Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa
File:                     a6b12d9f-9271-305e-847c-6c6fdf434670.roa (raw, json)
Hash identifier:          JDtIhvUMwec/xGvzXF8u4RcPUrJymiC27eOxEiv0dKw=
Subject key identifier:   0D:AA:2A:3F:71:3C:5A:B9:59:B4:8E:36:5D:4B:9F:3F:50:69:9B:E9
Certificate issuer:       /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial:       010D0C9F43285849EA8520DAC63EBB5497D7CF40
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     160
IP address blocks:        128.135.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:20:da:c6:3e:bb:54:97:d7:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=3acaaf52-8f6c-4e1c-a324-3b5f9e4c0544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:84:24:f3:3e:fa:86:a4:fd:d3:c4:00:fd:
                    b7:ce:06:e3:66:c5:ba:ec:e1:9c:3b:1d:41:c6:4b:
                    44:5e:23:ec:70:6f:f3:9f:61:b0:d5:da:66:7a:78:
                    c9:84:ad:87:0f:0a:73:c7:39:ce:40:af:2f:b9:ea:
                    56:bd:b3:da:b2:bc:6c:2a:6f:47:cf:85:83:a1:81:
                    cf:fc:1b:27:e8:2d:d5:70:6a:78:12:7d:6d:a4:08:
                    44:52:61:23:05:10:35:d0:cf:1c:3c:8c:e4:5d:1f:
                    86:e1:06:fd:05:fb:7a:e9:0b:ca:68:26:80:9a:d0:
                    40:a5:4d:20:3a:bf:c8:22:41:1a:c2:8c:d8:96:fb:
                    47:b9:44:b7:fe:f5:7f:93:d2:00:03:e0:76:40:f1:
                    1f:84:32:95:72:4e:8f:35:56:55:ba:0e:8b:fe:74:
                    7b:83:d5:95:1f:2e:52:07:60:c5:97:11:e6:ce:ae:
                    bf:7c:74:24:8b:4d:b7:5b:cb:95:1b:ac:d7:64:4d:
                    85:9e:ff:09:64:15:e0:c4:39:cb:8d:2e:02:cd:03:
                    bb:c5:b9:50:09:54:29:81:4a:ee:bc:db:17:78:f0:
                    2e:21:63:fd:3d:03:af:4e:51:d2:bc:3b:e3:e0:8f:
                    17:7f:67:4d:24:f3:c5:b1:56:3a:87:a4:5b:65:3d:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AA:2A:3F:71:3C:5A:B9:59:B4:8E:36:5D:4B:9F:3F:50:69:9B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b4:46:3c:de:8e:3a:26:03:8f:3d:46:60:a9:30:c4:d5:4c:
         d2:d3:20:c2:ec:5b:6b:89:80:20:32:a0:4c:6a:a6:26:6b:d7:
         d1:54:03:6e:60:59:a7:93:63:1c:65:61:c0:76:83:27:06:c1:
         d1:b8:0b:e4:e2:92:b7:42:f9:a0:41:a5:b9:17:51:38:5a:b2:
         5b:4e:87:c1:a0:39:43:e6:15:72:9b:cc:be:2f:ce:ab:3e:21:
         bf:1e:3f:0e:73:00:7f:63:c1:10:19:e7:75:af:2e:a8:08:33:
         85:19:45:22:23:a8:25:10:42:4b:19:d7:37:11:25:f0:41:00:
         be:9f:88:4d:6f:ff:cd:e0:7b:f2:f2:fe:7e:8d:b0:47:f9:08:
         1f:87:ef:ab:4f:cd:f5:32:98:b7:74:fd:b6:85:96:21:f2:ee:
         5d:29:ae:66:c5:80:2b:23:fd:e0:4e:5a:05:27:7e:20:21:2c:
         fe:bb:79:ba:6f:2f:d9:9f:6e:a4:37:35:b4:ff:44:80:96:5e:
         51:4a:59:81:a9:38:32:e8:d6:77:09:dd:49:97:20:b6:7a:b8:
         e9:0b:33:a2:46:bd:51:1f:79:ef:c3:e0:b3:75:e4:44:4a:c6:
         c6:15:e2:64:eb:ed:17:b4:5f:d2:51:4a:02:5c:5e:99:f4:c2:
         69:8c:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:13:06 2025 by rpki-client