Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa
File:                     8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa (raw, json)
Hash identifier:          j9ynqSAkU4b4qZ6lgdcq9tySQkoxOpCWSSvkavLKwX8=
Subject key identifier:   45:C4:5B:D9:FA:8E:45:66:F1:03:8A:A1:7F:4F:E2:E1:0E:F4:5C:4D
Certificate issuer:       /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Certificate serial:       010D0C9F4328584B03168F9C1863C002245B4DC0
Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     17161
IP address blocks:        167.245.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:8f:9c:18:63:c0:02:24:5b:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=58bf2c26-500e-455d-803e-7edab5984f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:3e:50:35:bc:43:e0:95:76:b9:15:27:73:
                    9a:63:b5:ff:81:80:b4:84:f4:72:9c:de:62:bb:02:
                    89:52:3f:07:e6:4c:32:d3:00:fe:7c:3f:d1:d1:d7:
                    4e:c8:35:ca:93:81:ec:32:04:b9:f8:5b:74:06:91:
                    f5:f7:14:c9:8c:de:62:24:15:62:d6:af:2a:4d:28:
                    c2:a5:9a:0e:7a:d1:b1:82:d9:1d:65:e8:e6:09:b2:
                    72:f2:91:16:ce:2f:1e:1d:2d:56:a7:05:b5:07:97:
                    c9:fc:62:c5:b6:6e:ca:bb:41:8a:42:75:0b:d6:6d:
                    2c:5a:00:69:56:a7:ad:28:37:ce:65:9d:c5:79:8e:
                    ac:b8:66:c9:ba:8e:c8:41:01:aa:ad:3d:25:51:47:
                    05:cd:c5:40:07:1e:54:d3:93:79:75:85:bf:19:2c:
                    63:5f:f1:24:7f:17:0c:d1:1a:30:f8:f7:43:5e:69:
                    9d:57:23:1b:e1:79:54:0c:57:cd:68:2a:ab:38:a1:
                    3a:29:24:29:f1:e6:e7:a4:89:57:f5:7d:fe:6d:35:
                    f8:c1:33:ff:d3:0a:e1:a5:31:9c:90:65:e5:1f:ab:
                    98:ca:64:15:75:60:6f:8f:dc:b0:40:66:1d:66:05:
                    40:47:b4:3b:3d:e0:00:70:d6:2a:1d:0d:ab:86:1f:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C4:5B:D9:FA:8E:45:66:F1:03:8A:A1:7F:4F:E2:E1:0E:F4:5C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl

            X509v3 Authority Key Identifier:
                keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.245.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:51:2b:44:1d:14:15:14:a5:f0:51:66:d3:79:a7:46:46:3a:
         b6:5c:08:0e:03:b3:d4:ea:d0:45:b0:06:03:17:65:39:d5:10:
         59:06:28:d6:71:89:c5:41:75:82:5b:39:b5:c4:b2:6b:83:87:
         9d:e9:b1:ee:9a:72:ad:a7:9c:ca:81:71:42:bc:a4:fa:2b:67:
         6d:80:b7:6b:cf:c1:7f:7b:ee:1d:7e:fc:16:b6:4f:79:df:70:
         57:5f:6e:b8:80:4a:dc:74:e5:e3:41:00:e2:03:d7:3b:04:0f:
         97:2b:7f:91:01:c4:32:74:33:ff:37:8c:e7:60:ce:5f:51:f5:
         27:6c:92:fe:07:fe:0e:73:fa:d0:75:e2:08:18:96:4b:ec:08:
         a6:5a:28:9f:25:d2:d7:d7:3b:ef:be:4a:55:39:41:e3:ed:41:
         d5:6d:2c:85:fd:b2:6b:54:66:01:c4:15:17:e7:15:ba:da:64:
         19:cd:cb:9b:6b:2e:94:f4:43:f1:69:4e:4b:ec:cd:bf:aa:c2:
         d6:88:3f:c9:2d:ad:8d:60:0b:9f:0d:b1:c9:21:b2:f3:11:c0:
         26:e6:b6:c8:8c:1b:25:c1:8c:e9:9f:dc:58:14:6e:dd:63:a7:
         c3:e1:50:fe:80:d5:5e:b0:8f:17:33:d0:b0:5f:6f:1b:ac:ee:
         ce:df:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:34:09 2025 by rpki-client