Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
File:                     e1e365e0-1156-39fe-8e92-6f88f7279acd.roa (raw, json)
Hash identifier:          DWnpBflgk52O3Wq+hG/qf2LoIvbmv8/5Pc1kgedfEsg=
Subject key identifier:   F9:59:1B:9A:89:65:E4:C2:41:2B:81:12:D4:01:05:3A:45:E8:EC:DE
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F43285849E4EFB7D59D89140018A5BE40
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     394625
IP address blocks:        161.129.136.0/24 maxlen: 24
                          161.129.137.0/24 maxlen: 24
                          161.129.138.0/24 maxlen: 24
                          161.129.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:b7:d5:9d:89:14:00:18:a5:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=5dc0222e-3c56-48fd-b5bc-0b8b16a39f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:29:88:18:22:62:e8:0c:b6:00:ef:1c:1a:
                    2c:9b:76:51:aa:69:71:1b:6a:3c:49:52:9d:0e:15:
                    81:c5:0a:76:a3:59:4b:76:55:d6:19:46:07:cf:7a:
                    e3:3d:ef:06:a8:76:e0:5a:af:4b:b4:bf:8d:63:28:
                    5c:6d:2f:81:77:32:de:1d:3b:95:5e:27:e0:a6:89:
                    c1:75:ff:96:63:4a:8b:0d:e5:4d:74:80:1e:a9:77:
                    22:46:d9:65:b7:ae:b0:bd:10:17:68:9f:ec:41:4b:
                    3c:ac:a9:e9:3b:59:be:ec:16:f0:7e:a4:c7:0a:29:
                    8c:2e:0d:e0:35:69:8c:ef:3d:2f:04:a6:79:90:26:
                    31:61:13:c7:a4:9f:b3:ad:74:73:b9:0b:8d:79:e1:
                    61:23:4b:07:f6:c3:39:a6:f3:b5:b5:72:b7:27:36:
                    2b:5f:20:ff:67:a4:8d:6f:62:30:15:b2:9e:db:fa:
                    f0:44:a1:2d:b8:57:43:91:99:83:19:60:72:d2:e7:
                    59:35:be:63:21:0f:7d:72:c1:84:fe:3d:35:e2:e4:
                    9e:fa:72:fe:0e:db:b0:ac:5a:31:98:a8:93:e7:66:
                    a6:a7:54:b4:08:da:72:ef:34:61:21:83:74:0c:dc:
                    75:71:3f:9f:dd:23:5c:20:43:95:a3:a8:a8:0b:f1:
                    0c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:1B:9A:89:65:E4:C2:41:2B:81:12:D4:01:05:3A:45:E8:EC:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:54:28:4d:99:a0:f8:f4:28:9b:4a:c7:76:3a:d6:aa:a6:48:
         2e:d5:7f:91:19:71:db:7b:63:db:da:cb:7b:7b:00:af:4b:e6:
         f7:6d:1b:63:1a:a1:d1:80:62:e1:f8:98:c5:5a:ac:79:2c:a2:
         33:1a:a7:46:ea:ef:19:ee:3b:e5:1a:b3:65:24:be:9f:63:2c:
         b6:ad:70:7a:a3:dd:89:89:0a:f4:c6:9c:09:82:96:4b:d6:95:
         fd:51:64:2a:30:77:c8:57:bc:7a:4b:eb:72:4b:6b:50:19:28:
         34:5d:de:0b:a6:6e:2d:b8:28:a6:75:7c:bb:08:dd:a8:04:14:
         d3:13:25:90:40:b9:c4:70:20:2f:63:2c:bd:49:bd:5a:b4:1a:
         c9:e0:82:e8:9c:2e:8c:93:15:f2:ee:2a:f3:e8:0e:de:fd:67:
         fa:64:34:3b:fd:21:ff:c2:5f:2d:d6:d7:04:89:ec:8d:9b:35:
         3d:31:4e:15:96:80:cc:da:18:08:22:1b:57:74:e0:b2:83:63:
         81:00:d6:de:68:6e:fd:09:e3:74:dc:70:62:c2:63:58:bd:dc:
         3c:1f:40:3f:1d:67:6c:7f:7a:37:14:f1:dc:a3:6b:f5:aa:34:
         13:cc:13:3a:5a:4a:d7:ca:20:64:75:8f:44:a1:36:78:39:3e:
         04:f4:c6:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk77fVnYkUABilvkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4
NmQ3MB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk
NWRjMDIyMmUtM2M1Ni00OGZkLWI1YmMtMGI4YjE2YTM5ZjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdUpiBgiYugMtgDvHBosm3ZRqmlxG2o8SVKd
DhWBxQp2o1lLdlXWGUYHz3rjPe8GqHbgWq9LtL+NYyhcbS+BdzLeHTuVXifgponB
df+WY0qLDeVNdIAeqXciRtllt66wvRAXaJ/sQUs8rKnpO1m+7BbwfqTHCimMLg3g
NWmM7z0vBKZ5kCYxYRPHpJ+zrXRzuQuNeeFhI0sH9sM5pvO1tXK3JzYrXyD/Z6SN
b2IwFbKe2/rwRKEtuFdDkZmDGWBy0udZNb5jIQ99csGE/j014uSe+nL+DtuwrFox
mKiT52amp1S0CNpy7zRhIYN0DNx1cT+f3SNcIEOVo6ioC/EMjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPlZG5qJZeTCQSuBEtQBBTpF6OzeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj
NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZTFlMzY1ZTAtMTE1Ni0z
OWZlLThlOTItNmY4OGY3Mjc5YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx
MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl
ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy
ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoYGIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBUKE2ZoPj0KJtKx3Y61qqmSC7Vf5EZcdt7Y9vay3t7AK9L5vdtG2Ma
odGAYuH4mMVarHksojMap0bq7xnuO+Uas2Ukvp9jLLatcHqj3YmJCvTGnAmClkvW
lf1RZCowd8hXvHpL63JLa1AZKDRd3gumbi24KKZ1fLsI3agEFNMTJZBAucRwIC9j
LL1JvVq0GsngguicLoyTFfLuKvPoDt79Z/pkNDv9If/CXy3W1wSJ7I2bNT0xThWW
gMzaGAgiG1d04LKDY4EA1t5obv0J43TccGLCY1i93DwfQD8dZ2x/ejcU8dyja/Wq
NBPMEzpaStfKIGR1j0ShNng5PgT0xrY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:53:43 2025 by rpki-client