Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa
File:                     c1255ba5-964c-3a54-9623-b83967aa57ed.roa (raw, json)
Hash identifier:          OWXBWwPkeiLEbId2bt51WTT2tF7weco/17Lea7fALjg=
Subject key identifier:   07:27:00:6A:55:D6:D2:BE:00:26:8E:59:21:6E:BA:A1:C4:CD:BE:A7
Certificate issuer:       /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
Certificate serial:       010D0C9F43285849ED4FCD209ED4EE8DF6513180
Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     18986
IP address blocks:        148.163.160.0/24 maxlen: 24
                          148.163.161.0/24 maxlen: 24
                          148.163.162.0/24 maxlen: 24
                          148.163.163.0/24 maxlen: 24
                          148.163.164.0/24 maxlen: 24
                          148.163.165.0/24 maxlen: 24
                          148.163.166.0/24 maxlen: 24
                          148.163.167.0/24 maxlen: 24
                          148.163.168.0/24 maxlen: 24
                          148.163.169.0/24 maxlen: 24
                          148.163.170.0/24 maxlen: 24
                          148.163.171.0/24 maxlen: 24
                          148.163.172.0/24 maxlen: 24
                          148.163.173.0/24 maxlen: 24
                          148.163.174.0/24 maxlen: 24
                          148.163.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cd:20:9e:d4:ee:8d:f6:51:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=a1c33e76-2ed7-47bb-ad6b-c2f3e3546140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:27:7b:04:d4:2a:c5:25:25:23:e0:d2:31:
                    e5:44:58:1e:86:9c:d8:9c:1f:1e:d8:09:78:e7:97:
                    ac:95:c6:66:c2:a9:ea:a5:e1:61:b1:11:36:e8:1b:
                    45:ec:c2:50:76:78:6e:34:56:24:73:66:40:09:10:
                    49:be:f0:b8:6d:81:98:01:34:ad:6d:3a:e5:66:4b:
                    28:8a:95:67:45:7b:b3:12:21:6f:c0:16:77:d7:f1:
                    76:f6:44:21:53:c9:99:ab:9c:4f:57:0a:3e:e7:7e:
                    e9:29:3c:d1:24:b5:f2:cb:85:89:4c:2f:04:d8:07:
                    a6:5f:38:63:89:41:10:5f:3e:6f:f6:77:d6:98:49:
                    49:98:b8:37:9c:1e:42:7e:e3:59:ac:4a:82:1d:d9:
                    17:60:18:b8:cf:f8:b4:ed:8b:16:84:21:15:09:a1:
                    1d:8e:8f:41:67:bf:02:a4:cc:d0:56:b8:d9:e8:53:
                    86:5d:cc:a6:77:d2:e6:9e:14:a4:4b:3b:8e:83:45:
                    74:a0:9b:5b:f5:93:0d:32:71:d6:3f:55:0d:6c:6a:
                    74:29:12:3c:dd:1f:1e:b6:98:ff:87:fd:61:4a:77:
                    11:a5:a9:38:2b:18:c3:7c:fc:63:49:c0:4e:44:38:
                    ed:b8:44:ce:ab:5b:a9:d4:06:36:4d:23:0b:60:42:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:27:00:6A:55:D6:D2:BE:00:26:8E:59:21:6E:BA:A1:C4:CD:BE:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.163.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b2:aa:22:95:58:2e:50:17:ea:05:e5:4e:c4:97:95:35:61:
         b9:88:aa:13:b8:60:62:e2:d2:c8:b7:48:ae:ce:a6:d7:95:cb:
         5f:6a:78:dc:2d:eb:e1:3b:58:d6:96:d7:92:19:5d:5d:64:78:
         2f:1f:2d:f4:2f:ee:ed:5f:a5:87:77:4f:ee:d7:3d:64:f2:30:
         0d:80:e2:d5:9f:c2:97:45:f3:58:84:a6:0a:8a:cb:ad:b7:d9:
         3c:57:84:15:54:2e:7d:f3:2b:16:24:5e:8b:b8:dd:37:e4:76:
         6c:de:c9:ef:df:d8:76:88:7f:fd:bb:82:8f:33:fd:e8:3c:ae:
         84:d8:80:de:47:0d:1a:e6:dd:b4:f1:b0:cb:10:61:d6:cb:1c:
         80:1e:c7:08:97:13:8f:af:5c:c6:fe:64:c2:6a:1f:c1:1c:8f:
         79:24:a2:c4:60:28:ac:5e:85:bd:81:d4:a9:13:90:a2:e5:81:
         f8:32:cf:68:36:f8:1c:f5:91:cb:d1:4a:87:e8:be:ee:03:c1:
         6d:70:43:95:94:81:d1:7e:bf:cc:80:7e:cd:45:aa:c1:31:5b:
         1c:f7:b5:0b:cc:f5:e5:57:6a:7f:9c:00:9c:5c:11:05:c3:71:
         06:c3:4e:7e:b5:c5:d8:2b:7f:69:05:a0:6e:6f:17:7b:d0:aa:
         4c:3c:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:29:25 2025 by rpki-client