Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/61ccdaaa-d56f-34eb-ba36-f655103310f7.roa
File:                     61ccdaaa-d56f-34eb-ba36-f655103310f7.roa (raw, json)
Hash identifier:          AOJ5peqTvCgTDmk2bK1e9go4k75Z5I02dz1zaeSR6o0=
Subject key identifier:   78:96:D2:06:45:15:72:9C:82:18:2F:74:8A:F0:79:72:99:61:F8:82
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584ACE0B9008342C9A0EA822A460
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/61ccdaaa-d56f-34eb-ba36-f655103310f7.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     19181
IP address blocks:        131.153.166.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:90:08:34:2c:9a:0e:a8:22:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=7b841509-9a0f-4eac-844e-09c8d487ebe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ca:8f:dd:f2:53:26:f2:26:23:c9:b4:3d:1e:
                    f4:48:e7:3b:05:6b:07:1e:f7:7f:ee:0f:58:c4:45:
                    5b:58:a7:27:0a:b3:1f:45:ed:f8:71:5e:f8:0f:4e:
                    15:3a:0f:14:d9:85:e4:bb:e5:c1:0a:ae:fc:11:62:
                    70:b1:b2:ef:c3:89:48:a7:1e:fc:73:08:75:dc:b7:
                    77:42:23:ca:6b:f9:4c:8c:d4:27:93:62:c6:65:ce:
                    e4:c0:c0:5f:3e:1d:b9:7d:ad:7e:64:fc:13:d6:c2:
                    c3:1e:0b:8c:ec:c7:d1:ec:ad:11:69:86:04:36:cd:
                    61:98:62:91:f6:19:96:c6:b2:85:c1:b9:02:93:09:
                    00:b2:3b:3e:ac:de:0b:09:1a:9b:a6:b4:ec:77:36:
                    df:02:c9:6c:43:e1:8f:24:7a:66:c4:c3:41:75:51:
                    3e:01:45:28:93:25:7f:70:80:30:9d:8f:2a:0f:89:
                    05:e1:e1:8a:69:e5:32:52:d0:72:7b:c1:08:95:88:
                    13:a7:cc:e6:52:9c:46:5b:18:74:ce:82:b8:4e:a9:
                    e0:fd:e8:57:70:4a:f0:58:a3:e1:f7:b0:42:8e:b3:
                    eb:47:b1:3b:0b:b0:09:18:b4:2f:04:84:15:cd:58:
                    02:34:c2:88:a3:f7:bd:90:86:78:95:51:aa:87:fa:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:96:D2:06:45:15:72:9C:82:18:2F:74:8A:F0:79:72:99:61:F8:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/61ccdaaa-d56f-34eb-ba36-f655103310f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:cd:c5:82:b9:7e:93:81:33:0c:b1:ad:14:45:a1:23:80:
         63:f0:02:6a:e9:17:28:bc:90:b5:3d:ba:33:da:e5:12:f7:61:
         6c:6a:ac:e6:c6:a4:ec:a0:f9:d1:f2:12:88:72:fd:be:a4:f3:
         ae:3b:75:74:c5:41:e0:48:87:25:8c:58:e3:77:d4:33:3c:b0:
         e0:3a:f2:82:3a:6a:20:95:57:29:f2:bb:52:17:59:ad:ff:64:
         ea:bb:58:4f:d0:12:c2:57:9d:af:9a:74:b3:43:f6:38:6c:f3:
         5a:7c:7e:8c:05:a3:c2:31:10:7b:b8:c0:9c:13:c2:9b:3f:57:
         78:d0:b1:95:38:33:0a:b3:f7:89:2e:ae:a9:d2:a4:f2:29:c1:
         f7:f4:54:aa:d6:a1:3f:ee:35:dc:95:b3:d8:07:76:c1:9c:ea:
         9a:a1:95:d5:04:3d:d3:23:47:89:3a:6b:20:51:5a:1f:03:5f:
         10:a3:6a:87:87:a8:42:cd:f7:4f:90:bc:11:f9:89:25:f7:68:
         c7:ed:35:e0:ea:cf:82:2d:be:ac:70:fe:81:00:44:74:97:d0:
         a4:8e:c7:10:31:ce:3d:b3:ab:06:a9:d5:91:81:06:92:a2:2b:
         c4:de:4a:c8:b1:4e:06:6c:8a:08:8f:8a:72:56:b9:b7:c7:37:
         b6:5a:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:06:04 2025 by rpki-client