Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0322a544-3c13-3107-a644-73ab77a1eae4.roa
File:                     0322a544-3c13-3107-a644-73ab77a1eae4.roa (raw, json)
Hash identifier:          6NrmybuTYnbQmCgwxGXzoCotniAvpxqGMzoAhAx8qsk=
Subject key identifier:   51:5E:E3:BF:25:49:4F:6F:BE:D2:20:D2:3A:D8:C8:58:31:EE:49:56
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584A0C055B8C3B219F50E3BD7A18
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0322a544-3c13-3107-a644-73ab77a1eae4.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     395111
IP address blocks:        142.214.160.0/20 maxlen: 24
                          142.214.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5b:8c:3b:21:9f:50:e3:bd:7a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=89952d44-8f7b-41f8-8cea-766ed130ceff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:af:51:5b:65:8a:25:c2:b4:7f:73:94:58:ae:
                    58:92:d4:7f:33:2e:7a:c2:df:ff:da:84:7f:17:24:
                    5d:8d:7e:0b:37:86:7b:9f:64:6e:e6:ad:18:9a:57:
                    7b:cc:66:46:30:91:c1:ef:75:3d:e6:a4:e0:d1:29:
                    8f:08:bd:15:6a:a4:b6:82:06:2c:e0:cf:04:48:5d:
                    52:0e:7d:c6:66:d6:a3:2d:8f:8d:18:20:0e:14:e3:
                    9a:70:46:fe:b1:3c:f4:5f:0f:02:86:e5:e3:f0:65:
                    08:22:80:e4:10:2b:d1:29:47:9c:0e:d7:0d:f6:55:
                    b1:82:ba:28:28:a1:01:53:6b:94:01:1e:fc:14:be:
                    7f:f1:13:14:72:34:7b:1f:81:d9:a8:9b:30:0e:63:
                    61:48:7f:a9:fe:47:7c:1a:31:7c:00:f4:5a:47:25:
                    fd:01:c3:b1:ac:67:24:0e:4c:ca:1d:77:ca:4c:f0:
                    c1:2d:46:cb:35:6d:13:8c:f3:d1:16:72:3f:9e:11:
                    2c:a8:78:43:12:de:a0:1e:95:02:89:f5:3f:93:6a:
                    40:ea:3a:09:bf:bb:25:21:69:63:a6:79:87:9b:2c:
                    2d:9d:07:cb:68:9c:15:18:64:f5:e8:21:7b:0d:fc:
                    ee:b7:96:1a:ee:8f:f2:dd:70:f3:42:9a:e7:54:18:
                    7a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5E:E3:BF:25:49:4F:6F:BE:D2:20:D2:3A:D8:C8:58:31:EE:49:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0322a544-3c13-3107-a644-73ab77a1eae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d5:44:36:b8:b1:4e:63:b7:36:98:ad:5e:4b:82:35:ad:44:
         e3:0f:e7:8a:62:2a:3e:a2:e0:29:fd:2e:78:d3:a6:9c:91:5e:
         d2:11:1b:ac:d3:78:c2:ba:32:76:18:5e:5e:29:9f:02:c9:68:
         bf:92:6b:65:42:84:7a:cc:4a:16:d4:3b:a9:82:f1:46:c8:e6:
         be:99:42:fd:1f:0a:13:6c:a5:1b:cc:f4:00:57:be:2c:da:68:
         5f:dd:34:6b:cf:90:91:60:79:10:91:0f:b4:69:7a:21:b2:f6:
         63:e8:5e:6f:a8:16:b7:fa:1d:fa:c0:c9:c2:05:22:bd:20:93:
         88:55:0e:17:db:95:09:6e:f5:67:98:46:28:88:b9:01:05:01:
         e6:96:f1:b7:8b:70:32:c4:7d:fc:13:f2:e2:60:50:4c:46:85:
         9b:f4:68:ae:b5:59:15:1d:64:1d:7f:db:7b:b8:8d:a4:17:c8:
         ca:6f:8f:d8:10:42:d0:19:c1:de:09:12:fb:2b:d0:12:63:12:
         c7:c4:bf:ee:0f:3a:7e:70:ee:c6:cc:ae:58:ac:90:ce:1c:b8:
         07:20:0a:f9:d9:3f:eb:9c:1d:4f:c3:8c:61:03:9d:63:23:63:
         00:24:bd:21:a9:f4:50:49:9c:a4:54:e1:15:59:11:41:08:7b:
         4f:11:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:15 2025 by rpki-client