Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa
File:                     350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa (raw, json)
Hash identifier:          aIgsbPOMjhlO6Cp4rBbN+bQEyud9qke7OS0Ds3YdcVI=
Subject key identifier:   D7:82:58:A3:E5:C1:37:6A:0F:FE:6B:90:F4:A0:59:C2:7D:04:DA:DD
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F43285849EA852211F9A62B7EF6EB7280
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     22925
IP address blocks:        162.211.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:22:11:f9:a6:2b:7e:f6:eb:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=ad8153f4-f1f7-4a5b-ac11-6a6109a44234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:d4:46:c1:0e:72:90:d3:ff:84:4c:e8:85:
                    32:9d:67:9f:2f:95:50:03:af:e5:45:aa:40:70:16:
                    d0:7d:17:ae:2b:7a:26:db:6d:10:97:57:d8:dc:2d:
                    29:cc:f8:ab:58:18:6a:b2:1b:09:59:d3:f5:d2:8f:
                    42:34:7f:8b:f4:37:5e:8a:09:9d:cd:30:31:49:79:
                    ae:60:65:2a:2b:38:d5:c0:2f:dd:d1:25:63:1d:e8:
                    ab:9b:fb:ab:7b:d4:a7:93:09:38:55:4e:b1:6d:f7:
                    8b:5d:b5:9f:c5:fa:0d:88:c5:d1:fb:85:bc:ec:e7:
                    94:c8:d6:01:7a:88:12:1a:fe:56:d7:b1:66:7b:6f:
                    d9:26:a8:da:1b:7b:17:cd:08:f9:81:d8:85:2d:5b:
                    f8:bf:20:ed:43:b2:4b:2a:a1:37:54:5e:a1:fe:03:
                    ea:c8:4b:60:b5:50:ed:a7:91:ce:26:4c:83:af:8e:
                    54:f1:b9:55:c4:73:aa:05:f8:26:16:f4:0c:40:5f:
                    db:a2:5f:43:fc:67:f8:fa:c8:07:fe:e5:fb:99:7e:
                    c8:6a:cf:7b:dc:35:ce:c7:cb:c0:b6:9c:a5:b8:65:
                    dc:cc:c2:1a:85:a1:a2:9d:d7:ed:98:9d:c1:05:e3:
                    96:f5:1f:13:4e:66:d5:b8:9e:63:f5:65:5b:86:12:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:58:A3:E5:C1:37:6A:0F:FE:6B:90:F4:A0:59:C2:7D:04:DA:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8f:b4:45:f6:97:99:d5:78:1a:5b:c9:71:cf:31:bd:26:4f:
         9a:4d:d5:e9:bf:6e:b1:53:d1:3a:5c:7f:80:45:67:1e:29:d5:
         eb:59:ca:bc:2d:9a:67:3b:03:ae:71:01:b0:da:00:17:eb:e4:
         c7:70:b4:e5:88:14:32:95:c2:81:1e:4d:8c:5e:99:90:d8:33:
         40:4f:01:55:17:27:51:ad:d9:55:2b:ff:4b:80:1f:0d:46:be:
         b1:fe:4d:36:59:6b:96:46:c6:d1:ed:ac:8b:11:54:2c:97:2c:
         c3:60:30:11:8e:20:0d:dc:39:29:fb:6e:fc:cc:5d:44:ff:30:
         e8:28:3b:ed:ad:5d:1e:29:c2:b2:5b:ea:2a:53:42:c5:32:08:
         f2:f7:00:3c:48:7d:c6:f9:1b:e7:95:d0:84:27:1d:40:6f:44:
         15:c7:3c:b4:4b:4d:35:97:15:ed:99:33:47:12:1f:cb:71:14:
         7b:3e:89:8c:52:e1:63:83:9b:46:7a:5c:84:6d:99:ed:08:4c:
         1c:ed:aa:1e:e0:f9:d1:b9:2b:a1:61:fd:0e:c3:70:f6:c6:a3:
         86:d4:a4:0d:73:0e:63:ef:71:81:1f:cb:97:ad:33:cb:0e:20:
         c1:0a:70:44:6d:88:4c:75:70:c8:3b:ef:8e:1d:29:3f:3d:d5:
         d9:27:76:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:09 2025 by rpki-client