Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa
File:                     61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa (raw, json)
Hash identifier:          f/nrN+28Cgn9hXqiNPxVm5Pl/lFpZSdv7WzUCl8a+TU=
Subject key identifier:   1C:4F:7F:12:82:D9:E4:6D:6F:E2:80:53:08:97:AE:4F:37:69:7E:23
Certificate issuer:       /CN=e91007f4-8b69-443f-87b7-248480814a0d
Certificate serial:       010D0C9F43285849F17FB7ACAA18367D9CAA1C00
Authority key identifier: A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     11039
IP address blocks:        128.164.0.0/16 maxlen: 16
                          161.253.0.0/16 maxlen: 16
                          161.253.0.0/17 maxlen: 17
                          161.253.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b7:ac:aa:18:36:7d:9c:aa:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91007f4-8b69-443f-87b7-248480814a0d
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=35072c02-a518-4f00-bcaa-fafc98309b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8f:3b:65:ea:b2:6c:d1:1c:8d:67:8e:f1:a7:
                    91:cd:4a:69:df:6f:dc:55:39:6a:57:ad:ae:d6:fa:
                    f2:d9:53:84:57:e6:b3:c7:77:1a:7a:7b:75:4b:a5:
                    a4:25:81:16:e8:7b:bc:e4:54:64:c9:dd:91:2b:6d:
                    d7:91:e4:94:42:9d:98:5b:90:6d:85:9d:6d:dd:3e:
                    88:f8:c9:67:44:fd:d0:c4:34:7a:3f:52:af:50:de:
                    0e:09:69:32:14:b2:e5:76:2a:d7:b1:5b:58:f2:a9:
                    5b:dd:68:68:81:54:95:45:23:c1:94:1a:50:8a:a0:
                    4a:a6:63:48:7d:0d:ad:e9:d6:69:b2:1f:41:4a:39:
                    fa:b1:81:70:88:db:ee:8c:78:e0:19:f6:4a:a0:7a:
                    7c:7c:f9:38:c2:87:42:8c:d1:c3:6b:14:a7:d1:5b:
                    86:07:54:2a:7e:5a:17:aa:0f:45:fe:34:3f:d6:99:
                    ec:ad:6e:2c:83:46:fe:e7:67:17:fd:94:08:88:c0:
                    7a:15:bb:85:65:3b:d8:43:0a:3b:11:03:9c:be:85:
                    07:c9:75:eb:a5:60:f5:0f:43:89:db:cb:1e:45:aa:
                    8e:2d:79:80:7a:d0:b2:73:e0:b8:2a:bf:a3:81:05:
                    7e:16:fd:0d:47:b8:e4:73:6c:1a:de:aa:b7:d5:d5:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4F:7F:12:82:D9:E4:6D:6F:E2:80:53:08:97:AE:4F:37:69:7E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.crl

            X509v3 Authority Key Identifier:
                keyid:A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.164.0.0/16
                  161.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1d:bb:9e:14:ac:e3:f6:33:ac:cd:be:30:9f:2b:3d:7f:cd:
         fd:0b:f1:67:e9:f9:a1:f4:6a:76:a2:9d:44:3c:fc:0a:a6:33:
         f6:85:d9:46:8f:42:6d:a5:40:af:77:4e:40:e9:95:ba:29:5c:
         7e:9b:c3:fb:58:14:5c:02:52:d1:49:c4:04:89:d9:a1:63:72:
         71:bf:63:12:86:07:95:bc:f9:7e:19:b7:90:34:1f:b7:9b:fc:
         4a:56:1b:c7:08:78:cc:2f:7b:fe:59:38:19:a0:ab:47:e9:ec:
         1e:64:d4:10:e2:27:7a:b0:e7:95:06:24:ab:4f:2b:c5:46:23:
         fc:f9:32:d2:4d:3e:03:1f:f0:df:14:e9:6c:28:41:61:87:5e:
         b6:93:3d:7c:b9:70:1c:41:3a:e5:e1:27:28:46:59:eb:3c:e2:
         45:41:57:5f:81:4e:db:78:c8:07:f3:2c:45:d0:19:9a:db:cd:
         95:ba:a9:0d:ea:1e:0c:07:24:4d:d7:de:7c:4d:c0:16:50:ac:
         0e:31:4b:4c:6c:f6:fb:d9:3d:62:14:89:ec:b7:9f:2a:97:79:
         82:a6:40:4a:76:e2:05:d6:f3:4c:93:94:88:cc:3a:9c:3f:f7:
         e2:41:fe:c9:d9:0f:5a:a1:ec:8c:c3:71:44:3a:24:3d:2c:52:
         1e:0c:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:56:43 2025 by rpki-client