Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/85512459-abab-3be9-8088-4ceb997b7bf8.roa
File:                     85512459-abab-3be9-8088-4ceb997b7bf8.roa (raw, json)
Hash identifier:          08VCU4izfHZ+jFtJ8e4It/bmu2itUtQG74RfvFhW7Yk=
Subject key identifier:   F7:0D:79:B0:85:13:53:B3:3D:F3:6A:E4:4C:4F:E3:F3:4D:A8:9D:29
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F43285849DC8630F0AB1B3DF5C4C76740
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/85512459-abab-3be9-8088-4ceb997b7bf8.roa
Signing time:             Thu 15 May 2025 12:42:02 +0000
ROA not before:           Thu 15 May 2025 12:42:02 +0000
ROA not after:            Wed 13 Aug 2025 12:42:02 +0000
asID:                     16509
IP address blocks:        160.32.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:86:30:f0:ab:1b:3d:f5:c4:c7:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: May 15 12:42:02 2025 GMT
            Not After : Aug 13 12:42:02 2025 GMT
        Subject: CN=2f68675a-97fb-4260-9234-817c3b0326ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:b8:b2:96:ce:63:a5:50:b3:ed:88:1c:65:
                    1c:11:86:7c:37:3c:b5:a7:49:f8:61:6d:7a:f9:09:
                    b7:5b:73:0c:04:b9:e0:28:5e:e0:6f:db:f4:ae:17:
                    0e:a5:96:67:82:80:b3:d2:9a:0e:0e:39:43:f3:27:
                    82:d1:37:f1:30:15:1f:4f:6f:07:ba:3e:88:08:4b:
                    af:6d:01:fc:1d:b1:4f:a0:37:8e:80:26:86:0d:9f:
                    18:7e:5a:ba:02:99:ba:79:44:b6:b1:88:33:de:e4:
                    fd:80:b4:43:a0:fc:6b:34:ca:ef:56:05:02:5b:98:
                    6e:e7:48:9d:8d:bb:3d:dc:19:ad:26:40:32:d1:8e:
                    54:4e:11:45:e5:ec:61:fb:9b:a3:d4:d9:0d:38:65:
                    bb:12:a6:79:4c:ba:c6:0b:a0:08:3d:7d:46:83:57:
                    61:b7:28:4c:05:ac:22:86:fd:12:a8:01:5c:b7:8c:
                    37:86:f6:54:e4:af:4a:bd:23:ad:9e:9e:52:65:59:
                    6f:16:fd:66:ce:f8:ca:24:dd:09:9d:ee:a7:5d:06:
                    ac:c9:3d:9f:bf:76:34:e2:8a:34:a0:2d:25:98:3d:
                    90:ee:7e:07:45:23:05:f6:06:c9:c4:28:37:aa:49:
                    65:49:60:cb:4a:ce:88:52:9f:b2:50:4d:df:b5:53:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:79:B0:85:13:53:B3:3D:F3:6A:E4:4C:4F:E3:F3:4D:A8:9D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/85512459-abab-3be9-8088-4ceb997b7bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ce:14:be:ea:b2:c5:5c:ba:91:f9:2c:a1:5c:13:6f:8c:ad:
         da:e1:9e:73:28:1b:b2:9b:7d:ca:be:3f:c6:c1:36:45:5a:7a:
         bf:6f:51:4f:29:1e:37:9b:ee:c0:0a:a3:5a:f4:09:1a:32:d5:
         cd:98:47:21:0b:10:74:df:32:98:da:1e:c6:02:a0:d7:2e:fc:
         12:d2:cf:37:4e:53:28:52:aa:93:37:7d:b7:5d:94:fd:9f:1a:
         b8:b4:f7:0e:4b:06:08:c6:e3:7b:c7:37:99:da:ce:6e:a3:66:
         15:5e:89:35:cc:c4:be:e4:cd:a1:83:fe:d2:54:d9:58:b6:cb:
         e3:c8:be:62:40:cf:8e:d8:e2:87:e3:4d:65:e6:c7:38:e3:39:
         83:a8:4d:45:05:b0:21:64:49:13:8b:3d:fc:c8:5b:69:3c:05:
         ba:01:95:be:12:4f:8a:fc:19:43:6a:04:f4:19:d7:bd:8c:c8:
         46:31:43:22:b7:16:18:1c:63:ff:26:6e:42:be:a6:1e:bd:5b:
         75:6e:1d:6f:17:28:a6:7f:d9:52:09:ee:db:69:30:83:96:3e:
         1c:10:c1:18:b6:84:b4:0c:87:bb:91:16:ab:d8:4b:c1:fb:15:
         c8:dd:cd:2b:66:22:0c:13:96:0f:67:46:be:35:ff:37:f1:64:
         da:1d:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:23:10 2025 by rpki-client