Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/1d45399d-9ebd-3de3-9494-ccd7005e822f.roa
File:                     1d45399d-9ebd-3de3-9494-ccd7005e822f.roa (raw, json)
Hash identifier:          OTOUdpgOUQOEsNyWWuHU7eYz20uvCjlorTARO+PL1tc=
Subject key identifier:   14:55:B2:F5:AB:D9:1A:BC:67:A6:A0:79:BB:30:A6:89:9D:90:7F:09
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F4328584A8A409428B9D83E6D78CC7AE0
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/1d45399d-9ebd-3de3-9494-ccd7005e822f.roa
Signing time:             Wed 16 Jul 2025 18:12:26 +0000
ROA not before:           Wed 16 Jul 2025 18:12:26 +0000
ROA not after:            Tue 14 Oct 2025 18:12:26 +0000
asID:                     200069
IP address blocks:        161.38.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8a:40:94:28:b9:d8:3e:6d:78:cc:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: Jul 16 18:12:26 2025 GMT
            Not After : Oct 14 18:12:26 2025 GMT
        Subject: CN=538892d0-f599-4e86-a175-d7884765fda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b8:b2:73:86:74:0d:da:d4:c3:f1:2a:8e:db:
                    3e:e5:62:73:7e:5b:85:af:24:9b:0f:b5:aa:ab:33:
                    8f:1f:55:f2:0c:8d:fc:fb:5b:6b:bf:c5:73:52:ec:
                    55:df:72:21:da:42:37:23:77:a4:0d:07:d8:51:49:
                    78:88:2a:70:76:6c:d8:16:3d:91:3a:5e:69:4f:95:
                    19:10:59:27:7a:20:9f:8f:1a:a8:fb:91:d2:23:0c:
                    23:fb:01:15:b4:2f:0b:a2:bd:b4:0f:89:ce:00:6d:
                    e7:c3:92:1f:c5:02:09:47:fc:a5:53:d7:2b:62:13:
                    79:a0:f3:07:ad:cb:fe:31:8e:f0:27:c5:bc:dc:39:
                    5d:a9:24:07:0d:5d:e6:b5:c1:8c:c7:4c:91:1d:f3:
                    0e:4c:dc:45:f7:fc:61:d9:30:71:1f:4a:29:57:03:
                    d2:5c:46:08:c2:25:28:64:e6:f4:4a:ec:2a:90:ff:
                    80:9c:a5:63:f3:99:87:bf:86:e1:94:d4:df:7c:33:
                    41:5e:61:0a:cc:86:c0:46:23:19:ab:ef:5f:23:b8:
                    6c:b1:15:94:bd:65:c9:a9:7a:77:f0:5e:ce:22:35:
                    f6:66:41:73:6b:e3:c5:ac:20:c9:ec:57:59:55:a2:
                    49:b4:c6:2f:35:2e:15:a2:c6:11:bb:e1:14:ce:6f:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:55:B2:F5:AB:D9:1A:BC:67:A6:A0:79:BB:30:A6:89:9D:90:7F:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/1d45399d-9ebd-3de3-9494-ccd7005e822f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:24:ef:64:e8:ab:79:eb:41:5e:d2:2b:fa:01:e5:13:a2:ca:
         df:92:97:3a:44:6d:ac:eb:5f:21:41:ed:2a:4a:40:57:de:ca:
         5a:d7:49:72:c7:ea:75:21:ad:b6:3d:0f:2f:c7:b6:03:e0:bd:
         a8:46:2b:93:28:af:e5:95:5d:35:c6:3b:c1:c0:c2:78:88:21:
         71:76:8a:87:72:4c:fd:e9:d1:c1:79:5c:12:d6:dd:e5:30:44:
         9a:dd:1f:7e:83:1c:91:ea:b5:cf:eb:37:7c:51:d2:aa:12:89:
         92:b7:5c:ce:96:53:d7:3b:ca:4b:45:74:6f:7d:5c:82:76:fe:
         fb:33:6b:3a:96:60:1e:ff:cd:25:0e:4e:7e:2c:a5:c9:7a:10:
         41:2d:ca:d1:55:f3:7b:6c:b1:51:95:3e:ab:71:9b:f4:63:4a:
         20:6b:fa:9a:03:48:72:f3:15:02:05:c8:0e:9c:fd:4c:a0:de:
         b4:e2:de:12:2f:95:21:88:fb:cb:c6:7d:2f:b8:ac:75:0d:8e:
         6a:6e:ed:43:c6:ee:56:9f:9f:31:1e:5f:45:ab:94:46:9e:9a:
         af:dd:69:13:76:f2:97:57:24:88:28:a8:0f:eb:da:aa:7b:dd:
         c3:a2:05:22:f5:f0:5d:0c:69:9f:58:de:b2:3b:22:60:aa:03:
         28:7b:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:41:16 2025 by rpki-client