Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fafb759-5d6b-3fc1-a75b-e4a6792528e6.roa
File:                     0fafb759-5d6b-3fc1-a75b-e4a6792528e6.roa (raw, json)
Hash identifier:          LAkIaFoXhT3OOqdUMU2elB7bzZNeOYKXPXkT+kuTAbE=
Subject key identifier:   DF:81:25:56:54:54:AC:55:3F:26:62:FC:E3:C9:4A:FD:34:45:34:EE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FDB338EBA5E51DB19C040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fafb759-5d6b-3fc1-a75b-e4a6792528e6.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     54288
IP address blocks:        66.160.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:db:33:8e:ba:5e:51:db:19:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=ac3542d5-f695-4014-b68d-d3993c87aaf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:43:32:5c:de:83:e6:e8:bc:15:77:45:e7:
                    ab:f4:18:50:82:f9:c5:05:42:d4:6d:28:53:ef:52:
                    28:42:78:62:5f:a3:ad:ce:b6:64:e1:12:21:8a:f3:
                    da:2b:03:6a:fd:2a:9e:31:28:b3:60:be:a9:22:62:
                    a6:f6:ea:1f:2c:1b:27:86:22:e3:31:54:06:87:57:
                    3c:19:d2:67:ca:6f:58:de:72:4e:e1:51:11:5d:f4:
                    44:b4:88:02:40:ab:08:c3:7a:30:57:04:4c:73:48:
                    1e:dd:54:21:c3:21:8c:b0:02:0e:2d:19:1e:4d:92:
                    35:56:e9:44:43:ec:94:ff:f7:db:29:9d:26:6b:c0:
                    45:b2:b1:83:34:50:cc:b1:91:47:6b:1f:e6:98:e3:
                    38:49:c1:25:41:4e:e2:04:15:bd:a9:64:ad:55:02:
                    97:73:22:0f:f1:6b:16:e9:40:3f:94:a2:ee:c1:53:
                    d5:68:2e:dc:93:c8:52:8f:59:47:b6:0a:91:c6:d9:
                    e9:55:94:81:8b:c7:63:fc:6d:b7:ba:e6:67:6c:96:
                    18:5d:c5:57:84:60:ed:b3:cb:50:eb:fa:8e:b3:f7:
                    73:8a:85:d2:a8:16:cf:a6:c3:08:b5:95:3e:0f:43:
                    6c:0d:e2:d9:0b:e0:75:13:e7:85:48:11:d4:86:dc:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:81:25:56:54:54:AC:55:3F:26:62:FC:E3:C9:4A:FD:34:45:34:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fafb759-5d6b-3fc1-a75b-e4a6792528e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f9:be:80:a6:70:ee:46:ef:bb:cb:1c:1d:0e:3d:0c:84:d2:
         c9:51:35:b9:fa:c2:75:7b:b5:83:e2:03:e7:2d:25:ab:e6:ac:
         4b:53:87:6a:70:ed:a5:61:64:6e:83:b8:57:4c:27:e1:00:44:
         78:91:f4:4c:68:e8:f4:bc:88:1d:0c:55:b4:16:cb:c5:9a:27:
         a6:81:c5:14:92:6b:ab:f0:2b:09:25:8e:34:a4:21:cb:73:ec:
         91:7d:a9:cc:4a:36:d6:e7:67:5f:7b:44:a2:9c:62:8a:e2:d9:
         ca:c7:a1:31:00:16:bc:d4:f2:7d:06:b7:98:3c:83:ee:66:b0:
         01:90:54:5e:c2:57:65:f9:a7:99:78:a8:7a:cd:76:2b:5c:26:
         3e:61:79:a5:5d:32:20:f9:f6:58:d6:91:6f:01:bb:13:b5:26:
         ee:c1:de:64:5d:32:af:e9:cb:f7:e1:82:6a:da:40:d6:11:61:
         03:52:42:d0:85:fe:69:8c:ea:ab:f0:06:15:43:45:9a:e7:12:
         61:1f:f6:09:45:52:74:c9:6b:9a:4d:87:b7:ac:00:46:7b:ac:
         cc:77:88:87:78:e8:fc:db:9e:66:01:0e:3c:80:b6:33:51:db:
         dc:5d:e9:3a:85:49:5c:9f:23:e7:05:c5:4f:80:e8:fe:7b:16:
         fe:8f:a8:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX9szjrpeUdsZwEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YWMzNTQyZDUtZjY5NS00MDE0LWI2OGQtZDM5OTNjODdhYWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhtDMlzeg+bovBV3Reer9BhQgvnFBULUbShT
71IoQnhiX6OtzrZk4RIhivPaKwNq/SqeMSizYL6pImKm9uofLBsnhiLjMVQGh1c8
GdJnym9Y3nJO4VERXfREtIgCQKsIw3owVwRMc0ge3VQhwyGMsAIOLRkeTZI1VulE
Q+yU//fbKZ0ma8BFsrGDNFDMsZFHax/mmOM4ScElQU7iBBW9qWStVQKXcyIP8WsW
6UA/lKLuwVPVaC7ck8hSj1lHtgqRxtnpVZSBi8dj/G23uuZnbJYYXcVXhGDts8tQ
6/qOs/dzioXSqBbPpsMItZU+D0NsDeLZC+B1E+eFSBHUhtzPTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+BJVZUVKxVPyZi/OPJSv00RTTuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGZhZmI3NTktNWQ2Yi0z
ZmMxLWE3NWItZTRhNjc5MjUyOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqChMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJj5voCmcO5G77vLHB0OPQyE0slRNbn6wnV7tYPiA+ctJavmrEtTh2pw
7aVhZG6DuFdMJ+EARHiR9Exo6PS8iB0MVbQWy8WaJ6aBxRSSa6vwKwkljjSkIctz
7JF9qcxKNtbnZ197RKKcYori2crHoTEAFrzU8n0Gt5g8g+5msAGQVF7CV2X5p5l4
qHrNditcJj5heaVdMiD59ljWkW8BuxO1Ju7B3mRdMq/py/fhgmraQNYRYQNSQtCF
/mmM6qvwBhVDRZrnEmEf9glFUnTJa5pNh7esAEZ7rMx3iId46PzbnmYBDjyAtjNR
29xd6TqFSVyfI+cFxU+A6P57Fv6PqAE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:11 2025 by rpki-client