Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c7ef47fc-e469-30de-8382-067e9d5f6188.roa
File:                     c7ef47fc-e469-30de-8382-067e9d5f6188.roa (raw, json)
Hash identifier:          /d+5hcE3oG2cHqEwrOQdAIhn225F9fpgx35lUeeaLTc=
Subject key identifier:   4B:B9:30:F8:43:2B:6D:21:ED:36:5C:D2:C0:9A:BB:9C:31:99:F0:DA
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584A331AF94CD9C759AB024CC418
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c7ef47fc-e469-30de-8382-067e9d5f6188.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     23470
IP address blocks:        172.96.160.0/24 maxlen: 24
                          172.96.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f9:4c:d9:c7:59:ab:02:4c:c4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=c9713a12-7108-4733-91e5-8d2781ea6f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:6f:df:e4:62:18:7c:80:6b:f6:c9:71:d8:
                    82:bf:e8:da:80:ac:eb:ac:2b:d3:c0:34:b4:51:2b:
                    aa:a4:28:09:7e:50:97:a8:60:38:34:a5:08:26:22:
                    95:ba:d4:67:b1:51:11:d7:15:ec:81:3d:be:1e:99:
                    47:d7:0c:ff:54:49:52:3e:94:07:ce:01:1b:03:cb:
                    0f:5d:33:3b:aa:fa:8a:23:7e:4b:d7:fb:51:bf:ce:
                    76:56:c5:21:87:1a:d6:08:fc:c7:16:bd:ec:c3:05:
                    ea:9d:d8:75:23:e5:6d:0f:99:10:2d:da:df:53:b7:
                    97:04:30:4a:cd:f2:5b:58:e1:11:cd:d1:09:6b:ee:
                    9e:de:7a:9d:b7:ee:f6:4d:21:0d:7e:73:51:82:40:
                    1e:39:84:f4:35:48:7c:5c:a3:77:44:44:d2:86:98:
                    6c:fc:cc:f6:81:0f:ae:09:ca:0f:bd:44:bb:8c:52:
                    36:c7:a5:85:1a:58:59:8c:ab:49:c0:49:f7:83:72:
                    ce:d6:0e:49:d0:46:83:64:91:f9:04:f5:92:aa:aa:
                    9c:53:bd:56:bb:9d:58:9b:bd:94:c2:fd:98:fa:fa:
                    34:70:44:1e:bc:62:17:bc:de:88:0a:e4:8f:96:da:
                    30:4b:63:ef:aa:5f:27:fd:49:3f:df:59:6a:33:c9:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B9:30:F8:43:2B:6D:21:ED:36:5C:D2:C0:9A:BB:9C:31:99:F0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c7ef47fc-e469-30de-8382-067e9d5f6188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:eb:aa:80:e4:be:14:66:de:ae:4d:e9:20:75:9e:89:6f:
         08:7e:c2:7f:2b:7d:24:2c:25:f8:9f:c2:9b:db:89:49:a9:d9:
         5d:cb:c4:a2:c5:49:9e:4d:73:c9:3d:2f:48:c5:aa:75:e2:0f:
         38:1a:83:8c:b4:83:e2:49:a0:3c:85:26:f9:a3:2a:37:63:fc:
         0d:49:bb:f0:d6:e4:d1:7c:bd:28:e1:12:fe:55:a4:f9:10:20:
         71:3d:ff:d8:fb:3a:52:cb:e5:7e:af:7f:2c:63:d2:86:48:ea:
         eb:b4:12:16:28:d6:c1:8c:42:87:4e:31:e0:3f:3d:31:f5:e6:
         71:7b:49:35:b9:83:bb:ab:4a:02:c8:7d:17:7a:c7:9d:4e:26:
         38:df:38:e7:f2:60:7a:04:5b:95:2f:0f:e7:91:e7:73:0b:1c:
         48:43:18:99:01:0a:d6:01:07:82:e3:0b:2a:89:19:0c:f9:3f:
         01:7d:d7:13:bf:ea:ad:56:c3:dc:1e:3c:dc:f4:d6:a1:7f:24:
         23:b6:22:88:4d:5f:d3:9c:67:e4:12:e6:ba:36:f9:64:3c:ba:
         e3:89:98:02:a2:60:34:b1:eb:b0:bc:06:c1:4e:7a:0d:37:38:
         0c:5a:74:6a:47:99:54:24:4f:08:45:5b:a8:19:d6:7a:3d:29:
         17:f7:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:15:40 2025 by rpki-client