Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/530916f6-d400-3664-9f70-35373009dbee.roa
File:                     530916f6-d400-3664-9f70-35373009dbee.roa (raw, json)
Hash identifier:          Vv9kqtkoEMLlQrKMa+4UbRyebg23mot97T9hxflLYc8=
Subject key identifier:   5E:26:06:77:2E:4A:2F:22:3E:90:01:D7:11:CF:01:CA:44:47:4D:EF
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285848EC96A03A7CD4261F8F092000
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/530916f6-d400-3664-9f70-35373009dbee.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        173.255.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:a0:3a:7c:d4:26:1f:8f:09:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=c7925445-ad47-4cc8-982f-5e5ea9673ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8f:2a:a8:58:17:c4:1c:8c:d5:f2:5f:a9:e4:
                    97:1b:0d:5c:75:d5:af:58:9b:d6:94:55:b3:bf:de:
                    73:50:40:19:70:90:53:90:f5:73:3d:73:82:12:2b:
                    90:45:76:6a:3d:61:0d:d9:e5:f9:fb:b7:25:75:dc:
                    27:88:00:16:cd:88:88:40:18:42:0d:c5:63:f6:c8:
                    98:a5:52:ea:52:4f:c7:94:d7:c6:bf:29:74:94:45:
                    02:4d:f7:45:d2:03:01:a2:b0:a4:32:91:04:33:8f:
                    f5:9a:3d:e1:38:a4:e1:fe:cb:2e:87:88:7f:a7:fc:
                    1e:92:f4:09:e4:d9:0f:88:ff:06:ac:e5:e3:7d:cd:
                    1b:be:91:c6:ed:a3:1d:c0:bc:19:42:d2:ad:ef:6e:
                    b1:9a:27:8d:36:15:f7:36:4a:9b:a1:1c:ce:97:f1:
                    a6:6b:0b:86:27:fd:d3:3f:f1:3f:70:4f:6b:6c:ad:
                    6f:d6:cc:ec:af:a3:b2:57:52:1f:70:03:5e:79:24:
                    d3:eb:65:67:09:39:8d:b8:a3:4a:1e:b0:6c:82:7f:
                    0f:ce:0e:11:fb:f5:a9:f3:aa:79:c8:19:9c:5a:36:
                    d0:19:3f:e5:1b:b2:44:69:b7:46:3f:f8:52:1d:96:
                    e8:51:ac:e9:45:1e:0a:92:36:b0:c9:20:c6:b7:d5:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:26:06:77:2E:4A:2F:22:3E:90:01:D7:11:CF:01:CA:44:47:4D:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/530916f6-d400-3664-9f70-35373009dbee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b2:b1:6e:5e:68:e1:88:34:cd:64:65:d8:d9:16:e9:5a:bb:
         0e:8a:0a:17:f4:30:7e:cd:74:60:6d:f1:e9:62:7e:17:32:ee:
         3d:7c:72:67:a3:86:90:58:f1:e2:77:4a:9b:40:98:e9:e2:a0:
         f3:89:d7:64:8b:a0:d4:64:a7:e3:1f:1e:4c:ce:ce:79:56:63:
         b0:df:3e:6e:40:fb:25:94:92:d8:2e:57:60:c4:a1:9e:00:8f:
         64:b9:fd:a2:55:93:f2:55:d6:89:2e:aa:cc:95:54:3e:5c:19:
         78:36:b7:91:42:68:d0:87:b7:da:8a:85:d6:0b:95:ba:a2:af:
         11:e4:d8:dc:52:92:40:bc:79:e2:b1:b0:61:bd:66:1f:2d:0f:
         e4:ff:6b:0b:cc:42:c4:75:8e:3a:45:5d:d7:bf:26:9f:6e:13:
         6e:39:84:85:35:4b:cd:76:e4:65:6f:1b:41:e0:0b:62:6b:40:
         9c:62:b5:8a:2d:4a:da:60:57:ae:32:61:59:8c:70:83:56:38:
         98:fb:04:3a:a3:b5:91:f2:02:78:43:3f:6a:30:ab:5d:2d:2c:
         e0:32:74:aa:4e:ef:c3:7b:22:9e:a7:0d:fd:0f:c8:e8:df:5a:
         22:c4:6b:34:de:4a:e5:03:54:d2:20:44:e3:c6:10:fe:f5:00:
         bb:f3:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:31:19 2025 by rpki-client