Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa
File:                     666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa (raw, json)
Hash identifier:          uKqf3IEvg2PhKeuPliN3MukNFiaHk0QIFzEjsWHYV8o=
Subject key identifier:   FB:7B:6C:B4:6A:75:20:5A:3E:DA:FA:EB:11:86:29:93:81:37:4E:E5
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584A146561B21FF6CA1F9ADD5F80
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     400317
IP address blocks:        63.160.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:61:b2:1f:f6:ca:1f:9a:dd:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=65b0a47a-1fe3-40c4-9d4d-292196c6f49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:5d:ae:cd:c2:eb:0b:77:b3:0f:32:60:4a:
                    6c:3b:9b:d8:7f:d0:3b:64:d6:49:d9:7b:e8:2b:45:
                    10:34:35:92:a5:43:99:3f:8a:88:2f:31:c2:de:7b:
                    f3:46:98:6d:23:00:81:21:9d:80:e1:ff:2e:d9:06:
                    3e:71:07:d9:44:ab:44:76:41:7a:65:8d:a8:39:84:
                    76:01:df:fb:6f:62:3b:15:ff:63:05:44:12:d9:c2:
                    fc:cc:8f:23:18:7e:8d:c7:17:49:be:25:2b:ad:fe:
                    bf:a6:68:23:87:04:81:a6:26:42:06:f7:19:29:ea:
                    65:2a:b0:86:e7:bd:32:dc:2c:39:86:2c:70:fb:58:
                    7b:19:3a:85:e0:d6:2e:dd:25:1b:83:f0:39:4e:0d:
                    66:97:91:02:bc:54:66:eb:6b:45:b3:31:f1:92:3f:
                    48:c4:c2:25:0f:de:66:79:58:6e:c8:9a:d7:a8:60:
                    ab:54:f5:55:69:82:fa:e7:c1:47:c7:a1:be:b8:36:
                    3f:63:01:d1:ce:d8:f3:c0:d4:7b:3a:ab:d2:55:d6:
                    86:e2:ae:9b:cc:d8:5d:d5:d8:ca:f2:cb:ba:83:86:
                    fa:d9:07:63:99:da:26:30:24:9c:6d:2d:29:47:4f:
                    56:dc:0e:4f:6e:07:62:c1:7a:a7:cb:fb:1d:87:4d:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7B:6C:B4:6A:75:20:5A:3E:DA:FA:EB:11:86:29:93:81:37:4E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:26:d6:fb:a2:22:02:35:aa:fa:09:1f:c3:f0:04:d7:d0:93:
         6d:e7:db:70:7b:75:c3:0f:7a:dc:14:a7:d3:dd:b6:37:3f:b6:
         ab:ef:24:3c:61:54:3c:44:71:57:3a:3b:64:f8:e9:fe:ee:36:
         a8:2c:39:f1:35:c7:6b:47:40:41:8b:aa:09:b6:6a:62:17:e7:
         77:98:e9:04:b3:b8:74:f1:a8:75:6e:f5:50:62:bb:79:81:c1:
         31:97:da:51:de:aa:51:c0:bf:40:16:cb:86:87:c0:92:99:8e:
         1b:f3:d5:c1:b4:6c:0a:f7:af:ae:d1:03:ef:80:0b:fa:40:4c:
         7f:4b:50:20:f9:a6:4b:67:f6:4b:2d:bd:06:23:c2:34:dd:a0:
         2c:0a:86:e3:2a:40:59:7f:8f:6b:70:06:21:ca:4b:98:9a:df:
         2a:08:2f:88:28:2c:6c:94:ff:dc:61:4e:be:4e:18:b9:13:1f:
         e7:93:7c:bb:6b:21:8f:80:f9:b5:02:16:7a:72:98:ac:01:ec:
         2a:61:c1:76:70:37:a6:a7:9d:82:97:8c:84:3a:4b:19:d0:fd:
         b7:dd:a2:5d:f0:c2:31:6a:c4:5a:86:60:ad:3f:39:c5:4b:d9:
         66:8b:3d:9c:8d:7b:ab:8d:86:65:a4:11:8b:9c:78:60:32:a2:
         b8:51:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:23:42 2025 by rpki-client