Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/a6546ddb-a034-39fe-91cc-ec11558b7299.roa
File:                     a6546ddb-a034-39fe-91cc-ec11558b7299.roa (raw, json)
Hash identifier:          Au2b+GC5mR+div9TcJ8r2qpF6cn9Gih0bK6FEK4x5w8=
Subject key identifier:   3A:F7:41:04:AD:33:A5:D0:ED:3D:D4:6F:9C:D3:98:E5:D7:0E:35:EB
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F432858481F653686DFE5F85B49DE46C0
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/a6546ddb-a034-39fe-91cc-ec11558b7299.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     29967
IP address blocks:        161.195.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:36:86:df:e5:f8:5b:49:de:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=a42f61cf-204c-4281-9517-67f0983f463e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:49:37:cb:32:95:28:97:59:b9:2a:e2:6e:6e:
                    0b:81:18:98:37:24:ce:f8:7c:8a:89:88:dd:b6:fa:
                    58:49:97:b1:fe:50:e9:71:4d:99:34:49:a7:ca:24:
                    68:cc:54:42:1d:95:2e:a6:44:a8:fd:85:8b:1e:43:
                    24:44:49:11:8e:10:ed:70:8f:72:b6:80:11:5d:d0:
                    33:de:3b:de:97:70:34:02:0f:f2:a5:00:3d:e5:61:
                    22:11:89:97:2d:5a:f4:b1:22:02:44:97:75:9e:d3:
                    a9:06:cb:a2:d0:a5:9e:ec:19:f3:17:83:97:5c:cf:
                    a0:8e:1c:d4:e0:2d:c5:25:0a:60:74:43:48:b5:32:
                    63:02:98:4e:89:a8:cd:fe:ff:f2:b4:58:70:7d:fa:
                    d0:e2:c2:8c:f8:08:69:b7:bc:af:74:01:95:0d:e7:
                    3a:4c:13:17:26:f3:eb:28:fd:9a:d5:f9:2b:7a:05:
                    95:c1:4c:67:7d:40:b1:6b:fe:19:30:46:7f:75:b6:
                    6c:15:8b:bb:6f:bf:69:90:f2:8c:75:a1:ab:92:07:
                    84:a7:02:8d:79:6a:c4:3b:9a:0d:fe:0c:6f:85:49:
                    f6:d1:05:97:3f:5c:14:cc:9f:45:ee:e6:66:65:54:
                    be:17:5a:d2:ec:67:d0:a0:28:34:11:fe:c6:3c:aa:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F7:41:04:AD:33:A5:D0:ED:3D:D4:6F:9C:D3:98:E5:D7:0E:35:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/a6546ddb-a034-39fe-91cc-ec11558b7299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:70:95:fb:a8:51:f8:4b:1b:27:01:e0:9d:e3:e6:32:cb:75:
         c1:ca:32:f6:87:e7:dc:32:65:0a:c5:ae:9c:d1:bb:fd:55:62:
         ec:cb:d2:32:07:09:f7:b1:9a:d2:a1:cc:9a:44:6a:5f:06:ca:
         0f:e8:1f:a3:0f:a8:32:dd:d6:d7:f8:f5:42:c4:cd:44:72:cc:
         3c:16:a5:d2:15:c5:dd:d9:68:a6:d8:68:6f:09:57:94:99:de:
         c6:9d:cd:e8:b7:97:c2:d0:b3:6b:02:fc:40:ac:ad:9f:6f:38:
         91:eb:26:f9:8e:38:f8:59:75:ac:95:5c:58:f5:38:b8:d4:d2:
         ab:d8:e1:da:b1:46:1c:6b:83:48:a6:84:5e:2c:bb:8f:99:d0:
         17:65:be:90:a1:e6:36:44:4d:a3:e1:4b:d6:d1:ac:59:e2:b4:
         a6:c7:e7:79:5e:1b:d2:9f:56:57:e6:27:eb:79:d0:93:e9:58:
         36:39:40:5a:10:59:1f:e5:39:6d:c7:5a:96:06:62:d2:59:ac:
         c3:c1:e4:81:40:ab:88:ee:2a:8b:26:ec:00:e1:ee:d5:ad:5e:
         65:a2:b5:0c:fb:83:86:fe:ab:88:27:0a:76:15:be:3f:17:74:
         ac:48:7f:a6:67:1d:43:37:4c:84:89:4e:8f:8a:22:66:92:2b:
         47:f3:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:22 2025 by rpki-client