Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ec4d1946-0497-3ea3-9f57-d095868add41.roa
File:                     ec4d1946-0497-3ea3-9f57-d095868add41.roa (raw, json)
Hash identifier:          8yIrkBli0W7Anv2F3jBeS7KBKpnIILwj9nRAExTavxU=
Subject key identifier:   BF:A1:99:05:91:A8:A9:E8:E3:14:1C:83:0A:18:28:E0:90:73:0F:04
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584AC016448ED0B3639F3FB991F0
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ec4d1946-0497-3ea3-9f57-d095868add41.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     15502
IP address blocks:        161.195.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:44:8e:d0:b3:63:9f:3f:b9:91:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=6f4b23df-d4c1-484e-83c6-5ec77f7ce0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bd:aa:d9:f0:64:58:da:be:1e:7f:85:6a:d6:
                    44:58:ab:f1:53:28:af:ca:71:32:3f:72:42:93:8a:
                    0e:cd:c4:47:3d:fe:80:e1:00:8b:37:84:61:33:19:
                    63:88:50:b2:63:8b:0c:00:e9:b1:28:c2:79:71:49:
                    6b:07:b9:24:8a:cd:1f:91:63:0d:dd:8f:c2:6c:55:
                    0c:b7:58:82:54:48:40:93:92:3c:67:06:5a:bc:aa:
                    70:6e:ca:e1:cb:e8:de:b2:ed:3d:ab:e2:df:f5:a4:
                    62:71:a6:99:ac:5f:bc:b5:8d:f5:85:9e:e8:02:85:
                    c3:5e:89:77:07:99:c9:6b:23:44:30:bc:79:9e:ca:
                    1d:e4:69:5b:55:bc:1a:98:55:9c:c4:c1:20:10:96:
                    30:41:c8:01:fe:76:1b:ad:7f:77:7c:82:6a:57:db:
                    53:9c:25:54:f6:51:34:bc:0e:c4:69:48:df:e5:ba:
                    d5:6a:45:09:70:21:d9:94:36:97:4a:42:cd:67:f1:
                    a1:d1:86:33:10:71:05:43:e4:a1:f4:a7:98:f7:29:
                    18:a9:5e:96:ab:37:2b:b0:c8:85:0d:76:7f:93:82:
                    23:74:93:f6:84:74:44:c2:61:7e:6d:9e:31:a4:b7:
                    b5:9c:29:77:ae:8a:7e:a7:66:7a:a6:a4:d7:a3:95:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A1:99:05:91:A8:A9:E8:E3:14:1C:83:0A:18:28:E0:90:73:0F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/ec4d1946-0497-3ea3-9f57-d095868add41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:ec:f8:53:6d:48:6f:6f:0f:a8:9c:f3:f3:58:ca:2f:de:
         93:ee:e4:c9:7c:0a:ea:a8:94:d1:46:1c:68:aa:a5:46:42:19:
         7f:87:ff:f5:2a:83:8b:55:e1:6c:fd:f8:48:78:24:af:d5:12:
         f4:f7:13:3c:2f:9e:3e:42:71:3f:97:bd:9f:65:a9:d7:a7:da:
         66:57:22:4b:d9:ce:a0:b7:6c:40:48:f7:de:02:6e:cd:d3:03:
         b9:42:3e:70:a3:ac:d0:6d:c0:44:a8:c9:c7:3b:74:d4:07:7f:
         ac:5b:78:18:d7:cd:d2:b7:b3:59:39:eb:1a:1b:0e:d8:f1:bb:
         06:85:d1:dd:ea:1a:38:a2:30:6e:39:33:8a:b7:4a:7f:c8:32:
         69:76:68:4c:89:30:fc:db:0a:c4:2d:62:37:f2:fa:e2:0b:b4:
         c2:6f:d2:23:5e:21:57:a8:ae:c0:2b:3b:4a:8d:2c:a2:34:ef:
         e2:5d:f7:94:3b:72:a2:0b:99:e2:de:54:38:40:7a:40:1c:90:
         fd:d9:dc:ea:54:20:5c:71:66:c7:6b:71:d2:08:9c:f8:b2:0e:
         33:d9:5f:f4:7c:d0:7f:38:2c:7e:43:f4:fb:3e:0c:07:b1:7f:
         ae:bc:c2:0b:de:1f:a0:5a:8b:4b:99:c9:0b:24:79:1e:fe:85:
         e8:65:9a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:45:25 2025 by rpki-client