Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa
File:                     23f6d5b1-a0f6-317d-bee3-89903b027032.roa (raw, json)
Hash identifier:          GEMsSZMUrDYE4Ps27rEg90lTE3zTwMfzWzMpN2kxDkg=
Subject key identifier:   74:23:09:79:22:C5:8C:0C:F6:9C:B8:A8:96:59:EA:31:DE:81:39:5D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841220B988A72784CE61AD80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:20:b9:88:a7:27:84:ce:61:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=00437372-dced-49e5-9f7f-8f69cc0fe01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:15:a0:05:bc:fe:1f:e3:da:47:fd:e8:8b:
                    09:41:41:9a:fc:89:f3:8e:6a:17:09:22:7a:25:3e:
                    9f:f5:fb:b7:dc:e4:54:89:cd:88:46:ec:86:1b:47:
                    26:fc:b8:80:f9:eb:5e:f3:c8:c6:18:ec:57:e5:b9:
                    47:f8:e7:cf:46:7a:ab:66:bd:0b:fc:19:f3:4d:11:
                    db:da:b4:84:33:bc:fb:0a:fc:f8:42:fe:2c:9b:94:
                    7d:c2:b3:fb:29:57:0e:b9:bb:68:73:94:7b:71:79:
                    78:b4:ca:81:29:33:dd:3c:c6:79:c7:fd:01:91:78:
                    66:b7:29:2e:d2:eb:2d:11:59:ea:9f:ca:95:77:41:
                    52:8e:60:e6:b1:c2:14:e0:2b:31:3b:42:36:2c:b0:
                    fe:51:88:b0:84:21:c5:89:fb:d1:98:1b:6b:88:d9:
                    53:63:bf:f1:eb:fb:4f:24:c9:ce:da:34:a7:25:2a:
                    54:ce:c9:38:69:76:5d:d2:9a:ff:02:cc:15:80:ab:
                    c3:3d:7e:77:cc:73:64:40:45:96:63:68:cc:14:e4:
                    f7:55:6f:39:b9:31:37:c9:81:b7:81:bd:43:d5:ae:
                    48:57:d4:81:30:02:09:df:5b:5d:11:67:64:c0:4d:
                    ff:f0:85:28:8f:8d:04:47:e4:b8:6f:a0:d4:3a:8c:
                    5e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:23:09:79:22:C5:8C:0C:F6:9C:B8:A8:96:59:EA:31:DE:81:39:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9f:c0:5b:62:67:1c:bc:f7:e7:e4:cb:74:9f:d1:c2:f4:bc:
         22:28:78:fe:df:71:89:eb:89:12:59:ac:71:ac:5c:10:95:ac:
         99:0c:91:c4:6b:bf:aa:d8:7c:b5:38:b9:ed:e5:60:6c:e5:9e:
         39:b3:ab:24:cf:95:a3:e1:64:f9:c9:dc:e8:ee:91:1a:1f:24:
         03:38:da:2e:1c:b3:b0:71:7c:37:80:93:c8:98:46:47:ee:d6:
         f0:6f:8a:d4:5b:7e:18:18:44:62:ed:94:3e:a3:91:ec:2d:50:
         97:23:79:a8:18:8e:d2:ac:43:c6:da:3e:0f:5a:fe:7f:5d:8d:
         fe:08:f9:b3:8a:b2:27:6d:11:74:8f:90:b4:f1:a9:14:66:2d:
         f9:37:88:9b:f2:3a:04:bf:ac:6e:50:5e:b5:61:bf:83:87:22:
         68:4f:2e:ce:ae:24:e6:cd:86:e3:0d:a0:19:82:e0:5b:7e:c1:
         86:03:ae:cd:54:39:31:93:ea:6d:1b:60:dc:a5:4d:c7:7a:ac:
         5a:2e:72:e6:1e:95:81:15:22:10:66:3e:9b:e6:10:8d:6f:56:
         8f:57:aa:c0:e4:3c:8e:4d:95:b9:14:f1:be:23:5c:f0:8e:c3:
         41:cc:cf:8f:86:48:c8:00:56:1a:09:28:c5:97:1a:55:6b:6c:
         f6:93:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:48 2025 by rpki-client