Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa
File:                     ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa (raw, json)
Hash identifier:          bWurw2xUOVeNdMhLSBVvuToeH9UbUES4PHhqjNcOCrc=
Subject key identifier:   CE:68:AA:13:CB:1D:DE:3C:5E:7C:7C:33:71:77:29:D8:29:C0:9D:1B
Certificate issuer:       /CN=39bc904e-c316-4e84-92fb-2339457361b2
Certificate serial:       010D0C9F432858498CFF10D70D64B794FEFD5400
Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     40102
IP address blocks:        160.253.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:10:d7:0d:64:b7:94:fe:fd:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=73b82802-e7f9-456a-a82a-0db6357147c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:fa:da:d2:85:84:25:38:86:22:6b:64:9b:
                    f6:e5:2f:87:df:26:4d:4e:8f:d9:96:7e:ae:26:30:
                    20:0a:e9:04:5a:00:87:5a:fa:60:e6:3f:70:a0:ee:
                    49:9f:95:70:39:97:11:5c:00:2b:2f:92:f5:cf:88:
                    88:71:65:3c:6c:b8:e5:87:81:2d:78:46:2c:46:51:
                    db:ac:63:46:4a:59:02:04:25:9e:f9:53:44:34:c3:
                    fd:ed:68:b8:51:80:93:ed:38:ba:db:83:ac:c9:f4:
                    77:c9:a5:de:ad:4e:e3:7d:f5:1d:ce:36:2a:a0:25:
                    30:19:41:3f:74:31:9f:e8:b8:c1:4e:2b:14:1f:ec:
                    c3:8c:73:07:d9:57:59:87:7f:ff:44:42:2e:70:f0:
                    10:5d:28:56:c2:71:6d:66:6e:89:fa:71:35:37:7d:
                    89:1e:c7:f1:89:db:41:ae:18:1a:59:a6:b7:b5:3e:
                    50:f8:a7:40:9f:85:9f:64:5c:7d:72:1e:50:44:d5:
                    ac:cd:b1:68:53:38:a9:1f:11:42:3a:cc:77:b0:ae:
                    f9:34:22:bc:35:7b:e1:02:e2:ce:a1:5b:24:8e:eb:
                    ff:1c:2d:5b:26:89:f1:23:f3:7a:30:a0:5e:d1:e4:
                    72:65:c3:b8:57:a6:12:a0:f3:4e:68:9c:7a:a2:d8:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:68:AA:13:CB:1D:DE:3C:5E:7C:7C:33:71:77:29:D8:29:C0:9D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.253.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:96:a4:ff:8f:be:51:78:63:1f:50:43:08:74:f3:3c:38:38:
         ff:0a:79:0d:a8:41:f6:3d:78:70:3d:a8:34:18:f3:93:0e:03:
         a0:8e:79:33:09:0f:2a:a3:97:fe:c6:9a:29:c0:f4:c5:30:ee:
         7f:15:53:9a:b0:ac:4a:53:3c:2a:c1:43:9f:d1:18:94:7f:35:
         76:f2:d5:6c:9b:7a:8a:63:7c:d4:f3:bf:94:2e:99:e2:ac:b7:
         e3:c1:73:cb:63:86:73:0a:f0:77:73:95:cf:69:9e:3e:b7:48:
         22:a2:53:8b:a2:fa:8f:ba:48:9e:1c:b0:c1:c2:5f:a2:81:6a:
         09:9f:4b:99:77:18:5b:21:c6:dd:82:88:b9:64:e4:a0:b8:84:
         76:6f:19:2e:a4:8d:38:73:0f:4b:5a:a1:95:3e:ac:f0:58:f8:
         61:3b:a4:7f:d9:eb:7b:59:fd:1c:6e:79:9c:f7:40:36:19:08:
         af:52:cc:2c:df:ad:4f:86:92:94:77:94:7f:f2:6b:a6:2e:c6:
         03:01:bc:e9:cd:73:37:a3:49:ed:76:dd:2c:9e:d2:70:a1:4e:
         82:b5:f5:71:c5:74:e0:6b:6b:71:b1:06:1d:e1:2b:b1:cc:7f:
         f4:ec:ec:db:e8:fc:dd:17:40:12:27:8e:8a:13:dd:4b:b8:4a:
         0d:ce:4b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:30:47 2025 by rpki-client