69:b3:a4:81:5f:36:4c:1b:28:77:6e:
                    f5:0b:ab:f1:6a:18:53:81:b3:6f:cb:b2:de:45:fe:
                    7d:e3:7e:63:3a:89:c5:2a:7a:1f:b8:30:3d:45:03:
                    d9:75:45:79:25:96:cc:93:d2:65:95:91:77:b0:a6:
                    75:df:b0:d6:a7:e6:18:37:b8:3d:db:12:a5:14:31:
                    1c:c5:d3:e4:61:17:72:db:d0:71:cd:74:2a:26:64:
                    9d:3e:ab:b5:a8:93:74:1a:7b:c7:28:5b:90:2f:8d:
                    a0:fe:34:87:78:42:e8:97:b6:a1:a6:73:f6:6c:2e:
                    b6:70:a0:ae:02:5a:a6:b1:5c:5f:17:17:33:7b:aa:
                    f0:5b:de:95:e4:9e:fc:5e:4a:4f:64:9f:dc:ca:6d:
                    ee:93:5c:c0:6b:68:75:6e:93:7c:ac:ed:ea:21:49:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:54:09:85:F9:B9:6F:E1:EA:E7:B0:96:2C:3B:54:5E:8B:27:8D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:5f:58:c8:bd:bd:ad:1a:d9:36:78:5b:a9:6b:78:de:2d:85:
         42:04:3e:07:9d:46:26:a6:21:0b:e4:d0:88:f6:73:26:fd:53:
         03:b8:aa:75:6c:3c:48:ed:2d:7e:26:e2:ab:28:65:b8:39:3d:
         e3:30:1f:59:02:12:d6:a0:05:2d:ac:a4:a5:54:8f:e5:90:d2:
         54:f2:fa:10:42:74:b6:07:f7:4f:28:4d:39:46:d0:e5:b4:77:
         6a:d3:3c:5f:1d:a5:60:5b:f3:f5:f1:1e:98:e7:d4:61:02:6a:
         3a:2b:85:cc:3a:1a:97:64:f4:7d:b7:35:51:e7:f8:ec:fc:4e:
         97:80:50:13:39:df:d6:98:47:ab:86:8f:4a:ce:c5:d8:89:c4:
         13:42:55:8e:d8:34:42:45:6b:24:73:bc:b0:13:6a:6b:a9:7f:
         db:4c:da:4a:6c:09:21:a7:9f:84:aa:1f:e6:22:5d:b9:c9:17:
         e1:4c:91:e8:b5:eb:39:9c:3b:8e:6e:d0:5f:45:f4:6e:f0:cd:
         ff:3d:75:89:3a:0c:98:68:2f:ee:b1:f5:a4:b4:2b:f9:73:fe:
         2a:9b:87:3b:96:fd:d7:7c:04:7f:ea:f8:93:61:34:7d:1f:f5:
         1d:ad:92:2c:ba:0c:8a:fe:e2:99:38:07:25:a6:51:d8:82:15:
         bc:e3:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:27 2025 by rpki-client