Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa
File:                     7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa (raw, json)
Hash identifier:          EfEGygTmt6DjjYnwZGLp3DbfsTX4t2HSixdSKHxjWhs=
Subject key identifier:   CA:78:82:9B:32:A1:2B:DF:4B:25:57:F8:9F:43:77:91:8B:D2:BC:1B
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584A9E96672EA8D837CF84E6E530
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     32329
IP address blocks:        161.115.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:67:2e:a8:d8:37:cf:84:e6:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=d5cfdc5b-5cfd-4bb0-a960-4f0e56a02731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:3a:81:12:98:e3:53:30:72:90:59:cd:6e:
                    88:39:f6:c5:dd:d4:62:8b:a7:bd:f1:c0:8c:d3:a0:
                    b8:8f:4d:0f:19:97:da:27:01:ff:83:d0:f8:16:19:
                    d3:1d:07:34:60:f7:c2:f0:d6:47:8f:a5:fa:1b:f8:
                    02:af:8a:c9:7c:a2:ca:3c:d2:b7:d2:dc:d5:5b:9a:
                    b6:0c:e8:bd:aa:03:95:31:58:00:83:18:2e:4b:42:
                    2a:f3:98:05:0d:2c:00:c4:37:c1:1a:10:84:db:4b:
                    b3:2b:47:f9:05:14:b3:e3:5c:8c:5b:90:59:ed:51:
                    c0:c1:ea:9b:71:1f:65:6a:28:87:d9:c2:6f:60:1e:
                    8f:7d:04:5c:01:7b:ef:69:7d:0f:bd:29:91:55:2a:
                    54:ff:94:eb:e2:af:b5:da:7b:a2:3a:91:c5:f4:27:
                    f5:cf:f7:6d:0c:1b:13:88:6d:8e:0e:bc:cf:07:6a:
                    ed:5b:2d:66:8f:84:e7:99:ad:d0:d9:93:6b:ed:6b:
                    47:62:cb:4b:5c:cd:90:9b:f6:79:8e:02:34:3a:16:
                    4b:c0:f0:eb:6a:77:36:c0:44:2d:12:f3:0c:7a:22:
                    be:d9:e9:4d:90:d2:52:04:29:54:66:34:46:57:ea:
                    ee:58:92:44:41:c8:5f:4a:00:8d:3c:b9:7e:4a:8b:
                    12:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:78:82:9B:32:A1:2B:DF:4B:25:57:F8:9F:43:77:91:8B:D2:BC:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:9f:59:b9:f7:8b:90:ad:30:c9:b8:99:68:8f:57:f7:6f:94:
         c0:b3:4f:20:a5:8f:3c:85:37:d7:17:c0:f9:ee:bc:cf:b8:93:
         ae:db:fa:79:33:77:83:5c:35:6d:78:dc:18:11:4d:52:92:17:
         da:82:a7:0a:f9:b4:23:a4:ab:08:d0:01:73:ea:ff:01:de:57:
         3e:bc:4e:6f:5c:76:dc:5c:cd:f3:bb:4f:9e:4d:40:c0:6a:b1:
         d0:de:4c:05:cf:4c:96:5c:e2:1c:31:c1:88:90:ee:4f:3a:a8:
         92:d0:1d:f8:e3:c9:1f:48:41:89:ea:57:31:7e:3f:83:50:71:
         c4:2c:ce:ee:fd:32:2e:e2:a8:97:24:ef:8f:b8:be:f8:40:4a:
         53:64:f4:ca:03:03:f1:05:92:79:a9:13:26:c1:c9:c6:5d:f4:
         e6:9b:fc:7e:77:c4:b2:56:09:2d:0e:df:c2:5a:12:f7:b8:18:
         fb:9a:c5:a8:c7:dd:45:95:30:39:5d:5a:7f:99:6d:02:5d:3b:
         6c:8b:11:5d:f7:6a:27:1f:3c:dd:96:a6:8c:44:2b:5c:c2:ef:
         2d:7c:41:19:18:0d:e4:a6:c1:b9:fe:ba:c8:1b:1d:77:d7:ea:
         1b:f5:6b:c8:39:81:07:d1:14:c4:9f:1b:5f:10:34:8e:84:83:
         b1:dc:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:41 2025 by rpki-client