Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/5d92693d-c1e5-346a-97ec-ed796291c0ba.roa
File:                     5d92693d-c1e5-346a-97ec-ed796291c0ba.roa (raw, json)
Hash identifier:          XO42qpcJw/kduUN8fdo+y+2ksqL3wFEFOXvGBfsnHa8=
Subject key identifier:   A8:74:65:3C:F9:F2:54:07:F5:C8:21:6A:74:55:AC:6E:C7:FE:4E:3B
Certificate issuer:       /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial:       010D0C9F4328584AE03120F9D3ACBBE8CA445100
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/5d92693d-c1e5-346a-97ec-ed796291c0ba.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     19318
IP address blocks:        161.129.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:20:f9:d3:ac:bb:e8:ca:44:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=4475ed64-bb1d-4f4f-97be-2dc4fb55f9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:e4:08:e1:e3:b0:fb:2f:ca:73:3a:56:27:
                    63:45:ae:df:db:66:4b:d5:f5:12:f3:79:76:c8:75:
                    56:26:28:a6:4a:f5:2c:4d:8a:1c:7b:d2:72:10:c3:
                    46:d5:10:65:db:a1:88:6b:69:d1:af:88:33:03:69:
                    46:99:86:df:a0:ab:f7:c6:bf:92:8c:e0:7e:66:4b:
                    16:e6:80:af:31:b1:d0:47:df:4d:f9:db:57:f3:97:
                    4c:88:d9:69:df:fb:da:a3:c2:dc:67:ee:54:e8:94:
                    5f:b7:08:53:f0:5e:5f:ce:84:ca:cd:f4:dc:83:9e:
                    93:75:c8:b2:6b:c9:86:32:fe:65:2c:69:ec:40:d8:
                    3c:74:6f:36:a9:84:bb:e4:fd:9d:bc:42:43:a7:aa:
                    8e:22:29:ef:3b:87:01:33:51:2f:a4:7a:93:26:ba:
                    5f:d1:75:25:97:de:3f:b2:ef:97:44:2d:e7:aa:94:
                    70:14:34:25:43:ff:37:e4:96:2a:7a:55:63:39:d2:
                    ce:72:78:ae:67:81:d8:a9:53:ed:82:54:0c:74:cf:
                    e5:ff:38:9e:2c:57:61:b0:6a:35:ff:9c:93:e3:e1:
                    68:a0:d0:87:45:60:84:b5:0b:41:37:04:d6:0b:9d:
                    eb:7c:38:db:0a:ed:8f:21:58:a8:ab:b5:e4:07:64:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:74:65:3C:F9:F2:54:07:F5:C8:21:6A:74:55:AC:6E:C7:FE:4E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/5d92693d-c1e5-346a-97ec-ed796291c0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl

            X509v3 Authority Key Identifier:
                keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:89:44:6a:00:a0:ba:d2:74:14:fe:8a:b2:0e:21:08:76:c3:
         33:51:06:ba:27:79:38:e3:16:be:f0:2e:f0:a4:6f:a1:1e:8f:
         e7:37:f3:47:76:6a:e3:9c:65:8e:56:19:12:af:a2:94:ab:5f:
         bd:9e:87:76:c7:af:af:1b:d7:7e:cc:f8:74:92:83:27:f6:2c:
         35:46:81:48:b0:04:5f:af:8f:94:39:fd:28:b3:98:6d:71:d3:
         9c:c0:f6:7f:2e:d9:8f:b1:17:c4:1c:69:38:5f:83:61:a7:51:
         42:d5:e2:d6:eb:a1:15:49:62:68:dc:6d:4d:d4:86:a9:74:59:
         e0:3b:22:c9:1e:65:81:e1:dd:b8:e4:0f:bb:d4:51:df:41:3e:
         0e:6c:0a:eb:da:c3:00:db:9c:78:ab:cf:f3:15:64:91:d9:a0:
         96:1f:fe:f9:73:68:60:4a:ca:2e:a6:ce:ca:ed:30:6c:11:4c:
         ec:f3:20:90:46:c5:75:29:08:36:55:37:86:22:4e:95:75:3f:
         27:be:54:57:82:a5:33:0c:3f:55:3e:22:a6:4d:c3:25:33:4f:
         3d:f4:04:e2:34:c0:9a:3c:8a:90:3f:cb:de:83:6b:20:b3:55:
         66:f5:23:08:f7:c8:4d:34:39:05:e2:c2:4d:df:d5:a3:55:89:
         5e:7a:2f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:48:25 2025 by rpki-client