Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/c90ab03d-58cf-370f-906d-b31be90f3034.roa
File:                     c90ab03d-58cf-370f-906d-b31be90f3034.roa (raw, json)
Hash identifier:          YUECU/cBnGJwK3/3bupjYVqKHpiBtJW01BVMHzEu0jk=
Subject key identifier:   D2:28:6D:A5:66:20:E5:F3:48:25:25:CB:8C:E3:BC:AC:C7:EB:80:CE
Certificate issuer:       /CN=67f18c85-4b4b-447b-99f3-764300e28398
Certificate serial:       010D0C9F4328584A14656E7C6407CDCCD1166BB0
Authority key identifier: 6C:C1:CA:14:20:93:95:EF:8B:4F:61:26:36:8B:1C:9E:04:AF:F4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/c90ab03d-58cf-370f-906d-b31be90f3034.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     18792
IP address blocks:        23.160.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/67f18c85-4b4b-447b-99f3-764300e28398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/67f18c85-4b4b-447b-99f3-764300e28398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6e:7c:64:07:cd:cc:d1:16:6b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f18c85-4b4b-447b-99f3-764300e28398
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=708ee0a3-cda8-436d-80d7-fcc52accc143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:46:04:7d:50:65:7c:40:6e:cd:e4:39:b1:
                    fe:10:cf:ea:fa:17:c6:1e:9b:78:bc:5f:94:88:18:
                    be:47:56:57:e9:87:6d:39:ee:a2:c9:a2:bc:67:8e:
                    58:a8:6a:e6:fe:82:6d:6d:c4:c6:23:a8:a6:62:c5:
                    0c:b7:7a:c1:11:9a:13:5d:0f:93:f4:0b:6f:bd:3a:
                    1e:2c:44:0f:ed:7a:0d:28:12:94:76:56:90:2e:d7:
                    d6:90:5e:1f:ad:2f:79:8c:eb:89:4c:c7:b7:ca:5e:
                    4a:5d:fb:45:ce:b8:1f:e0:c6:6e:47:9f:27:63:21:
                    b3:93:e3:cf:5f:47:eb:0d:93:86:08:c2:c3:33:c0:
                    f5:c5:a8:6b:d8:99:c3:4c:28:92:01:03:84:cb:32:
                    c5:46:5a:a1:e6:66:be:e2:31:62:a6:b8:b5:71:ae:
                    64:db:63:e2:a4:16:41:6a:af:b0:f1:84:a0:29:88:
                    21:2c:ea:ee:28:67:5a:4c:e1:aa:a6:d4:f0:b8:ef:
                    37:78:3e:8f:5f:56:26:a8:1a:02:c1:f7:7b:7f:45:
                    e8:b3:a4:38:72:90:93:96:2e:27:64:e7:2d:84:eb:
                    a6:2c:54:f5:5e:ea:0b:f9:80:ac:99:6a:80:0a:54:
                    e6:88:36:88:e3:ad:b8:0c:65:a2:8d:b2:31:3f:d6:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:6D:A5:66:20:E5:F3:48:25:25:CB:8C:E3:BC:AC:C7:EB:80:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/c90ab03d-58cf-370f-906d-b31be90f3034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/67f18c85-4b4b-447b-99f3-764300e28398.crl

            X509v3 Authority Key Identifier:
                keyid:6C:C1:CA:14:20:93:95:EF:8B:4F:61:26:36:8B:1C:9E:04:AF:F4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:73:00:59:f2:b7:32:32:2a:eb:b8:21:66:91:fc:a3:19:13:
         28:f1:5f:c7:c7:88:f5:35:e9:49:f5:c8:57:e0:03:d2:6f:2e:
         bb:5b:4b:fd:de:ab:f7:80:ea:23:16:43:98:74:cb:6b:33:2c:
         ba:17:a8:4a:35:a8:f6:aa:4a:69:95:9c:6f:b0:da:3b:16:e1:
         72:d8:19:ec:97:73:57:10:c4:56:7c:18:57:d5:2a:49:9f:9e:
         27:34:3b:6e:4e:83:11:df:b9:4f:53:84:45:12:cd:9f:2c:70:
         2f:b7:27:4a:49:44:76:06:82:a5:57:14:49:4d:dd:fe:86:b2:
         49:4b:ed:3b:06:5a:d7:59:2c:0d:d9:f7:5f:53:60:9d:64:40:
         74:ec:11:f0:4b:07:4d:52:15:3b:14:48:3f:55:91:32:c8:95:
         09:19:ae:71:d7:ed:78:bd:2d:29:5f:2a:e5:d7:0e:9c:51:7d:
         51:08:f9:7b:55:5b:05:2d:39:b3:94:79:a8:6f:a2:a2:bf:67:
         ec:96:dd:68:cc:24:9a:31:1a:58:5d:79:13:b9:37:a9:9a:fa:
         c8:b9:2f:5f:ac:65:19:07:7a:c9:97:5d:e1:3b:7c:38:50:a7:
         8e:e1:e1:59:b3:c0:e2:28:1e:73:1a:f4:24:b8:ae:ca:8e:d1:
         53:0b:ce:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:43:08 2025 by rpki-client