Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/7e5d60ed-5daa-3e56-91e1-1395f24bdb91.roa
File:                     7e5d60ed-5daa-3e56-91e1-1395f24bdb91.roa (raw, json)
Hash identifier:          K6RCaryyNTXJbRQuyyZfdjdF3Kav+jl3Mzrqp/nToMI=
Subject key identifier:   8C:8D:C1:E4:57:95:F9:6A:F6:09:18:08:9E:AC:C2:D4:38:A0:2C:34
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584AF521317F29110A2F27132100
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/7e5d60ed-5daa-3e56-91e1-1395f24bdb91.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     400317
IP address blocks:        63.160.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:31:7f:29:11:0a:2f:27:13:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=2caa5fe7-3479-4d56-a9fa-7f1436d91d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:11:1d:fd:2c:8c:8f:42:17:f6:58:27:62:
                    a7:f3:9b:72:12:7e:c4:e9:d2:f2:ea:95:29:48:63:
                    f3:d2:38:4c:76:9e:13:1e:d0:5c:ee:c2:f0:9d:4f:
                    cb:5e:01:27:28:31:36:32:a2:fa:e0:2d:fe:71:22:
                    f8:7f:45:95:57:74:a2:f4:93:f8:3d:e7:b0:e7:6d:
                    bc:3d:79:09:08:83:eb:06:6c:9e:52:5b:5f:6e:75:
                    d8:aa:68:1f:ec:14:06:cb:75:ee:a0:07:ed:a8:4a:
                    a0:22:23:fa:c1:bf:05:34:26:d7:79:c6:d1:52:a4:
                    90:07:d3:1e:db:36:4a:52:89:1e:88:4a:de:f4:de:
                    33:3b:48:cd:d5:15:e4:7b:af:a3:1a:c4:92:57:33:
                    e5:21:5f:20:62:76:75:6a:4c:bd:c9:d4:ef:25:a4:
                    68:f8:12:43:0e:cc:07:c1:e8:b7:d7:b8:0e:99:59:
                    c8:07:e0:80:69:8e:52:82:c3:ed:cf:1c:98:82:41:
                    1d:61:ea:83:51:16:14:cb:80:32:70:f7:37:48:c6:
                    db:c1:1d:d1:a6:4b:38:5e:51:4b:b8:86:ea:60:98:
                    8c:25:f0:63:0d:0c:a0:30:c5:f8:a5:9e:88:7a:bc:
                    e2:f3:3d:f5:99:f8:a4:8b:1a:70:82:3b:ef:11:ab:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:C1:E4:57:95:F9:6A:F6:09:18:08:9E:AC:C2:D4:38:A0:2C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/7e5d60ed-5daa-3e56-91e1-1395f24bdb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fa:fa:4d:64:1f:e3:3d:21:d5:30:18:44:bd:0f:f2:6d:70:
         c5:6b:45:86:eb:94:a9:9a:ee:ed:63:0e:da:dd:ae:a9:82:da:
         ee:16:59:45:6e:05:4d:fd:67:ab:54:20:c8:94:8a:79:d5:01:
         88:46:86:aa:fb:56:81:d0:f1:b0:e0:a0:a1:e4:76:0b:be:a2:
         22:1c:da:68:fa:03:65:7d:dd:8c:07:7c:33:80:4c:7d:c1:c5:
         55:a9:00:ed:6b:db:c9:ca:0e:88:4b:63:d3:d6:1e:46:f6:2a:
         61:19:60:36:c3:93:3f:06:0e:b8:d6:89:0e:31:6d:10:4b:c4:
         ec:a9:f8:f0:df:64:4d:0d:cc:89:1f:78:52:dc:58:11:ff:db:
         a2:aa:00:71:55:75:b5:7a:5b:68:a7:25:87:19:4c:81:87:62:
         67:65:26:09:2e:42:8c:0a:f8:73:cb:03:c2:41:d3:72:6c:f6:
         89:fe:09:f0:70:25:63:8d:bd:46:76:d6:0d:7a:d0:af:04:03:
         68:04:c2:ca:25:7a:28:7c:89:48:c2:8c:b3:96:56:02:5d:5c:
         dd:6c:34:2e:30:b3:09:b4:20:02:85:0d:55:52:12:26:6c:c1:
         63:69:0c:d5:bf:8e:44:eb:7c:ca:08:32:04:21:9c:cb:02:7a:
         06:27:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:41:05 2025 by rpki-client