Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f5888c18-f7ee-3c25-a160-5cd4632d848c.roa
File:                     f5888c18-f7ee-3c25-a160-5cd4632d848c.roa (raw, json)
Hash identifier:          dUio6TYmsNHsyRh+y5942amP4d62uXRYKaT6/4VrU9M=
Subject key identifier:   DB:E2:F7:FC:8B:B7:0D:99:DF:F0:B2:8D:3C:0A:5C:33:63:B5:77:AB
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584A9900C74E5D877A41DF5DAFD0
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f5888c18-f7ee-3c25-a160-5cd4632d848c.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     5645
IP address blocks:        69.172.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c7:4e:5d:87:7a:41:df:5d:af:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=1e28062a-30f1-488d-b724-1d1ad0f48da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:90:76:2f:b9:fd:3c:42:b4:e8:7f:74:db:
                    99:8c:6e:82:a6:71:57:97:54:5d:b2:51:71:3b:74:
                    34:05:d9:cd:74:eb:88:ff:47:34:ca:86:53:f9:56:
                    d2:0b:4a:5e:cd:aa:2c:47:3a:67:37:df:7b:df:88:
                    ec:5a:0f:f1:d8:e5:10:a9:ff:e6:30:34:0f:5a:9f:
                    eb:3f:64:82:f6:f7:23:71:3d:8e:6c:ec:26:1a:f9:
                    bb:d1:b5:64:40:6f:64:a9:8d:07:fb:00:a5:3b:df:
                    51:d9:39:2e:06:ed:83:67:85:d4:6a:08:bc:16:f1:
                    dd:11:cc:80:24:a4:9a:29:8c:1b:8e:ad:0f:df:04:
                    21:0a:cb:aa:04:28:d2:93:97:a0:0f:fe:86:d9:b0:
                    ca:ed:5a:e9:c1:db:15:4c:ac:96:ef:e9:36:19:78:
                    19:75:f3:0b:62:45:2c:71:2d:6c:f3:dc:37:7d:d1:
                    3e:9a:b9:8a:ac:f9:28:7f:bd:c1:e7:4c:36:53:c7:
                    ad:0e:fa:22:b4:3b:28:f2:a1:eb:11:24:90:b5:1c:
                    6c:68:43:af:a0:21:e2:a0:0d:d8:4b:fe:76:9f:2d:
                    9e:c7:36:8c:b5:87:f0:63:d9:df:2d:35:4b:a7:44:
                    06:e2:36:7f:56:79:db:fd:d1:e0:91:d6:88:5a:74:
                    1c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E2:F7:FC:8B:B7:0D:99:DF:F0:B2:8D:3C:0A:5C:33:63:B5:77:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f5888c18-f7ee-3c25-a160-5cd4632d848c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:26:4b:55:f1:e1:81:78:8d:5f:d9:6e:c5:53:9e:5d:c8:39:
         25:b4:60:66:2c:d0:b9:35:5c:e9:fa:3f:d4:b9:2b:96:21:0c:
         cc:fb:ce:ae:e5:d3:c1:70:1a:38:be:68:e5:ee:ba:34:72:1c:
         45:eb:7b:0b:b0:b7:1c:7d:67:54:f5:9b:63:ca:ce:4b:fd:e9:
         05:97:0d:12:0b:04:d7:88:d0:c3:72:d0:3c:8b:0d:72:96:63:
         0f:8f:b8:4a:69:75:d9:1f:3c:07:04:39:00:10:21:0a:68:42:
         77:cf:1b:25:bb:fd:d9:de:11:b9:b6:f6:45:65:61:e4:f9:52:
         51:81:b9:77:ec:4a:06:a3:e1:c8:1b:d4:bd:b1:99:2e:0c:52:
         ac:af:95:00:74:f4:34:65:61:54:99:ed:fe:13:0f:33:f4:e1:
         e7:b9:79:e8:72:36:0c:e0:fd:20:f6:44:1d:3f:56:6b:3c:02:
         40:54:6b:e7:bb:90:31:39:07:2f:12:bb:a3:25:21:82:bd:ed:
         dd:0f:27:77:81:35:3d:f0:5c:9f:25:b7:8e:f8:15:f9:67:0b:
         60:81:c8:36:a1:56:b2:11:9f:b2:9a:e7:09:13:db:d5:41:07:
         d1:c3:25:8b:fe:0c:bd:08:c7:e7:f8:37:2c:94:c8:6f:86:5c:
         b6:b3:4b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:15:52 2025 by rpki-client