Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/ee7ce86e-3919-39a7-9193-a27eaf247f05.roa
File:                     ee7ce86e-3919-39a7-9193-a27eaf247f05.roa (raw, json)
Hash identifier:          08U63uM5bAhWhWr38sQ+lXvX5b1Js/hOgtUjXGwgeYQ=
Subject key identifier:   26:5D:52:2C:C8:D5:67:8C:B7:31:C3:C1:CB:F0:45:01:9F:2C:D1:68
Certificate issuer:       /CN=e5a67b98-1c41-438b-b404-8142d67c6476
Certificate serial:       010D0C9F43285849C904E6D6CC26EB6B83B1A800
Authority key identifier: 81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/ee7ce86e-3919-39a7-9193-a27eaf247f05.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        192.69.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e6:d6:cc:26:eb:6b:83:b1:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a67b98-1c41-438b-b404-8142d67c6476
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=18a2a99c-ea9b-4b9c-9693-5ffdf1478d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:03:de:a3:f0:06:f2:86:d3:af:72:3f:97:
                    50:bb:19:2f:85:b5:e9:41:42:be:be:f9:fe:be:04:
                    e4:93:b3:25:3b:89:81:e2:d1:18:92:e7:64:27:cf:
                    0d:97:8d:87:40:9c:1e:9c:c6:37:c4:b2:f9:81:5d:
                    3f:c4:29:81:04:15:c1:58:0d:71:27:73:4b:61:02:
                    c9:ed:54:2a:04:86:3b:8e:55:07:98:6a:e4:e9:0e:
                    82:18:e7:4a:95:c6:97:9f:17:f6:23:73:6f:38:96:
                    41:f3:47:56:b2:cb:ac:fb:94:a3:33:41:e7:04:96:
                    2b:2b:3a:7c:01:d5:51:68:7c:0e:93:e1:86:2f:db:
                    ec:2a:ef:62:75:f0:41:92:d3:ba:55:2a:f4:81:4b:
                    bc:3f:6d:7f:1f:14:00:54:ad:1c:50:53:a6:e3:90:
                    8e:fc:cf:5e:3e:2e:96:3f:6c:2b:84:48:f1:f4:3d:
                    d1:19:aa:8b:6f:4f:c3:eb:6f:61:77:2d:21:af:e4:
                    ab:98:6f:86:a6:24:52:85:68:a4:39:2b:16:17:54:
                    70:7d:9d:db:0a:64:58:d9:8b:a0:c5:6a:8e:b3:31:
                    37:d8:34:c5:b5:c4:47:83:eb:cf:97:7a:57:ce:e4:
                    c0:7a:41:07:51:94:41:46:4d:c8:22:2a:e6:cc:ab:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5D:52:2C:C8:D5:67:8C:B7:31:C3:C1:CB:F0:45:01:9F:2C:D1:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/ee7ce86e-3919-39a7-9193-a27eaf247f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.crl

            X509v3 Authority Key Identifier:
                keyid:81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bf:3e:09:f8:b8:d2:bb:5f:8a:e0:1e:74:6f:56:3a:15:e0:
         a8:4e:50:c0:93:01:de:d3:d3:1f:04:ab:ae:e0:2f:a8:9e:cf:
         c5:0d:e9:d3:dd:1c:16:ae:fe:11:40:b9:8f:f2:64:25:28:c0:
         ab:40:75:74:ea:ed:01:20:06:50:22:66:53:33:21:b2:b7:2f:
         0e:ae:d1:52:3a:14:70:72:c5:2e:80:5a:5b:ef:fc:6d:f4:72:
         93:e3:3d:61:83:e6:31:93:f5:5f:1a:87:2f:36:52:bb:bf:9d:
         39:7d:35:9f:09:5f:41:a1:be:94:c4:28:1c:dc:0f:68:82:cf:
         bf:b2:00:92:1e:3c:37:07:59:f9:20:8d:2f:d9:73:39:a4:42:
         57:f4:fc:20:f8:59:26:8a:4c:bd:ae:19:5a:78:31:ec:3c:77:
         82:22:e7:b3:ed:46:dc:e7:29:1f:4c:88:79:3f:d4:79:01:56:
         dd:4a:7d:22:aa:4f:14:48:ac:1f:42:ce:00:91:25:bd:40:8e:
         e3:d2:a1:eb:ac:6c:b3:d6:fe:52:3a:cf:c1:3a:7b:7a:94:ee:
         e2:89:11:fb:fb:7e:a2:ac:69:80:7d:10:ef:77:a0:15:cb:71:
         19:b2:c5:43:e2:a4:87:09:62:8f:41:64:7b:d1:df:4d:08:70:
         4a:de:f2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:59 2025 by rpki-client