Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4153ce63-6796-3975-9548-322c34971bce.roa
File:                     4153ce63-6796-3975-9548-322c34971bce.roa (raw, json)
Hash identifier:          smtE4e/egbK2UbaqYyAmusqdb28pP65ptBit0D6iZAw=
Subject key identifier:   C9:FE:BA:BA:94:F7:58:E0:29:6C:87:5C:14:47:7C:F9:4B:AB:95:6F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A00DAEE7F49A2179D4EB8B400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4153ce63-6796-3975-9548-322c34971bce.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        184.31.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ee:7f:49:a2:17:9d:4e:b8:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=26ce1ecb-63c8-44b7-a4d3-bc4129519b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7f:ff:34:aa:86:9d:3d:27:3c:32:40:c0:05:
                    28:a2:91:92:ff:44:f9:d6:f7:d4:82:20:ad:ac:30:
                    ce:e7:4e:ac:cc:9c:0c:69:97:27:fb:28:88:a0:28:
                    6d:33:ab:73:f6:e5:a7:14:12:b9:d0:fd:f8:54:45:
                    90:3f:0a:07:79:16:17:32:da:e3:af:6e:95:94:bd:
                    a9:49:17:ef:42:05:b6:90:49:76:de:98:25:ce:de:
                    c7:48:c1:71:e6:d6:9e:8f:ed:c2:dd:5a:8b:74:fd:
                    da:15:df:63:60:fc:95:b8:cd:4f:72:26:ce:c7:c2:
                    29:b8:d6:59:ba:20:8a:b4:78:2c:0f:3b:e4:9b:2d:
                    8b:41:85:27:e5:08:98:4a:89:be:16:a4:28:e1:0f:
                    b8:c3:33:54:18:9a:55:04:24:3a:95:2a:32:83:6b:
                    f1:a3:9f:b8:42:44:bc:2c:6c:cd:96:14:b0:37:bb:
                    10:3d:0b:a0:b1:fa:a0:6e:1e:a1:8d:f4:85:d4:ee:
                    ef:6c:4c:db:40:0c:f0:99:d4:0a:32:39:c2:4e:ba:
                    d6:07:00:b8:1e:f9:c2:ac:09:e9:57:a3:39:18:15:
                    4e:9f:e9:b6:6b:01:11:50:16:2e:ee:0f:dd:7f:5e:
                    95:2e:50:d7:8a:2f:40:16:66:db:f2:a8:2b:0f:59:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FE:BA:BA:94:F7:58:E0:29:6C:87:5C:14:47:7C:F9:4B:AB:95:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4153ce63-6796-3975-9548-322c34971bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.31.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:13:d0:5b:79:5f:90:12:82:19:af:8e:1f:f1:de:7f:26:2f:
         8d:cf:e1:02:da:1c:db:72:f3:18:cb:f1:a6:83:bc:5d:d7:02:
         6f:ba:aa:be:6f:f8:07:57:cd:a8:1f:d5:d0:61:ce:6e:de:32:
         a0:5f:fa:97:0f:f0:53:12:3b:58:04:dc:91:02:43:b6:36:17:
         53:0d:9f:cb:74:52:37:06:9b:d0:cf:a2:20:da:00:af:a5:e8:
         e2:b2:9d:e0:a3:81:25:c1:03:cc:f0:17:43:8f:e1:e6:d2:ee:
         79:d0:e3:48:d4:15:ff:51:88:b3:7d:b1:f6:25:8d:bf:5a:34:
         62:94:13:4d:14:cb:5f:99:a2:ed:5d:fe:b7:15:6c:8a:92:09:
         06:db:16:cf:af:b3:82:96:b5:3f:60:bb:a4:87:8a:2b:c1:10:
         bf:93:34:2f:cd:ee:5d:c1:23:5b:76:65:2a:05:60:20:ec:46:
         97:e6:b1:ab:ea:a4:a9:83:14:6c:22:82:5e:2d:55:1b:82:a3:
         26:af:5c:b0:51:b0:e1:64:82:d6:b6:2f:37:36:0c:10:4b:de:
         f4:f5:b9:b0:61:46:5c:b5:32:15:3d:e5:26:15:d1:81:f5:50:
         db:13:1e:e5:d7:c6:01:51:28:a0:44:64:0c:13:a7:bf:68:60:
         36:8f:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:06 2025 by rpki-client