Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/f881355e-4081-333e-9b19-c7df3c9596c3.roa
File:                     f881355e-4081-333e-9b19-c7df3c9596c3.roa (raw, json)
Hash identifier:          NjVpDsIJ6/aksh0lrCOEpvboQW2IHbtLVU2C+n9Xd8Q=
Subject key identifier:   DF:18:D2:4E:32:E7:43:9D:65:45:8C:2E:29:B4:13:1F:6C:4D:5F:27
Certificate issuer:       /CN=39bc904e-c316-4e84-92fb-2339457361b2
Certificate serial:       010D0C9F432858498CFF10E40C8257047ABEB440
Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/f881355e-4081-333e-9b19-c7df3c9596c3.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     40102
IP address blocks:        160.253.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:10:e4:0c:82:57:04:7a:be:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=0ba83c37-fe89-4178-9d32-d4e047bc02a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:63:21:d7:93:fb:4d:49:1e:f6:14:ee:e6:da:
                    44:25:01:0f:d8:59:32:00:cc:ac:0a:10:13:ca:09:
                    9c:49:0c:f3:a8:cf:43:71:dc:d6:5d:e4:2e:a3:ae:
                    59:76:8d:73:de:9c:36:94:9e:bc:60:1c:7b:ec:91:
                    45:87:b6:99:8e:ca:f0:78:77:22:af:7f:bb:1f:39:
                    80:0b:84:12:18:4f:42:ab:6c:6a:1f:5b:3a:19:26:
                    08:53:7d:8d:aa:60:48:a5:96:38:03:fe:b8:c5:c5:
                    30:b2:b7:d8:2f:26:1e:4f:87:c5:b4:a1:5e:78:52:
                    6e:49:a1:04:1f:bb:d7:08:cc:ba:1f:04:07:22:a5:
                    03:be:7b:5c:8b:3b:f2:ac:0f:2e:9c:a9:be:f1:9a:
                    a9:a7:64:3a:d6:29:ee:2a:a3:0f:ad:7a:53:3b:fa:
                    70:6f:08:4d:a9:17:dc:cf:41:c1:0e:fa:3b:f5:88:
                    c1:01:40:b0:33:02:b2:20:c1:e2:c0:69:d0:45:5e:
                    19:fa:98:0a:9e:db:4b:81:68:32:34:3e:e8:cc:85:
                    f9:6f:aa:b9:a1:a3:5c:3f:51:23:d4:7c:a3:49:3d:
                    d4:c1:86:83:9f:7f:5f:1d:5e:25:41:91:76:a7:08:
                    a7:a4:95:94:12:38:dd:29:a2:ce:f1:3f:76:3a:dd:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:18:D2:4E:32:E7:43:9D:65:45:8C:2E:29:B4:13:1F:6C:4D:5F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/f881355e-4081-333e-9b19-c7df3c9596c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.253.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:06:b4:e7:b9:f3:85:48:17:18:a1:9c:c5:49:a5:22:41:
         03:f8:08:e2:94:bc:e3:6b:a3:9d:8d:ea:b4:49:4c:c3:80:75:
         41:27:1c:cd:9b:79:f4:57:0d:40:13:be:b6:53:ee:bc:2e:89:
         72:ca:4a:7e:e2:08:f0:02:d9:0b:aa:ec:c0:fd:44:31:89:4d:
         78:9a:92:0b:29:e7:0a:8e:b2:c4:68:90:70:34:d6:83:c9:a5:
         70:bf:ee:7f:83:6c:e9:2a:63:f7:1e:d7:ae:d9:4a:33:83:00:
         28:b1:54:8b:92:c3:fd:f5:60:fc:a3:87:c7:10:dd:34:b4:4c:
         e6:b7:a9:15:4a:56:88:ae:c6:83:b4:7c:a5:f8:71:8c:ba:1a:
         e7:ee:fa:f8:e7:6d:25:23:d7:9b:e0:a0:f6:45:f3:57:de:38:
         a6:44:7d:11:8b:c0:b3:ea:3e:52:fc:a3:7f:4d:83:eb:25:cf:
         0e:94:67:a2:4f:d0:0c:e1:a6:e0:29:c5:65:14:5c:16:dc:cc:
         57:f4:5e:bc:15:23:8c:ca:a2:c7:6d:a0:ef:d7:96:f2:64:e0:
         8e:35:43:a3:40:dc:5e:8b:d5:66:23:b0:1a:f8:d8:cc:2e:19:
         f8:e6:ff:55:42:42:9e:e1:6b:c1:f9:28:4b:a9:0b:a9:b2:93:
         3f:31:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:09:47 2025 by rpki-client