Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa
File:                     7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa (raw, json)
Hash identifier:          81dV0ZjEPnbTzPQwNnqJw9djkdw5wcmxyZYyjxqM/w8=
Subject key identifier:   53:D1:42:E0:C4:55:9E:B0:43:BE:F5:E3:15:A3:54:18:DD:96:6B:EA
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F43285849BF3F5D3D530B14732EEFB5C0
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     32329
IP address blocks:        161.115.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:5d:3d:53:0b:14:73:2e:ef:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=d0bf3874-3bdc-4e76-a47c-e7f63675c2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:00:39:d3:bb:6a:55:af:5f:ec:34:b4:d1:
                    d1:89:77:8f:c7:8b:cc:d2:84:c8:ef:3c:82:7c:1e:
                    a4:21:8b:30:80:53:9d:d7:5e:83:f8:33:2a:e0:4f:
                    a2:fb:eb:73:75:92:34:f2:f7:5d:78:69:47:44:3f:
                    b6:64:20:4e:eb:6c:40:28:5a:ae:7d:3d:f4:ba:70:
                    f0:df:4e:3c:38:ef:4b:f5:07:5c:e3:b3:bb:95:f6:
                    fd:be:b9:76:d4:de:37:b2:b9:d9:2e:94:f5:a9:af:
                    61:eb:15:21:96:77:a6:8c:bc:52:bc:06:60:a6:61:
                    cb:c7:c8:ab:c0:19:a2:6d:83:4e:9b:41:2c:77:7d:
                    e1:ab:ce:97:21:75:0d:0c:2a:5c:fd:3c:d8:6a:1c:
                    d4:ae:75:2d:7c:b8:d6:0e:d7:6d:70:6b:95:0e:e0:
                    4a:87:7b:66:3c:0b:f6:46:e4:b1:81:32:06:b6:99:
                    ab:4b:5c:ac:44:83:73:a4:c3:d3:7f:06:a9:af:7b:
                    80:b7:a1:db:cc:8e:bb:54:d4:cf:a3:ca:fc:bc:d1:
                    92:c5:fa:e7:79:49:4b:f3:fd:25:45:1c:40:d6:e2:
                    b8:c0:24:5a:66:db:bf:56:c4:37:ce:35:97:25:d9:
                    08:8d:3c:8d:50:65:df:68:24:e4:49:b4:90:b4:21:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D1:42:E0:C4:55:9E:B0:43:BE:F5:E3:15:A3:54:18:DD:96:6B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:57:bf:c1:c8:8a:91:ec:d7:03:1e:32:47:54:e5:71:c5:1f:
         6e:d6:1d:a9:d7:1c:72:c7:59:ae:86:25:54:50:45:f9:49:4e:
         bc:68:f3:67:0a:f9:03:aa:dc:d0:94:25:39:40:be:31:8f:26:
         e3:90:4c:14:14:f0:3b:e0:70:52:38:86:a7:05:a7:79:ae:20:
         47:75:04:4d:41:22:bb:c5:a1:20:8c:5c:f1:73:ee:76:32:77:
         1d:55:c6:11:15:3b:9e:e6:56:36:42:bd:41:0b:17:44:6a:5b:
         68:37:8c:1f:55:bd:33:79:a2:79:6a:47:b7:19:36:6e:f3:94:
         9b:25:99:92:61:06:5d:63:bd:8a:a5:96:42:de:3c:cd:c3:a8:
         77:0c:8c:fb:cd:ac:6a:d1:4b:54:53:61:0a:ae:db:3a:2d:4a:
         f2:f5:36:29:89:87:e1:44:32:72:48:c5:37:11:4e:59:3e:62:
         28:76:eb:a4:58:65:d4:39:1a:c0:bc:73:15:9f:e7:b6:c6:7d:
         44:ef:de:39:d4:04:92:64:72:14:39:d4:e9:ba:35:d0:8e:c6:
         19:b5:89:07:67:52:4b:65:43:c3:2e:3d:9a:29:14:b5:11:65:
         a4:fb:31:cf:3b:f9:65:d7:91:e0:6c:40:8f:b8:8f:1a:28:f1:
         b1:fb:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:16:01 2025 by rpki-client