Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa
File:                     666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa (raw, json)
Hash identifier:          ohnvUb8xcQWadx19rmGfvLTdfY/N4oQOAe76MzvJlqs=
Subject key identifier:   CE:14:C9:91:8B:A6:0A:C2:94:7F:2E:BA:86:F4:B2:10:78:40:A1:0F
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584AF52131533D8F02071F9F1E00
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     400317
IP address blocks:        63.160.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:31:53:3d:8f:02:07:1f:9f:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=d7307ded-bae0-4b27-8040-d20410f7bb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:23:fc:49:b0:87:e2:ad:69:e8:5c:f3:3c:53:
                    e4:42:16:91:b2:c8:8e:da:04:7a:ff:9a:db:bd:23:
                    0e:b3:2f:99:84:64:59:f5:46:88:72:24:87:83:19:
                    2d:59:48:7c:e6:45:d8:28:d4:a6:e3:01:0f:ba:50:
                    82:0a:f4:b7:86:ec:ac:bf:66:6a:37:02:d3:30:f1:
                    94:36:55:f1:72:b3:e9:0f:1c:6f:d1:e0:8e:d0:aa:
                    76:d6:b3:5e:a6:c8:dc:72:a2:64:9d:02:8d:01:87:
                    0e:49:fa:fc:12:9c:c3:60:df:36:ef:a2:8c:f4:db:
                    23:ba:53:7d:18:07:97:8e:eb:25:c1:01:31:39:16:
                    37:1b:93:1c:01:7e:1a:59:d0:c1:e2:79:5d:a1:6f:
                    d9:34:8d:94:6c:aa:78:ac:73:0d:a1:db:6a:2f:f3:
                    c2:dc:d6:ed:d2:52:fd:a4:ac:01:e7:e3:0a:20:32:
                    e4:3d:72:37:64:e0:d9:20:d8:71:f7:03:eb:06:2f:
                    e7:c3:02:b8:21:67:7e:25:4a:30:ad:9e:b1:10:62:
                    21:5f:30:7e:4f:05:86:a3:73:e7:22:b6:68:c0:55:
                    50:14:16:09:2c:32:c4:c5:d7:4f:21:eb:3a:14:f8:
                    ed:98:76:e9:5f:e9:9f:96:c4:a8:06:b4:23:a1:85:
                    ae:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:14:C9:91:8B:A6:0A:C2:94:7F:2E:BA:86:F4:B2:10:78:40:A1:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:ef:0c:02:20:91:3c:10:76:0a:61:d4:da:f6:87:52:9e:
         69:f7:ea:9d:35:11:e3:6d:71:68:3e:2e:a7:54:dd:b1:fe:d3:
         d6:4b:f7:67:3f:37:01:52:e1:ce:23:d8:36:19:e2:64:00:7e:
         9f:80:d1:79:97:c5:49:6c:ff:fd:b1:6f:8a:4d:2d:32:5f:55:
         60:e9:a5:41:99:c1:f7:aa:89:3d:37:a9:40:91:49:e0:f0:98:
         7c:88:63:a4:76:73:c3:e2:e2:51:ca:ea:42:5b:6b:c2:ff:84:
         8a:82:81:f7:37:bc:63:0f:7a:a1:0d:fc:bc:ae:75:6a:32:35:
         ad:85:70:3a:af:10:07:83:fb:6a:08:af:92:84:59:eb:4d:37:
         7d:bf:f4:0b:d7:21:27:06:19:85:8c:a3:e4:32:ca:ce:4b:6d:
         46:33:cd:e8:f9:d0:86:88:df:18:47:d5:8c:3f:63:ff:73:2f:
         9e:73:a1:34:c0:5e:b0:53:c8:ca:c8:16:b2:1b:20:83:81:1c:
         3f:c3:8f:46:2a:ad:ba:e0:4a:6b:69:ae:b4:ac:2f:b7:90:3c:
         af:a0:ce:45:86:36:b2:97:8c:04:3a:be:d4:c8:41:38:54:a6:
         84:ab:aa:a8:cf:a9:eb:71:60:a6:ce:5b:4f:41:ae:72:38:e8:
         15:9d:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:40:30 2025 by rpki-client