Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa
File:                     c1255ba5-964c-3a54-9623-b83967aa57ed.roa (raw, json)
Hash identifier:          juuZzMvegNrb7YVYTROTj3ng06r3OZbJYzmqqu4y2vQ=
Subject key identifier:   D6:88:5A:0A:56:3F:4A:3E:6C:81:26:3B:D9:BE:86:95:D7:96:E1:A9
Certificate issuer:       /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
Certificate serial:       010D0C9F4328584ACE0B9AD79ECC127D109612C0
Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     18986
IP address blocks:        148.163.160.0/24 maxlen: 24
                          148.163.161.0/24 maxlen: 24
                          148.163.162.0/24 maxlen: 24
                          148.163.163.0/24 maxlen: 24
                          148.163.164.0/24 maxlen: 24
                          148.163.165.0/24 maxlen: 24
                          148.163.166.0/24 maxlen: 24
                          148.163.167.0/24 maxlen: 24
                          148.163.168.0/24 maxlen: 24
                          148.163.169.0/24 maxlen: 24
                          148.163.170.0/24 maxlen: 24
                          148.163.171.0/24 maxlen: 24
                          148.163.172.0/24 maxlen: 24
                          148.163.173.0/24 maxlen: 24
                          148.163.174.0/24 maxlen: 24
                          148.163.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9a:d7:9e:cc:12:7d:10:96:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=7b4a5e9a-fa6b-403d-aad1-dc58136844f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:6a:e8:34:14:a1:4b:01:75:f2:c4:34:b9:
                    e0:9d:f0:22:bc:4b:ef:de:0d:2f:91:ae:54:47:ba:
                    d2:4f:ea:40:29:93:b5:36:e5:c9:66:39:10:8b:b8:
                    20:bd:33:14:b3:2e:f2:03:5f:6e:c3:a2:05:ce:e3:
                    cd:d4:e6:6e:9d:1d:26:37:62:64:14:a8:bb:6e:44:
                    9e:d0:e2:c8:71:a3:ea:c0:df:a1:2f:da:9c:99:9b:
                    65:5e:e9:ab:0d:55:e3:e5:59:1e:56:04:d0:c7:f0:
                    f9:8a:ed:e6:16:8e:49:47:73:84:3c:ef:1b:a1:1e:
                    9c:6d:20:bb:c7:a8:2c:95:40:1a:ab:99:99:ba:59:
                    49:18:a1:84:4f:ab:82:c5:ca:b4:63:7a:de:b1:3c:
                    6e:ba:61:2b:4e:ab:9f:6a:b2:85:46:01:ea:44:60:
                    7d:c3:a7:be:eb:76:16:a4:ff:e1:cb:56:35:20:b2:
                    2e:e4:fe:52:26:f2:bb:f7:0f:45:35:22:7f:e7:15:
                    bb:8b:93:f6:29:0b:de:f0:b5:a8:9d:fa:dd:fd:78:
                    2a:ea:62:3e:27:5f:01:25:d0:ac:f0:03:97:03:c2:
                    55:7d:24:5e:6e:95:46:a5:4a:f5:e2:14:3d:84:82:
                    d4:a2:28:8f:ca:34:ed:e5:39:6e:f0:f8:d9:e0:0b:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:88:5A:0A:56:3F:4A:3E:6C:81:26:3B:D9:BE:86:95:D7:96:E1:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.163.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:ee:2e:49:17:60:75:6b:6d:f5:49:31:f4:78:7d:e1:e1:
         f7:68:5c:d1:40:0c:ee:96:ea:e5:ec:34:95:d6:f8:6c:79:4e:
         45:75:40:9b:99:81:71:b6:f8:6a:40:de:d2:c3:6f:01:3a:7b:
         6f:f1:21:bb:52:56:36:ee:78:1f:2a:3e:41:4f:ef:37:c4:cb:
         d7:91:b7:a5:b1:9c:69:0f:a7:e7:02:b6:91:b8:76:5c:73:fa:
         1d:61:fd:22:14:78:97:20:8c:e0:21:35:79:76:74:2c:fa:52:
         6d:b3:60:9a:e0:ce:b4:ac:24:b7:5e:d2:0f:72:f1:3d:69:17:
         ab:42:63:02:3b:4d:da:ee:20:dc:24:ee:8e:14:ce:0c:01:4c:
         fa:d0:22:f3:6c:7d:40:2a:64:e7:69:c8:2a:19:02:d6:83:c9:
         57:38:71:6e:24:f1:ae:41:bb:e3:0c:d0:13:c3:88:7b:87:5a:
         b7:24:e2:60:40:3d:c9:66:b2:ba:bb:a4:9e:11:30:62:2c:fe:
         71:11:e0:2a:d5:39:1d:2a:bb:ff:19:cb:a7:7e:7b:69:d7:7b:
         6b:f6:bd:68:06:a5:a0:10:60:2a:5b:cf:7f:7b:52:90:45:5a:
         14:97:f3:6f:b0:89:7d:cb:51:f2:13:a9:08:2b:8a:56:53:81:
         93:c8:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:19:07 2025 by rpki-client