Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/0e011430-ac31-3a4c-b85c-3f7151c92d53.roa
File:                     0e011430-ac31-3a4c-b85c-3f7151c92d53.roa (raw, json)
Hash identifier:          yAu0vcX1aGb1h0+9v45hEaTbs2vm5c+Ji4iPy0u4Yhk=
Subject key identifier:   AA:21:CD:C3:D2:C8:9F:6D:2D:5E:52:AF:B4:0C:01:8E:8F:66:89:C7
Certificate issuer:       /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial:       010D0C9F4328584A189542C21ADA5B6E1C2E5C00
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/0e011430-ac31-3a4c-b85c-3f7151c92d53.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     9025
IP address blocks:        153.46.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:42:c2:1a:da:5b:6e:1c:2e:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=54b0b1e7-649c-4dc7-be47-770d8f294800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:cf:f9:f8:54:64:a1:3c:7a:01:69:a2:a7:
                    11:bd:e3:c2:df:6c:68:25:e4:3c:46:af:1a:be:d2:
                    26:49:bf:ea:da:ea:a3:0c:73:7f:50:7d:3c:0e:2f:
                    e8:e0:54:30:f7:c1:1c:f3:7a:5b:7f:ed:2c:03:12:
                    5d:ae:4b:94:fa:34:98:5d:50:70:1f:9a:fb:26:6f:
                    c6:6b:e3:a3:cc:6b:38:94:39:ec:4a:dc:62:80:08:
                    64:47:ed:a8:dc:1e:fc:e9:88:0b:82:37:f7:0e:3e:
                    37:9b:bb:84:12:1a:69:14:c7:79:70:d6:41:4f:35:
                    b7:e8:71:ab:95:13:e8:f7:6e:a8:98:c8:0e:cd:70:
                    18:d6:82:59:48:f4:d5:f6:d6:94:c7:2a:0f:0d:8a:
                    62:3b:a4:80:39:0d:a6:49:63:22:f8:e7:49:70:ef:
                    89:61:96:33:f3:3a:92:0d:39:93:2e:94:7a:7b:34:
                    14:c6:19:1c:01:79:cb:bd:a5:3f:31:7c:e5:46:f2:
                    d5:60:e8:b2:5b:a4:07:3b:c3:5f:37:11:11:7a:8b:
                    48:99:90:3a:60:e3:e2:7c:19:29:fb:bf:fc:5c:df:
                    39:0e:06:db:fd:66:b7:9c:3a:32:33:ac:3a:73:dc:
                    d2:1d:5c:a8:20:3c:56:01:e7:4e:ae:c9:2c:8f:d5:
                    b3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:21:CD:C3:D2:C8:9F:6D:2D:5E:52:AF:B4:0C:01:8E:8F:66:89:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/0e011430-ac31-3a4c-b85c-3f7151c92d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl

            X509v3 Authority Key Identifier:
                keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.46.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:ce:f1:68:0b:18:77:6b:24:aa:4d:74:c5:82:ea:b2:e4:
         5f:2f:73:39:c9:05:7a:f6:86:5a:23:60:ae:64:d7:78:10:d0:
         ee:1c:75:e9:84:ea:b0:4c:31:2d:55:21:2f:5d:7f:45:b6:db:
         f8:41:72:c0:23:c6:86:54:6d:13:d5:de:ac:52:12:80:78:17:
         0a:af:68:4b:ed:58:01:6c:d3:ef:7d:10:f2:cc:69:37:dc:d3:
         0f:33:9e:42:30:6d:4f:36:c0:78:25:f5:4c:3b:3b:40:ac:40:
         ad:e2:cd:9b:8b:15:dd:3b:17:82:79:37:5b:ce:14:47:a5:31:
         17:09:41:e4:92:7f:3d:b7:e1:ca:45:ee:da:e7:c1:cf:d2:14:
         2d:8e:17:ef:4d:1b:1e:2b:a9:98:23:fc:f2:c2:ba:fb:e3:4e:
         36:a2:47:90:5a:f9:a1:38:d1:0f:f9:f4:9f:b9:7b:85:1a:f0:
         6f:f0:40:dd:64:3b:f4:84:3e:fa:70:dc:c7:27:93:0e:4a:36:
         06:20:4a:8e:14:67:22:44:81:9e:cd:e0:4e:d7:38:4c:63:76:
         0d:d9:8b:09:91:bf:05:66:21:db:fb:f7:67:e0:c0:2d:c2:c0:
         a2:b6:2a:aa:5a:19:ed:a5:1d:eb:d7:b2:51:fe:ba:d5:96:ec:
         35:f9:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:11:36 2025 by rpki-client