Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/8bbdb2a9-ebdf-3bdc-be53-5c57c6d9423b.roa
File:                     8bbdb2a9-ebdf-3bdc-be53-5c57c6d9423b.roa (raw, json)
Hash identifier:          OCgz84OFEfeaQ9cbdhF41m2XtXW4wclR5FwGZZ249Mg=
Subject key identifier:   67:09:8F:54:F8:D6:14:98:C0:46:87:A5:19:84:9B:C8:50:87:72:2A
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F43285849E22512C8EDF0EA9666D11200
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/8bbdb2a9-ebdf-3bdc-be53-5c57c6d9423b.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        161.38.192.0/22 maxlen: 22
                          161.38.196.0/22 maxlen: 22
                          161.38.200.0/22 maxlen: 22
                          161.38.204.0/23 maxlen: 23
                          161.38.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:12:c8:ed:f0:ea:96:66:d1:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=9912f7fa-da5f-489a-b5ee-58ffb096e73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:21:94:08:2e:a4:6a:df:a6:a8:02:35:1d:ea:
                    2a:46:8a:91:19:6a:fd:aa:fa:83:e6:6a:37:40:54:
                    e8:52:39:33:1b:64:56:cf:a4:7c:45:e3:83:d9:63:
                    44:5a:39:0d:37:58:f0:a7:84:f0:0f:51:0f:ca:99:
                    2c:cc:83:ed:ed:39:ad:e1:28:6e:96:a5:d6:8d:59:
                    f7:44:8a:31:1a:c6:25:89:a0:51:5d:4b:e6:e4:1d:
                    9d:c9:04:ff:ba:44:e0:c1:51:da:aa:c2:aa:b1:7a:
                    38:23:14:71:bb:b8:be:44:79:54:a2:49:3d:e7:87:
                    eb:c2:73:fb:22:ff:bd:bc:8a:8e:81:3d:48:e1:e6:
                    48:f8:ec:5e:0b:02:25:30:9a:92:12:70:d8:85:ee:
                    a5:ff:4b:ac:73:1b:96:70:8c:6d:a0:25:23:50:dc:
                    aa:3c:35:b7:b0:ea:43:14:86:c4:8e:59:74:ca:8d:
                    02:d0:3d:b8:bb:3e:89:7c:09:2d:44:3d:e0:96:8e:
                    f6:00:46:23:e8:a4:d0:c0:13:ac:5e:76:ce:64:ee:
                    b2:9d:ff:4e:98:9e:a4:e6:da:c2:cf:4b:bc:ea:bd:
                    5a:31:64:46:64:4f:db:5b:b6:95:a3:8e:4e:cb:18:
                    e2:ac:fb:1c:cc:e3:0f:81:07:bb:61:76:56:39:2c:
                    e1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:8F:54:F8:D6:14:98:C0:46:87:A5:19:84:9B:C8:50:87:72:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/8bbdb2a9-ebdf-3bdc-be53-5c57c6d9423b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:45:c5:8c:e5:78:10:ee:34:a1:63:ae:2b:b9:15:02:fd:16:
         63:dd:b7:53:0a:5a:19:4a:3f:b3:8e:90:7a:4c:89:25:88:68:
         fd:e1:98:ed:f4:a4:a2:6c:90:8d:47:65:73:d7:4a:ba:35:8e:
         e6:1b:10:c9:f6:bc:f4:5d:58:b0:e4:52:03:32:cd:39:1b:76:
         f7:01:01:7b:12:4e:e1:5e:c2:d8:73:31:41:2e:57:e3:49:7a:
         87:f5:7e:f6:20:dd:61:5f:be:dc:5f:52:38:eb:2b:dd:21:9c:
         aa:9c:ad:87:9c:89:34:80:3a:9b:06:f9:9d:56:b0:16:a1:80:
         84:d6:c7:06:c6:26:46:bb:cf:ae:25:9f:53:a4:bb:f4:5b:46:
         4d:3a:1b:ef:fd:0f:5f:bc:ea:9e:9e:f1:88:87:f9:bc:bb:03:
         31:b0:07:2a:02:33:8d:c4:76:47:60:fd:59:97:4d:ca:13:9e:
         a1:5e:ab:b9:eb:f1:e8:fb:cb:18:40:ea:e2:3b:37:c5:4b:17:
         84:04:47:01:f1:cc:c8:eb:4c:f0:62:b2:24:c7:fd:ff:e7:80:
         84:b1:b8:fd:5e:fe:a9:9f:48:7e:c0:1b:60:7e:09:eb:cc:09:
         04:bc:1f:ac:c3:72:b4:23:88:3a:32:4d:15:33:05:f1:5c:f0:
         9b:95:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:37:31 2025 by rpki-client