Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/dc1abf42-2634-3421-bbde-e6b9fa621cc3.roa
File:                     dc1abf42-2634-3421-bbde-e6b9fa621cc3.roa (raw, json)
Hash identifier:          JP/z2+7ODrw1q3Mp4lVm90j4BkB/PweVtsBVd5TNTsw=
Subject key identifier:   A6:52:3A:78:3A:FD:D9:92:67:0E:35:93:EC:94:B1:21:13:AF:C0:09
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584A4110627FC0B692D780D15380
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/dc1abf42-2634-3421-bbde-e6b9fa621cc3.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     48314
IP address blocks:        185.167.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:62:7f:c0:b6:92:d7:80:d1:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=93c9a985-ccb9-42ec-8ae7-c2ac15e70f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:2d:be:82:35:85:1f:75:51:f6:f8:53:33:
                    5f:02:00:0c:a4:a8:29:97:85:f7:0c:15:9e:90:6c:
                    79:e7:54:9a:18:04:c3:3a:c5:0a:75:bf:8b:57:25:
                    27:93:d3:ce:f0:d2:0c:e5:03:d4:26:49:ac:48:d1:
                    ec:9a:9f:4e:b3:ee:93:1b:43:07:02:06:af:81:d1:
                    25:c8:c3:9e:b3:f1:56:8f:18:5d:7d:9c:c1:37:43:
                    3b:e8:bc:4c:d5:f4:a8:4c:1c:13:50:ef:3d:bc:eb:
                    5a:b6:60:03:c2:30:b1:b4:18:2d:cb:41:f5:90:fc:
                    3e:4e:cf:51:65:da:9a:06:62:82:b6:29:f4:49:71:
                    36:44:b6:91:3c:d5:c3:57:36:53:c2:7d:aa:3e:4a:
                    b6:8f:65:d2:ff:33:ff:f6:12:99:f7:30:8d:0a:d2:
                    f5:91:b7:35:da:3d:fc:52:aa:bc:41:64:ea:c6:fb:
                    b0:4b:4b:51:37:9c:3d:4e:aa:60:ca:3f:09:e0:38:
                    fd:31:b6:fc:3e:31:b2:46:63:57:a3:ce:55:64:b0:
                    06:c3:fc:1d:98:30:2c:94:19:ea:ed:36:b3:eb:65:
                    cc:35:5f:e5:be:31:f0:82:42:7a:8b:9e:b4:11:70:
                    01:45:83:db:81:b5:35:93:b2:4d:28:b8:40:59:f5:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:52:3A:78:3A:FD:D9:92:67:0E:35:93:EC:94:B1:21:13:AF:C0:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/dc1abf42-2634-3421-bbde-e6b9fa621cc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b2:c9:80:44:2a:ff:9c:e5:05:7d:c8:7a:b4:34:15:7e:86:
         84:51:3b:03:80:53:56:b0:5b:4f:b4:76:90:45:6a:f4:9e:83:
         0e:37:23:8c:0b:a9:ff:3a:c7:27:60:68:ae:45:b1:e7:5c:47:
         d3:a1:27:97:0d:35:8f:d8:7d:5a:55:53:d7:1c:7a:6e:4e:3e:
         c5:cd:c2:1f:79:5b:11:e2:fc:b3:93:e5:bb:4b:b9:0b:75:13:
         63:9f:e8:0d:2c:25:b9:1d:08:17:57:75:c7:c6:68:c3:0d:14:
         51:d9:fe:59:df:3d:d0:e4:7f:a8:85:6b:e4:3e:5a:07:de:53:
         b0:a7:5f:89:ca:49:45:8c:35:6e:70:a1:78:30:a2:8f:71:af:
         91:3d:21:2b:ff:77:db:e4:48:dd:04:c2:9f:de:f5:52:5e:e6:
         da:60:b0:5b:12:78:5d:75:1f:f7:1f:c3:a0:f7:8a:65:fa:2a:
         18:11:2f:6a:11:42:be:77:27:4f:5a:48:0c:62:83:46:c3:f6:
         10:5f:c0:cc:03:72:2c:99:24:4e:6a:44:59:1f:5d:74:28:60:
         d9:de:63:94:b8:a5:76:45:80:9d:42:e1:75:ac:e2:08:30:b0:
         20:65:5b:39:31:10:01:6a:78:32:d1:50:6f:e4:0c:f1:6a:36:
         b1:19:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:13:12 2025 by rpki-client