Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/9f353a49-c00a-30fe-aa8e-4a62a542caa9.roa
File:                     9f353a49-c00a-30fe-aa8e-4a62a542caa9.roa (raw, json)
Hash identifier:          dfclGUio5DH32eEfmSj9ajrfzgI86FEPU1cSAu4wYkg=
Subject key identifier:   5F:3B:C3:D3:21:EA:31:34:79:8C:0B:A0:D4:EB:94:39:05:F1:59:73
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F43285849002164DD702622713888A700
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/9f353a49-c00a-30fe-aa8e-4a62a542caa9.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     7381
IP address blocks:        161.195.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:64:dd:70:26:22:71:38:88:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=5c56b7df-07d8-44e2-a24d-0c04d6795a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4c:e1:56:a1:d2:bf:e1:3f:f8:e7:b1:14:41:
                    5c:1d:7d:e7:e5:54:59:c0:ab:00:17:d9:ae:1f:25:
                    eb:b3:d5:fe:7b:11:53:df:db:3c:e6:19:bd:92:4b:
                    43:2e:4b:93:b0:ba:bb:de:8b:9d:c6:a9:3b:fb:16:
                    71:85:0a:dc:26:11:16:bf:87:6d:98:21:f4:85:56:
                    a5:49:b0:a2:75:b7:41:39:c2:42:30:f5:5c:f0:21:
                    28:36:1c:27:f5:f0:1f:91:8e:96:b6:d1:8a:8f:f8:
                    be:32:4c:36:d3:90:74:97:09:b9:1b:7f:aa:45:31:
                    e7:18:c6:3c:a8:d6:48:96:0e:57:31:06:6f:17:eb:
                    66:3f:8b:9e:ce:26:02:24:f5:f5:93:44:f4:03:17:
                    00:9f:7e:89:2a:95:cf:34:2e:60:c1:05:3c:26:df:
                    5d:77:5c:06:52:17:3b:67:a7:7f:25:45:e7:b8:33:
                    5b:d7:fe:6f:b0:ec:66:41:f9:47:a8:81:e6:14:26:
                    2a:0f:5f:eb:29:7a:54:1b:30:36:fe:af:ac:82:13:
                    e7:62:58:f6:b2:ae:02:5f:36:26:38:a7:5c:9d:46:
                    e9:79:36:a5:c2:4a:06:48:3f:d6:11:78:25:b1:e3:
                    18:52:f4:86:bb:cb:fa:16:b7:e8:e4:45:26:87:14:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3B:C3:D3:21:EA:31:34:79:8C:0B:A0:D4:EB:94:39:05:F1:59:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/9f353a49-c00a-30fe-aa8e-4a62a542caa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:67:2d:6a:26:33:d7:2c:ad:47:e1:16:8e:3d:9e:3c:11:5c:
         8b:06:7e:33:9c:24:d0:6a:61:60:6e:d0:c8:a6:3f:f5:60:40:
         1d:4c:41:ce:ab:1a:77:61:69:26:dc:6f:75:72:1a:ec:cd:ce:
         7c:31:9b:6c:52:48:18:30:bd:74:0c:3f:c6:6f:05:be:c6:b8:
         26:de:d2:a6:40:1d:2e:cc:a1:09:35:19:d7:91:f5:a3:10:db:
         a7:37:21:40:90:d4:13:a4:35:30:0f:c8:43:9f:89:1f:bb:e8:
         55:90:77:da:00:a3:2c:20:4d:a6:3c:b9:00:e5:f0:7f:70:a0:
         ac:c4:1e:32:0c:a8:94:8c:60:57:2e:cf:5a:f7:ac:e7:62:ea:
         6a:ca:72:57:f8:43:4b:b7:91:88:aa:6a:56:ab:d8:f5:f3:31:
         82:1c:f7:1e:39:7b:48:da:50:d2:cd:f7:23:b4:8a:c7:f8:d2:
         7e:ce:66:c8:0a:85:e8:25:2a:1d:34:6e:b8:e9:29:52:15:59:
         e0:ba:71:f7:46:62:58:bc:5f:24:12:ab:e7:bc:09:9c:86:fb:
         a7:b0:4a:1e:3c:80:d1:e5:a4:f1:e8:02:c4:1c:74:d0:fe:f4:
         50:d5:c5:44:18:ef:57:41:d6:06:1d:77:b2:fd:96:77:c0:f7:
         23:8c:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:03:48 2025 by rpki-client