Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b93e80b-e1f4-3ce4-916a-0a72949654b7.roa
File:                     0b93e80b-e1f4-3ce4-916a-0a72949654b7.roa (raw, json)
Hash identifier:          B+nXhy4OH2xnvIipj13z/S/xC6Lz6DrQpBZLq8OugXs=
Subject key identifier:   AA:69:88:92:68:97:8F:7C:27:BC:1F:6C:C4:BB:E0:F1:D9:00:78:AC
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584A0C056C135836EF137E989B00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b93e80b-e1f4-3ce4-916a-0a72949654b7.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     202
IP address blocks:        20.148.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:6c:13:58:36:ef:13:7e:98:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b166c1a4-0bf7-48fe-a033-6674b2968fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:63:38:d1:9c:50:af:e0:ae:bb:9d:7f:8b:
                    84:54:8f:6b:b5:17:8f:f0:13:18:8b:be:7f:83:3c:
                    b5:f3:5f:90:09:3c:4e:56:15:7b:00:12:db:34:e6:
                    a7:fd:59:10:34:4d:e4:67:8b:51:b2:49:52:a4:1b:
                    7e:5c:72:75:5d:8c:32:37:d9:cb:c8:5e:73:9f:90:
                    c0:39:29:55:21:57:49:20:72:10:d7:65:d2:17:96:
                    63:9f:6f:93:4e:a0:41:8e:f5:cc:45:74:fb:4b:9d:
                    9a:ce:f9:fa:4f:14:0d:0a:6b:6f:79:87:0e:1c:10:
                    64:04:4d:e6:4e:60:05:e0:5a:1c:75:a8:6c:05:c1:
                    85:67:1a:e7:99:a9:89:aa:6e:32:2d:2c:ee:41:ba:
                    6c:39:d7:02:b6:df:c6:b0:c7:e4:23:3e:7b:a9:f8:
                    8e:57:e2:b3:fe:23:0e:b5:3a:9d:c0:7b:c6:76:77:
                    b4:90:10:af:be:d4:6f:74:82:ae:9d:26:81:12:a6:
                    2b:f1:e3:eb:16:5e:08:93:c3:dc:7e:9a:f9:9b:d2:
                    30:fe:70:93:10:1a:b9:dd:5c:cf:49:d2:91:b5:23:
                    c4:53:6f:72:5e:50:66:b6:20:b6:bf:b8:df:8f:4f:
                    8a:7b:51:cb:bb:7b:b0:43:42:2c:61:8c:4c:e8:1f:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:69:88:92:68:97:8F:7C:27:BC:1F:6C:C4:BB:E0:F1:D9:00:78:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b93e80b-e1f4-3ce4-916a-0a72949654b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.148.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:62:09:d7:7a:fa:1a:2e:2c:cb:5e:96:ca:b4:83:b8:e4:a8:
         32:10:7d:d6:fd:f1:b7:0d:a0:e5:e7:4e:63:d6:ee:b6:cf:40:
         39:4c:53:ed:69:c9:d6:2e:98:ae:5e:77:48:98:94:64:67:6a:
         5e:6e:96:e9:d1:0f:eb:c5:66:16:5e:a1:20:2f:06:e7:c8:47:
         b0:26:a2:1b:46:72:9a:38:e8:35:8e:5a:3e:c3:c3:ca:34:b7:
         9f:51:73:b0:4b:e3:8b:4a:46:51:41:73:fb:42:72:48:d6:9e:
         6f:7b:7d:c5:f8:65:5a:8a:80:fa:ca:32:a3:60:67:76:2f:b1:
         9b:fa:61:a8:e9:7e:06:60:20:9f:b7:57:5c:c9:fd:40:f1:b4:
         b1:b8:af:53:18:96:83:b0:6a:20:27:ff:b6:33:81:e5:ff:49:
         f1:ea:b4:ed:02:66:0a:c6:b6:b6:02:24:4f:9f:e2:c3:bf:36:
         c6:f5:22:e8:1d:39:53:46:3e:06:7f:85:8a:20:cf:d4:8e:1d:
         11:22:f7:2c:11:1c:17:93:c9:78:8b:a4:59:30:38:c2:61:f1:
         d3:a2:5d:c2:5d:77:ac:83:11:04:13:dd:18:8d:ef:1b:96:e8:
         29:e6:b3:73:12:52:6e:b7:69:97:93:02:44:e9:70:5e:17:3f:
         f5:02:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:33:15 2025 by rpki-client