Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa
File:                     40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa (raw, json)
Hash identifier:          A58q+1oZ/Ei3eVeGe4HSVB3WVw0Ra7iFtgTDXlhouKY=
Subject key identifier:   4B:18:54:3A:76:75:34:DE:16:3C:75:6E:92:11:00:CC:58:E0:D1:FD
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584AF9513F41CBC0A58C4ECA4D00
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     1239
IP address blocks:        63.160.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:3f:41:cb:c0:a5:8c:4e:ca:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=29eea0f5-1864-4eff-b6cb-2e7a6c88c9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:f5:55:3e:21:91:31:58:ec:07:79:91:36:
                    fa:29:d7:3d:31:f9:aa:f5:01:10:26:1f:17:fe:7c:
                    1c:03:37:67:66:b1:c7:e3:f5:c7:3b:60:c5:89:8d:
                    72:a2:fa:c5:09:6a:12:42:5c:91:97:6b:00:3b:69:
                    9b:af:20:df:8b:98:44:0f:eb:c1:4f:ab:3c:70:34:
                    29:1b:3c:19:71:49:13:78:cc:10:1c:6b:57:d8:c9:
                    6e:36:10:b8:40:f4:42:a6:66:17:25:2b:fe:29:96:
                    03:fc:b9:d5:0b:8a:b0:45:54:a4:2d:a2:e0:29:ad:
                    2d:96:b2:23:54:b8:02:6d:c8:4f:1c:a0:03:04:d6:
                    b2:46:56:f6:1a:89:f2:6b:43:c6:cb:2f:d4:aa:ba:
                    a8:0a:a2:73:88:0e:1c:10:ce:08:8b:eb:17:23:51:
                    e3:f2:31:c2:81:e5:2f:97:72:69:0c:14:12:aa:e2:
                    73:b2:b9:37:d4:5d:c7:5d:97:d1:f0:80:de:b0:f7:
                    4d:49:b1:b9:26:d3:87:87:b6:a2:7a:86:0b:9e:d6:
                    08:aa:cf:6c:61:9a:2b:cc:ff:a5:bd:14:5f:e8:a5:
                    ce:b1:74:d0:15:0c:66:e3:ae:68:fc:1b:51:6d:aa:
                    76:f8:67:68:60:d8:43:8d:92:12:cd:0b:8d:7a:12:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:18:54:3A:76:75:34:DE:16:3C:75:6E:92:11:00:CC:58:E0:D1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:2e:68:41:dd:28:0e:b3:c2:01:3e:16:db:0e:c7:a6:e7:78:
         e2:b2:27:8f:af:f2:ef:88:c8:1e:a4:d8:db:c6:e5:1a:15:3c:
         2c:31:62:f7:eb:2f:84:c1:fd:4f:53:4e:80:e5:4e:7a:0c:39:
         49:0e:d3:00:f7:e7:db:28:19:aa:4c:ce:09:6f:b9:7c:99:67:
         57:1b:a8:30:9d:e2:0f:fb:c4:f1:e1:d1:d0:9d:88:bd:c2:db:
         27:32:c1:af:28:40:a7:32:a7:21:cc:33:b8:c9:2e:7b:a6:e8:
         77:b6:98:6f:d7:2c:37:01:3a:16:65:49:f4:70:49:7b:99:38:
         38:21:5d:f4:73:7e:b5:ad:23:f7:50:42:a4:49:b2:34:e8:11:
         0c:68:a9:45:97:81:b6:6c:db:c2:66:8c:1c:f3:fb:22:71:3b:
         7c:be:76:93:84:9a:6b:b5:d5:61:cd:b2:9b:06:00:3e:d1:76:
         b0:67:c3:d6:95:d0:b5:4b:50:55:37:cf:47:ac:cb:46:fa:e0:
         bc:bb:97:01:d9:af:e9:2e:a5:eb:c1:20:21:e2:ef:fc:86:db:
         51:5f:6a:a5:9a:a8:05:33:dc:69:32:b8:2d:fb:d6:67:c2:c2:
         a2:af:f6:31:53:51:9a:96:8d:12:ee:2a:38:b0:76:ff:9a:f6:
         fa:df:16:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 21:56:51 2025 by rpki-client