Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/160c116e-1af8-3c93-8af7-bce523fcfcd1.roa
File:                     160c116e-1af8-3c93-8af7-bce523fcfcd1.roa (raw, json)
Hash identifier:          f/hi2FgQUJjy6mjXqwgIe8YOfUyoX0JOi6FSQEhJBkE=
Subject key identifier:   E2:99:3B:21:FB:1C:EA:AD:97:94:C5:1B:EB:61:CB:74:EF:F3:0E:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07459E2A45E261703812C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/160c116e-1af8-3c93-8af7-bce523fcfcd1.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        69.142.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:45:9e:2a:45:e2:61:70:38:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=89164856-1746-4d18-b473-4721e0603a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a4:ef:0b:39:4f:7e:97:22:3c:87:e9:d6:d4:
                    33:05:78:a4:8c:c9:18:7c:ae:8f:36:1e:30:cd:4e:
                    8e:65:83:0a:95:ab:18:87:c9:81:dc:81:6b:b7:c9:
                    a7:36:77:28:8d:82:70:a2:6e:ba:49:bd:0d:69:6f:
                    3e:b5:f3:49:6d:6c:c4:89:a1:71:f6:3a:a9:40:0a:
                    5c:0f:29:f8:c1:a8:a0:57:16:cf:23:d5:59:81:62:
                    20:9d:0f:85:c4:5b:e6:34:b0:c9:fb:83:76:75:58:
                    e9:72:2e:6b:11:bd:8d:cd:c0:50:01:a6:3a:cd:cc:
                    d5:47:bc:a7:f2:fc:95:db:1d:2b:18:24:04:31:a7:
                    d4:3d:dc:fd:b6:83:28:fe:c4:be:90:22:61:ff:82:
                    f6:af:fd:3e:79:ea:59:67:66:e7:bf:59:87:a4:8c:
                    5c:54:ee:3b:de:8f:9f:4e:5a:ca:49:e3:53:cd:e7:
                    00:5c:87:ac:cf:b0:f2:99:c8:2a:b3:a2:a2:cc:db:
                    79:1b:a7:fa:4a:6c:8a:2d:70:6c:02:c6:b0:53:31:
                    c7:19:da:b3:e6:22:f8:88:5e:32:a3:f1:62:b1:41:
                    f0:8c:4a:4a:b3:c6:3e:2c:75:ad:67:ac:dc:8c:e2:
                    8c:18:5a:1f:70:c6:fd:f4:76:b1:6e:77:f1:ea:39:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:99:3B:21:FB:1C:EA:AD:97:94:C5:1B:EB:61:CB:74:EF:F3:0E:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/160c116e-1af8-3c93-8af7-bce523fcfcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.142.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:38:48:01:db:b2:a1:ba:51:82:46:38:06:1e:f1:3f:ec:d0:
         5d:8a:02:eb:da:25:6f:df:16:2a:58:16:7d:b3:58:24:98:84:
         c7:a8:f8:bf:ab:92:f1:0d:31:3d:48:b4:13:ca:8d:09:bf:46:
         ec:d7:69:e1:f6:1c:5a:15:36:3d:42:f8:f6:c2:d4:b9:7e:bf:
         e0:1e:c7:40:4c:15:c6:f7:eb:30:a9:5c:d7:ee:c9:b5:f2:44:
         db:f5:d0:f1:b2:28:87:14:19:26:83:50:de:c9:db:c5:0b:82:
         b8:7c:40:57:34:ef:0d:1c:a9:a9:4a:e7:b5:c4:19:9c:9c:ad:
         5a:f2:b7:33:99:33:ec:ab:9e:7b:b4:39:b5:a4:a0:33:90:f9:
         cb:86:1a:b3:93:d7:56:43:5d:c3:56:22:88:24:3b:80:fd:0c:
         59:2d:a4:83:60:35:26:a5:7b:af:11:0e:0f:f0:27:0a:5f:77:
         1d:f2:7c:f6:12:1c:f3:77:b2:f9:7a:88:16:79:57:28:bc:4d:
         e0:23:c3:61:d2:a1:9c:98:0c:3d:59:f3:18:1b:ec:6d:8f:39:
         61:5f:9c:a6:c0:54:70:b6:67:e4:30:e7:b3:94:b8:61:88:a9:
         68:9c:1a:68:31:a3:4f:0e:d7:eb:74:a3:d7:bc:8c:ba:55:f4:
         80:9d:b5:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB0WeKkXiYXA4EsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
ODkxNjQ4NTYtMTc0Ni00ZDE4LWI0NzMtNDcyMWUwNjAzYTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaTvCzlPfpciPIfp1tQzBXikjMkYfK6PNh4w
zU6OZYMKlasYh8mB3IFrt8mnNncojYJwom66Sb0NaW8+tfNJbWzEiaFx9jqpQApc
Dyn4waigVxbPI9VZgWIgnQ+FxFvmNLDJ+4N2dVjpci5rEb2NzcBQAaY6zczVR7yn
8vyV2x0rGCQEMafUPdz9toMo/sS+kCJh/4L2r/0+eepZZ2bnv1mHpIxcVO473o+f
TlrKSeNTzecAXIesz7Dymcgqs6KizNt5G6f6SmyKLXBsAsawUzHHGdqz5iL4iF4y
o/FisUHwjEpKs8Y+LHWtZ6zcjOKMGFofcMb99Haxbnfx6jkkaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKZOyH7HOqtl5TFG+thy3Tv8w63MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTYwYzExNmUtMWFmOC0z
YzkzLThhZjctYmNlNTIzZmNmY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRY5+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANU4SAHbsqG6UYJGOAYe8T/s0F2KAuvaJW/fFipYFn2zWCSYhMeo+L+r
kvENMT1ItBPKjQm/RuzXaeH2HFoVNj1C+PbC1Ll+v+Aex0BMFcb36zCpXNfuybXy
RNv10PGyKIcUGSaDUN7J28ULgrh8QFc07w0cqalK57XEGZycrVrytzOZM+yrnnu0
ObWkoDOQ+cuGGrOT11ZDXcNWIogkO4D9DFktpINgNSale68RDg/wJwpfdx3yfPYS
HPN3svl6iBZ5Vyi8TeAjw2HSoZyYDD1Z8xgb7G2POWFfnKbAVHC2Z+Qw57OUuGGI
qWicGmgxo08O1+t0o9e8jLpV9ICdtXo=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:52:06 2025 by rpki-client