Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/166137ad-d27c-3a4d-b2a3-a8de3a39b43d.roa
File:                     166137ad-d27c-3a4d-b2a3-a8de3a39b43d.roa (raw, json)
Hash identifier:          tBJ4msvMeUH/Lrs00QYkgiSZb5keAAiXSSuZ9T86HuE=
Subject key identifier:   A5:99:5B:7E:9F:E3:84:97:0B:6B:50:9E:AE:0D:D6:9A:29:6C:C8:66
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584A43DAF49FA69F1EEC6C012530
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/166137ad-d27c-3a4d-b2a3-a8de3a39b43d.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     396242
IP address blocks:        65.51.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:f4:9f:a6:9f:1e:ec:6c:01:25:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=9fc9512e-6fa2-459a-8110-2350c9f9c469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:a3:d8:cc:09:a9:bd:b2:49:e5:a8:d8:cf:
                    5a:bd:63:e4:ef:1b:ac:f5:e5:fc:59:5b:62:35:2e:
                    74:18:d9:29:4c:a0:54:0f:4f:fb:66:1c:33:96:0a:
                    1a:c0:b4:69:c3:36:6e:61:93:4b:7d:04:1c:69:1e:
                    66:01:5c:7d:a1:d1:28:d8:80:f7:3e:aa:e4:4d:36:
                    c1:9b:21:8a:0f:7f:6b:45:1c:09:70:2a:e9:95:e9:
                    fe:15:12:d1:7e:3e:9b:a6:28:e7:8d:88:50:75:71:
                    b6:32:0e:e7:29:ae:2e:00:36:b8:c1:c5:1b:23:ce:
                    ce:42:c2:79:23:dc:01:77:00:67:1d:cb:50:24:a8:
                    0b:f9:6d:66:72:c1:cc:42:ef:a0:ce:09:f4:10:c2:
                    34:95:da:97:a6:6e:2d:a0:0f:3c:dd:65:79:37:3f:
                    24:5a:3a:0c:02:cf:d8:c7:ea:f1:51:2c:a8:ea:b9:
                    1c:9c:f6:49:a6:47:81:5b:e9:f7:df:3a:65:c3:ab:
                    d2:04:13:e0:f2:8f:50:78:f1:b6:d6:a5:dc:73:8a:
                    ab:ad:a8:01:d0:ea:4f:d9:a7:54:99:96:62:ec:5f:
                    50:08:76:ec:ae:6f:9e:a4:6f:f3:82:78:57:f9:49:
                    ed:9d:90:9e:16:23:ba:40:86:c4:e3:36:11:a9:e0:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:5B:7E:9F:E3:84:97:0B:6B:50:9E:AE:0D:D6:9A:29:6C:C8:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/166137ad-d27c-3a4d-b2a3-a8de3a39b43d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fc:a2:54:f2:10:de:9e:58:d1:b6:85:47:82:c0:58:3c:a2:
         91:72:f0:4e:49:1d:05:31:ca:d1:6c:ce:5e:f0:70:2e:10:7d:
         70:20:29:02:63:ed:54:04:aa:a9:02:10:10:d8:e7:17:35:0f:
         15:2f:54:01:20:2a:4b:1a:71:52:b2:22:66:9e:48:a4:48:a5:
         04:e2:d8:a4:53:20:73:bb:ed:64:44:d1:6a:eb:e6:e5:b3:2b:
         de:27:e7:61:df:ef:e1:25:61:f7:f7:9a:d1:2c:6d:62:6a:0b:
         fa:f0:70:3d:e5:7e:b9:08:84:91:9d:76:92:55:8b:87:3a:72:
         0a:f4:d4:d8:5c:0b:84:80:ac:38:a3:ce:4c:e8:11:e0:10:62:
         5f:06:3c:3a:1b:84:4b:0e:e5:7c:85:7e:a0:9a:61:96:d1:26:
         9a:40:13:af:c3:8c:b2:d9:37:99:0d:02:6c:f3:41:18:fb:77:
         82:66:7d:95:24:98:f3:4c:b0:2a:b9:34:bb:9c:cb:ec:db:ff:
         cb:bb:2c:e8:8b:22:26:36:c3:2b:cb:68:c6:04:06:44:ed:dd:
         0a:a6:ca:1b:4c:a0:dd:31:58:c6:52:ec:f2:9a:fe:03:72:0d:
         d4:d4:60:29:17:cb:f3:8e:26:a1:80:37:d0:55:f4:70:f8:28:
         ac:32:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:49:56 2025 by rpki-client