Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/4789066a-3b43-35df-b58c-65e2483410d9.roa
File:                     4789066a-3b43-35df-b58c-65e2483410d9.roa (raw, json)
Hash identifier:          NVeF3w27VoYUXjk2vPbq0Zkv6sgEDhDyjydancaJqAA=
Subject key identifier:   72:50:22:03:97:6C:9D:EE:3F:63:A6:9B:44:42:C2:06:5B:8E:6F:E8
Certificate issuer:       /CN=5265026d-c5df-4885-bafa-081d26466504
Certificate serial:       010D0C9F4328584A480AE3F5689138CC20192280
Authority key identifier: D4:10:0A:30:E0:C8:64:0F:80:BE:6F:95:F6:9A:BA:66:08:0E:E4:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/4789066a-3b43-35df-b58c-65e2483410d9.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     54641
IP address blocks:        161.199.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/5265026d-c5df-4885-bafa-081d26466504.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/5265026d-c5df-4885-bafa-081d26466504.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e3:f5:68:91:38:cc:20:19:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5265026d-c5df-4885-bafa-081d26466504
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=4e54d044-ff6b-4a03-bb92-3b33c4307531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:d8:f7:c5:86:da:24:1c:0b:13:99:cb:f5:
                    cb:e5:91:2f:c9:97:d8:bb:20:6e:42:3f:b7:31:f6:
                    15:4c:a3:8a:57:e9:97:9f:39:b5:b5:ed:5b:42:7d:
                    1f:60:80:0f:80:0b:5b:fe:f2:9f:86:7b:b1:41:4d:
                    f4:57:7b:d7:ca:f6:56:31:a0:e3:3e:04:d3:e5:31:
                    b6:99:9b:9d:ce:b5:df:fd:74:b2:3a:bf:6d:e6:0a:
                    74:a0:80:0a:30:bd:6e:ec:bf:6c:62:0b:83:dd:34:
                    01:68:dc:b0:6c:d9:82:17:71:6d:be:17:3d:18:a1:
                    23:e6:43:15:04:80:a6:4d:f2:56:eb:46:e6:42:33:
                    81:e7:5c:0d:78:e4:94:33:6b:c8:b6:46:f7:e6:98:
                    25:96:e5:b3:81:e7:3d:58:ab:a0:fe:ff:f5:e9:8b:
                    e2:fe:12:61:07:8e:48:2d:b0:fc:4f:b1:47:42:b9:
                    7c:58:52:12:1f:be:99:13:4d:c3:45:49:4c:30:d4:
                    11:f9:3c:84:80:48:9d:45:c2:b7:29:06:f7:82:dd:
                    33:21:1d:b3:76:21:d1:8a:3a:62:f4:a9:9d:69:1a:
                    52:25:cf:a8:c2:63:13:36:4a:18:44:45:dd:00:14:
                    40:41:ec:0e:76:f3:37:ca:69:8f:61:50:78:b1:4c:
                    6e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:22:03:97:6C:9D:EE:3F:63:A6:9B:44:42:C2:06:5B:8E:6F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/4789066a-3b43-35df-b58c-65e2483410d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/5265026d-c5df-4885-bafa-081d26466504.crl

            X509v3 Authority Key Identifier:
                keyid:D4:10:0A:30:E0:C8:64:0F:80:BE:6F:95:F6:9A:BA:66:08:0E:E4:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:76:e5:62:46:84:db:59:1f:ff:96:8d:2c:d9:cb:ab:e9:
         9c:36:e4:eb:94:51:d6:0c:90:70:47:f6:7a:88:f8:aa:60:43:
         ed:ca:ee:a4:da:85:25:72:e5:cb:2e:ca:80:79:10:78:e3:47:
         52:96:f3:af:9c:cf:df:04:ff:26:6a:dd:8c:67:73:02:59:bc:
         2d:d7:3d:c9:c7:49:85:6f:e8:b7:56:15:39:3e:0a:60:52:be:
         82:a8:62:d0:a4:d1:7e:9a:a0:f5:a6:81:88:de:46:01:16:a7:
         bd:d9:41:1d:11:ea:eb:3f:5a:57:12:4a:dc:42:9b:15:bc:e3:
         c7:b2:5c:87:c0:67:f1:1d:7e:f7:e1:3e:0d:9b:d0:12:68:01:
         6c:59:46:c9:8b:cf:e4:53:3e:e3:5a:d9:12:ec:cb:4c:2a:c3:
         b7:ab:78:1e:91:21:63:48:d4:ff:f6:5c:ea:24:f5:60:cc:6c:
         26:16:18:98:83:24:19:46:ce:e2:cd:bb:37:a1:be:38:f0:c3:
         8b:6d:47:20:67:0d:e6:0f:08:6b:24:ce:ff:8b:03:e3:81:50:
         73:df:55:b0:fd:59:69:00:b7:0e:4e:c1:a6:12:d6:2d:ab:37:
         c5:d6:06:e9:1d:53:41:0d:19:2a:f2:0e:ba:dc:87:d6:bd:7a:
         d8:f4:0c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 01:38:43 2025 by rpki-client