Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/247b305d-f301-3381-b5e2-e46af1dea532.roa
File:                     247b305d-f301-3381-b5e2-e46af1dea532.roa (raw, json)
Hash identifier:          oDP8MuWDaivzB0bPhKFAHtDnvl83EhA5lyB3wLY3/Fw=
Subject key identifier:   15:9A:45:93:E0:E0:98:28:8C:4B:99:F0:BD:51:FB:EE:46:1A:ED:50
Certificate issuer:       /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
Certificate serial:       010D0C9F43285849D594E092EA3A69EDF30DBDA0
Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/247b305d-f301-3381-b5e2-e46af1dea532.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     6360
IP address blocks:        132.160.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e0:92:ea:3a:69:ed:f3:0d:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=4bfa122f-127a-4c68-aafc-b40cccff431c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5e:9f:54:00:3d:9e:8d:c8:1c:df:40:d1:f2:
                    3d:94:30:b8:e4:52:c1:2e:7b:c8:91:11:26:ce:43:
                    90:07:50:ac:55:a9:a0:93:d5:c3:ba:5e:36:27:57:
                    4b:eb:4a:ce:2c:5c:9f:d9:43:17:cb:ac:57:38:c8:
                    ab:34:7e:4f:fb:14:57:24:15:c6:95:6a:ad:57:42:
                    60:00:8f:68:6b:ff:f2:c6:db:dd:3e:ab:76:39:0f:
                    c1:cd:1d:35:73:66:38:53:f6:c5:3d:9d:22:da:7a:
                    bd:2e:c7:8a:03:a2:40:a9:ac:1d:75:66:ff:ba:46:
                    52:65:f1:8b:68:25:83:b5:4d:c2:b0:9d:d1:c4:50:
                    c5:51:8a:e6:b7:36:b1:7f:7f:20:48:7c:7e:ec:93:
                    d7:99:41:32:06:8f:72:00:f6:df:48:ec:4d:b3:65:
                    7d:6b:66:8b:a8:49:5a:ee:74:76:ea:38:27:12:aa:
                    29:b0:56:86:c6:66:81:4f:da:26:65:f4:89:3e:e3:
                    8b:4a:cf:51:2d:a7:94:c3:bf:24:63:a1:fd:5d:ce:
                    1e:da:47:fe:2a:d4:20:ab:fb:e0:34:1c:b4:e7:fb:
                    5d:c9:ff:35:b1:9c:a6:2e:1b:c3:ff:3d:85:7e:6a:
                    07:33:fb:0c:bc:a8:ea:5e:68:ab:36:60:26:c9:34:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9A:45:93:E0:E0:98:28:8C:4B:99:F0:BD:51:FB:EE:46:1A:ED:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/247b305d-f301-3381-b5e2-e46af1dea532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl

            X509v3 Authority Key Identifier:
                keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.160.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:03:e8:03:87:2d:5d:7c:45:65:39:8b:10:05:65:5a:4b:
         0c:43:fd:e4:4a:92:f8:ac:9d:98:28:fe:83:26:e0:13:d4:d7:
         cc:ce:3b:2d:0d:a0:8a:0c:96:8e:6a:77:7d:61:eb:f5:3f:57:
         c9:6d:6a:aa:17:c3:4a:86:2d:ed:b2:bd:3c:3a:c9:18:59:a0:
         6d:07:fb:c2:dc:cd:1b:2f:ec:79:5d:65:68:8c:f8:b9:7f:ff:
         5c:fd:09:1a:38:ef:28:76:ca:b7:b3:cf:6c:3f:fc:e3:43:20:
         b7:69:1e:3b:b0:e8:64:e9:29:97:ce:22:5f:f3:71:1d:82:df:
         24:8e:97:f9:78:f3:e5:7a:58:8c:b9:8c:ce:12:5e:c4:9d:ca:
         cf:95:97:0c:2d:a3:6b:c1:e1:f6:91:98:a5:7a:d0:94:d1:ad:
         30:b1:1c:44:af:4c:91:7a:be:4e:c4:a2:6c:6a:0a:31:48:ba:
         8f:ca:e6:60:07:f9:b8:13:55:1a:04:f9:33:6a:ad:f8:05:d5:
         83:dd:5f:2e:e1:85:96:6b:a3:93:94:25:47:b6:6a:f8:c5:7e:
         04:db:90:d0:eb:ed:79:e7:dc:dd:88:7e:5d:74:9d:ba:c7:68:
         f9:f1:fa:30:da:9f:1a:7d:06:92:f1:23:1e:14:0c:b0:a2:8c:
         5f:63:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:24:26 2025 by rpki-client