Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa
File:                     5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa (raw, json)
Hash identifier:          MpJAqQCmHldmN+sz0A/LssFTcJT3mWFHVaPTxEMur+8=
Subject key identifier:   CB:75:C8:6F:E6:09:F9:95:7B:BD:43:68:9D:30:C5:A0:71:0E:C0:B1
Certificate issuer:       /CN=4047a12d-1fef-4e6b-b868-76444464eabf
Certificate serial:       010D0C9F4328584A7A4B41622ED0E0960C376500
Authority key identifier: EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     15199
IP address blocks:        140.160.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:41:62:2e:d0:e0:96:0c:37:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4047a12d-1fef-4e6b-b868-76444464eabf
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=14e14f49-1668-452a-9034-b12aa8f71f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:18:8a:b8:c7:23:ca:cc:2f:e8:9e:dd:d7:
                    a6:48:b3:ee:f1:47:38:96:0a:28:56:f0:47:74:bf:
                    2a:83:a9:04:d0:20:e8:45:c7:41:88:59:6f:2a:38:
                    61:6a:2d:ba:a6:2c:f1:96:60:d4:09:a8:90:d1:7a:
                    46:59:a9:c1:8d:ba:12:e9:94:77:9e:0d:b7:28:98:
                    db:e3:fb:d9:16:a1:87:9b:f6:8e:a5:0d:42:f2:f8:
                    06:c3:22:bb:90:d9:ed:f1:00:a2:9d:2d:00:ed:be:
                    21:4f:3f:2a:6b:29:b6:ba:ee:b1:b5:d3:29:a3:49:
                    d3:7b:e2:cc:e2:1d:57:a4:1e:97:9d:e7:74:58:ba:
                    4e:8a:ca:55:8b:5d:d4:02:96:68:3d:e3:61:8b:39:
                    1e:c5:ee:d5:05:87:de:85:d3:06:ae:34:90:43:76:
                    91:6b:e4:f3:ef:77:46:77:67:c2:bb:8f:33:ae:69:
                    e5:81:34:cc:93:62:ef:fd:93:e9:02:5b:c4:f3:b1:
                    27:d6:9d:f0:a5:47:c5:93:b1:50:2f:4a:38:b9:4f:
                    e2:5d:41:ae:89:a9:3b:b6:8a:5b:24:12:84:c4:08:
                    ba:ae:16:d7:98:6b:29:ef:3b:e1:88:e5:9a:17:3a:
                    b4:a4:de:cb:7a:ac:87:33:d8:ce:e0:74:fb:9a:9a:
                    b9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:75:C8:6F:E6:09:F9:95:7B:BD:43:68:9D:30:C5:A0:71:0E:C0:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl

            X509v3 Authority Key Identifier:
                keyid:EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:32:70:10:32:4f:da:c1:50:da:6b:8e:e7:cd:12:2b:32:81:
         6d:ad:eb:f8:8d:a8:9d:f3:03:e5:f5:83:2c:c0:b0:12:10:3c:
         45:e4:c9:72:a9:96:93:49:17:fb:fc:fc:63:98:43:4a:51:fb:
         65:5f:1b:6b:be:08:18:55:de:da:b0:15:16:cb:22:a1:8b:93:
         77:a8:a9:fe:0b:96:4e:0a:08:6f:de:b1:53:1d:97:b6:6c:0c:
         d6:39:58:0c:1b:98:a7:a2:32:61:7f:23:fe:a0:b0:76:c9:d4:
         e7:1b:54:af:80:52:13:39:bc:ea:c9:f4:33:77:b4:d5:be:a7:
         e5:e1:c2:17:86:cc:5c:8c:f1:1d:35:da:8e:bf:d4:ec:ad:07:
         d9:19:5d:f2:32:f9:46:c6:e6:84:75:2e:bb:40:cd:1e:cb:d3:
         ea:81:96:3c:c8:d6:ab:05:53:66:75:09:5c:9e:2a:5f:c5:96:
         8c:f4:0e:70:1a:23:e1:c5:04:06:6c:11:a0:44:e3:95:85:66:
         9e:51:f1:e2:f9:0e:0f:48:54:08:37:ee:45:3f:7d:42:17:fd:
         36:3c:cc:b1:c2:ad:fd:f1:34:34:f9:ba:54:f5:21:01:86:84:
         da:e5:e4:d0:c8:ca:81:f7:c4:90:da:b6:3d:78:7c:4d:7d:08:
         15:81:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:17:06 2025 by rpki-client