Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/e1e377ce-ed75-3ea3-b7da-bf0ea34c865a.roa
File:                     e1e377ce-ed75-3ea3-b7da-bf0ea34c865a.roa (raw, json)
Hash identifier:          hxXhVDAWeoVsgMcUrYkAxrX9Dhxq6gm3fMCKZNHReAM=
Subject key identifier:   E4:5E:96:94:D4:3F:23:9B:39:95:EB:24:84:9F:6A:73:06:D1:4A:6F
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584A6AF0929EA242818716F57A80
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/e1e377ce-ed75-3ea3-b7da-bf0ea34c865a.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     19905
IP address blocks:        161.195.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:92:9e:a2:42:81:87:16:f5:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=f00eade2-e711-4f12-8303-196c4a4badb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4d:8c:d7:aa:50:6a:5b:74:dd:41:b8:b0:89:
                    16:51:32:88:d4:33:47:ef:11:52:04:51:31:91:fd:
                    be:31:7b:e3:55:3e:e1:43:4c:57:59:97:23:58:4b:
                    9e:c1:3e:f8:14:9d:03:38:aa:e9:3f:36:0f:16:0b:
                    d1:6f:0b:5d:f4:24:f1:f9:25:74:39:e5:13:95:17:
                    e9:5a:88:d2:1b:7e:4b:3d:eb:b6:71:46:25:50:dd:
                    4f:90:48:99:1f:02:72:db:9e:6d:bb:3b:b7:75:a7:
                    ca:39:9a:a3:c6:85:39:cb:fd:51:28:c8:39:28:45:
                    ea:76:bc:0f:e6:fd:e6:d0:95:67:3a:6f:cd:e9:60:
                    6a:87:16:8a:c2:2b:0c:de:5c:04:94:1a:aa:bc:9e:
                    ce:4c:55:be:e8:9a:96:01:ec:52:99:8a:fb:1c:61:
                    be:bc:64:6a:4d:14:6e:0c:b9:d6:93:7a:6c:91:75:
                    21:d7:38:c9:2e:3f:fe:7c:4c:26:59:b3:6f:a7:5b:
                    46:51:d3:d9:37:db:38:e6:e9:ee:fb:b7:d9:3f:df:
                    96:48:1b:ca:dc:47:68:55:b9:79:d1:0c:2c:83:4a:
                    c0:60:f2:c5:48:a7:0c:9a:f8:01:dc:09:60:19:ef:
                    3c:8d:8e:f8:4b:76:fb:ae:2e:49:6c:ce:3c:78:cc:
                    2a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5E:96:94:D4:3F:23:9B:39:95:EB:24:84:9F:6A:73:06:D1:4A:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/e1e377ce-ed75-3ea3-b7da-bf0ea34c865a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:68:18:d4:04:1e:26:00:95:c9:75:1c:b7:e2:44:77:6e:
         91:fa:6e:60:a2:8a:f9:1b:70:4a:c1:e6:66:14:7a:f8:f6:5a:
         9c:f5:bf:3e:7e:e7:d3:11:e8:68:fd:30:be:d5:7f:93:0b:c3:
         9c:d3:d8:bd:e2:ef:f4:a4:2d:9d:b9:a4:d6:ea:98:f0:20:9b:
         d0:33:08:6c:9c:95:75:d3:22:d3:c0:bf:09:f2:a0:1c:d1:2f:
         e3:83:ae:dc:7c:4a:d7:bd:36:16:4e:c4:2b:c5:bd:f6:db:69:
         cc:d6:89:ee:cc:5b:26:48:94:29:af:24:dd:58:4a:af:bb:49:
         6a:3d:58:f5:8d:19:6e:26:ef:c8:a5:21:50:ff:41:63:3f:7d:
         d8:3b:94:58:b1:4e:96:0c:2b:d2:80:14:f7:6e:f9:20:57:f2:
         16:6f:eb:bf:52:5c:f7:9c:c0:1b:18:d8:b4:6d:93:31:24:ea:
         c7:65:34:c4:1a:9a:43:93:dd:62:a6:94:99:2d:fe:19:da:2d:
         1d:2b:28:ce:95:e1:38:de:a7:e9:d4:68:25:bc:94:24:8e:b9:
         44:b8:ed:6b:66:0e:86:bf:83:ae:ee:60:77:3c:a4:37:5c:8d:
         ca:fb:aa:f2:e7:2c:71:51:02:09:29:5a:78:f3:c7:4d:ff:6b:
         f6:ca:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 17:27:39 2025 by rpki-client