Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/445f94ce-d543-34fc-9ce7-4f3600c6d894.roa
File:                     445f94ce-d543-34fc-9ce7-4f3600c6d894.roa (raw, json)
Hash identifier:          VRhplxbCGuVp32errqs5VbxuAzIRgxkoN1MHTIoerl0=
Subject key identifier:   F7:24:04:FC:E5:BA:5C:EB:BC:4C:FE:CD:31:33:8C:C3:13:8B:B1:EE
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A1F901D6299DA87337915F080
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/445f94ce-d543-34fc-9ce7-4f3600c6d894.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     852
IP address blocks:        161.184.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:1d:62:99:da:87:33:79:15:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=3a739d5d-72df-494b-9920-1e4ba032094e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:de:8f:a1:5e:10:06:f8:0c:3f:70:a7:53:
                    88:b2:41:20:a7:9a:07:e0:b6:72:53:90:24:71:76:
                    fa:75:8e:3d:52:e6:57:58:7c:d4:7c:5d:69:34:72:
                    e6:90:a2:65:c6:0c:67:2c:5b:8c:3a:25:72:38:d5:
                    59:ce:9d:01:48:3e:d9:a6:32:02:0b:1b:ee:8c:8a:
                    0a:97:d1:4e:74:2d:85:94:a3:2e:5c:30:0c:57:ad:
                    32:4e:bc:96:a7:59:26:d0:49:ac:5a:54:03:7c:25:
                    97:0d:77:45:e3:30:8d:67:99:02:0b:78:01:9f:33:
                    2a:ed:57:cb:1a:11:a1:44:95:af:63:de:74:88:43:
                    1d:f7:f9:a4:70:08:7e:c5:8d:21:e5:80:5e:02:8f:
                    9c:07:c8:dd:38:a4:12:e2:6e:23:13:0d:51:cc:3c:
                    5b:c6:bd:c8:c8:61:ef:74:c7:32:80:02:20:d9:49:
                    d7:16:27:f6:48:87:c9:94:32:1b:f4:d9:1c:3a:a4:
                    2a:a0:c4:85:49:eb:cc:71:46:72:8d:90:3c:c3:86:
                    d1:81:a3:58:39:00:ea:3c:4f:97:19:f0:bd:59:04:
                    f8:47:e4:bf:75:6f:f4:f2:f6:d4:5c:3f:1c:ab:73:
                    c7:56:69:62:ff:77:4f:41:0c:9f:c7:18:c0:59:6c:
                    41:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:24:04:FC:E5:BA:5C:EB:BC:4C:FE:CD:31:33:8C:C3:13:8B:B1:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/445f94ce-d543-34fc-9ce7-4f3600c6d894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.184.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:a1:51:3c:7d:b7:6a:e5:d1:02:b2:0d:4a:e7:5a:d6:00:
         50:ec:86:90:f1:a9:cd:a1:34:af:bd:47:ac:9d:eb:d1:b2:35:
         56:22:fd:45:6c:5f:4a:11:9e:60:c5:2b:2f:ac:08:46:25:ae:
         b2:8d:5f:aa:7f:df:8f:ce:0a:3e:b1:cd:40:e1:4f:bf:7f:8e:
         15:75:37:c4:b6:4a:50:04:eb:75:c1:44:ec:a9:64:c2:07:f0:
         a3:d9:93:bd:93:b9:bf:f0:64:a9:f8:57:ea:06:7a:39:ef:6d:
         3c:11:e4:bf:a4:a7:19:6a:e0:53:49:a8:5e:ed:ab:37:3a:ad:
         f2:3b:74:b3:87:60:95:68:50:7f:18:c7:65:30:f0:1f:8d:83:
         54:95:77:63:7b:6d:3d:28:2d:b3:c9:4f:c8:99:db:af:b4:1b:
         29:7a:c4:ca:8e:7d:88:33:7c:12:f7:ad:ab:51:ec:d1:fc:77:
         d9:b3:65:a6:ee:48:8c:6e:44:61:f1:2c:4e:7c:93:8f:58:80:
         df:94:84:d2:38:73:16:ab:84:d5:98:2c:df:bf:22:0c:f7:00:
         9a:ab:2a:0a:4e:53:5a:d6:e2:4f:0f:fb:8b:75:40:53:48:02:
         87:fd:d4:b9:0d:81:59:db:b7:63:e6:c9:b1:b4:08:13:4e:98:
         b5:72:ae:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:41:53 2025 by rpki-client