Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/1a725e6e-8fda-3753-8707-25694f693ca7.roa
File:                     1a725e6e-8fda-3753-8707-25694f693ca7.roa (raw, json)
Hash identifier:          pSfERXlBS8vQ8bE4zX37UuD36lurAtHcGKfoG16bQQE=
Subject key identifier:   5B:15:AE:1A:3F:AB:7F:E5:E5:B0:2B:4F:08:F1:45:1A:D9:0A:15:D0
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849DEE64C1799D40FA6F684B880
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/1a725e6e-8fda-3753-8707-25694f693ca7.roa
Signing time:             Fri 16 May 2025 09:07:18 +0000
ROA not before:           Fri 16 May 2025 09:07:18 +0000
ROA not after:            Thu 14 Aug 2025 09:07:18 +0000
asID:                     14114
IP address blocks:        169.145.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:de:e6:4c:17:99:d4:0f:a6:f6:84:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: May 16 09:07:18 2025 GMT
            Not After : Aug 14 09:07:18 2025 GMT
        Subject: CN=c003d7d7-cac8-4ffa-a678-d98710efa970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:34:ac:82:07:80:e4:4e:89:32:e0:7f:2a:
                    3a:10:bc:b5:94:e4:17:dc:06:90:4f:32:1c:7f:9e:
                    fc:a5:65:42:0c:fb:d3:70:61:4e:f1:cb:03:42:fd:
                    01:df:8c:54:5c:de:83:8d:05:28:e0:ee:3c:d4:fd:
                    aa:56:58:47:27:65:5a:9c:ba:46:64:10:0c:d6:0d:
                    c8:cc:15:e5:8b:a5:37:ba:4a:f9:bc:ed:97:cd:cb:
                    52:a9:be:6e:37:98:ff:25:20:b1:bb:27:72:cc:92:
                    63:47:0b:0e:a7:2c:c7:c9:8a:33:7e:e5:bc:46:cd:
                    3b:2a:59:ac:39:c8:05:01:65:aa:3c:eb:9d:8f:50:
                    fd:d1:46:e0:b6:97:db:91:fb:75:48:b3:07:8b:eb:
                    c0:b0:3b:1a:fe:ee:15:9d:ae:c2:ea:e2:54:ae:62:
                    2b:49:9a:3c:5a:68:ba:dc:cf:7c:bf:4c:36:81:4b:
                    ce:27:0e:71:ff:60:56:21:7d:3d:76:91:8e:30:48:
                    ee:b4:b8:6c:d1:22:e8:8c:37:08:53:5a:be:15:b8:
                    af:69:4a:07:5b:52:5b:aa:c4:54:61:cf:aa:65:c8:
                    96:f7:b1:5b:52:37:15:21:85:6a:bc:4a:20:ca:6b:
                    77:3c:88:05:6d:c3:91:84:53:56:85:58:f5:30:32:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:15:AE:1A:3F:AB:7F:E5:E5:B0:2B:4F:08:F1:45:1A:D9:0A:15:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/1a725e6e-8fda-3753-8707-25694f693ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:de:3c:7a:d4:e5:de:94:ad:79:b3:f2:8b:56:a1:68:12:b5:
         30:aa:aa:8f:70:2d:c3:5e:32:78:22:44:9f:f5:36:e2:58:85:
         bd:1b:73:8c:f9:c0:64:f8:09:c4:36:78:23:88:c7:59:23:a5:
         5a:e0:73:ce:d6:c1:cc:fe:cc:44:0b:b8:73:42:33:4b:ab:59:
         8e:d3:87:cf:8b:e9:84:88:1e:db:73:b6:fd:d8:35:fa:96:bb:
         57:74:ca:39:67:d9:fe:bd:0e:fe:5f:32:ac:4e:e6:4f:50:8e:
         79:da:1c:9c:c8:64:65:74:c1:d6:fa:b1:52:da:26:8a:ec:28:
         78:e3:5c:2a:1e:ee:cf:b6:c8:fe:7a:15:87:5f:6c:da:5b:c1:
         1d:aa:43:6d:37:bf:96:61:9a:7a:41:5c:27:f9:cd:30:19:28:
         c7:65:99:a9:76:10:0d:38:06:49:59:2d:26:17:a3:0b:d4:76:
         75:dc:8a:62:c5:3d:8f:e7:f1:04:28:40:b8:07:0b:e1:89:06:
         7c:94:ff:a9:e8:d7:b6:f5:f6:68:35:0f:aa:6d:c2:a0:46:86:
         69:4d:d4:aa:ee:1a:8b:4c:34:0f:1c:e8:6d:b5:bf:18:88:34:
         5c:3b:1b:9a:7f:81:5d:76:d8:d0:10:63:f9:85:40:bc:20:d8:
         62:b8:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:16 2025 by rpki-client