Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/4c716190-ffd4-3aa3-ad30-091c1340b61f.roa
File:                     4c716190-ffd4-3aa3-ad30-091c1340b61f.roa (raw, json)
Hash identifier:          Ou5WdJopxRLdlI4RRtSBKvVr8TZ5eVu1nxR0j8KJZLU=
Subject key identifier:   77:2F:D8:83:46:B0:6E:0C:12:D9:33:0C:0A:DB:45:9C:50:13:6B:C7
Certificate issuer:       /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
Certificate serial:       010D0C9F43285849DDF4DDE809E882F065B264C0
Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/4c716190-ffd4-3aa3-ad30-091c1340b61f.roa
Signing time:             Fri 16 May 2025 01:00:46 +0000
ROA not before:           Fri 16 May 2025 01:00:46 +0000
ROA not after:            Thu 14 Aug 2025 01:00:46 +0000
asID:                     40230
IP address blocks:        162.0.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:f4:dd:e8:09:e8:82:f0:65:b2:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
        Validity
            Not Before: May 16 01:00:46 2025 GMT
            Not After : Aug 14 01:00:46 2025 GMT
        Subject: CN=376c9395-0339-45dc-8947-5d0f223a63b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e7:99:57:f4:de:69:a3:aa:c1:e9:70:ff:73:
                    f1:c5:e1:16:3b:ca:15:33:f3:08:98:51:23:a1:ae:
                    4b:ab:6f:1c:42:02:7c:fc:f0:74:95:80:b9:0d:84:
                    d3:27:45:17:f1:b1:68:d5:2f:f5:01:b4:4e:37:32:
                    7e:81:4f:1e:06:fe:ec:65:c8:44:29:f8:d4:1e:81:
                    11:f3:80:0a:3a:d8:7d:af:a2:ad:4d:30:7d:92:9a:
                    b1:d1:1d:80:b3:37:64:6e:11:d5:d7:b5:c0:05:92:
                    43:eb:66:e7:f0:1b:c9:1e:7d:91:54:f8:0d:1a:14:
                    36:87:04:b7:a5:a5:8c:80:e6:06:d0:75:60:e2:de:
                    41:b7:14:a8:2a:6c:a6:f4:e9:e4:2b:b6:2c:ac:a6:
                    af:b3:a6:9a:9c:32:fa:d3:34:42:7c:93:0e:42:a7:
                    83:3b:10:4e:eb:46:2c:7a:f8:94:b2:98:22:bb:54:
                    fb:21:99:09:61:b8:96:36:41:e4:cc:f2:c0:e8:7a:
                    42:70:1b:19:9b:7d:31:86:9f:ca:d4:54:66:20:90:
                    77:de:21:35:4f:7a:ee:b1:80:af:5f:3e:f6:7c:5f:
                    25:43:e0:f5:2d:9f:d0:e2:39:f3:3b:49:8f:dc:77:
                    ae:aa:ca:df:ff:95:92:9f:f1:12:e1:d9:9c:98:19:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2F:D8:83:46:B0:6E:0C:12:D9:33:0C:0A:DB:45:9C:50:13:6B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/4c716190-ffd4-3aa3-ad30-091c1340b61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl

            X509v3 Authority Key Identifier:
                keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.0.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:47:0f:a1:b8:67:33:1b:1f:00:12:e1:a1:67:53:e1:68:1d:
         e2:de:79:14:b6:a0:82:d0:d1:a3:0a:a1:3f:af:d8:0e:03:a2:
         4a:1e:0a:45:c7:1f:6d:3b:ed:c6:5d:61:db:14:91:1e:08:88:
         b7:64:98:3b:f8:c2:71:24:e5:64:f1:91:84:3f:1c:3b:f2:62:
         c3:b4:2a:68:33:10:f6:00:51:76:98:05:93:58:e6:d5:e1:a5:
         19:d8:69:7b:f2:15:5d:21:23:99:40:49:6c:62:ff:5c:3f:8d:
         05:07:8e:20:25:82:ad:df:26:09:7d:27:d9:6b:b5:e1:f2:be:
         b2:08:f4:96:e7:4a:6f:c8:0a:5b:f8:92:da:07:13:3b:ba:fa:
         d3:f8:a7:a3:25:c7:49:36:36:a9:6e:43:b1:0e:d9:01:65:7f:
         29:e8:63:e6:14:1a:29:37:21:37:43:69:95:e1:a9:64:2c:b7:
         10:95:b9:73:77:90:9e:12:4e:ff:18:37:68:a7:fe:92:08:ff:
         3d:61:a4:71:0d:48:f4:4c:3d:0a:59:5d:e8:2a:7e:25:1e:58:
         bf:38:0b:ba:2d:60:3c:e6:a6:57:3d:c1:5f:2b:f8:8d:3b:9a:
         2b:e8:de:18:62:ff:fd:1f:d3:90:5b:d2:df:ab:4c:28:26:8e:
         03:bb:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:32:11 2025 by rpki-client