Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/662d86d5-6ecd-3226-8f59-ed473d2df54c.roa
File:                     662d86d5-6ecd-3226-8f59-ed473d2df54c.roa (raw, json)
Hash identifier:          VRcJFh37MNTfq5RMhZdcKC5IAkRch72w7afQkk320QE=
Subject key identifier:   F8:A2:48:0C:E1:AB:7B:0B:20:83:9A:96:E0:EC:32:2E:CD:BD:AA:B5
Certificate issuer:       /CN=fff22b91-ff6b-40b0-b626-033566818ca6
Certificate serial:       010D0C9F43285849E654EB85556914CADC18DA90
Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/662d86d5-6ecd-3226-8f59-ed473d2df54c.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     19905
IP address blocks:        161.115.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:eb:85:55:69:14:ca:dc:18:da:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=760e98f1-72b0-4ebe-8aba-e486a720887c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:08:76:97:cb:50:fe:55:c6:85:a9:30:a1:
                    86:ca:4b:12:07:cd:60:1c:dc:98:2c:da:f5:19:3d:
                    d7:5f:d3:8f:6b:67:2e:96:38:b4:e5:e4:72:22:2d:
                    f9:49:95:a1:84:9c:21:60:58:cf:e2:a2:a7:06:f6:
                    db:c2:2a:70:6c:35:9b:e3:11:eb:11:c4:91:c8:59:
                    20:fe:e9:c5:d6:62:3a:44:1d:b1:53:d1:fa:03:f3:
                    75:98:f4:6b:4e:8c:4d:37:ae:6c:2e:ce:3d:e6:4c:
                    36:69:73:c9:17:48:39:f0:79:ba:81:b9:b8:ba:11:
                    39:f2:22:c7:b2:9d:08:60:c3:b0:2e:a2:d2:44:7e:
                    68:ca:17:8a:f3:92:63:98:91:16:1f:f3:ad:f6:4b:
                    f0:a4:b6:0c:c7:0e:69:94:8e:f0:5f:ef:57:78:7b:
                    6b:e0:ea:de:b0:8a:d4:8a:47:f8:4e:28:05:7d:c7:
                    ce:59:06:ce:cc:08:75:f1:9f:a6:c8:7f:63:a9:cd:
                    6e:55:17:fb:32:75:ae:ec:e3:c1:ba:32:04:60:6e:
                    5b:e3:85:8a:7e:03:d9:d8:37:05:c6:d6:6d:a2:e1:
                    98:53:9a:ad:05:69:23:5c:5f:1a:b5:a0:d6:6e:d2:
                    a7:9f:e8:20:af:ba:db:9f:be:6a:04:99:52:77:b8:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A2:48:0C:E1:AB:7B:0B:20:83:9A:96:E0:EC:32:2E:CD:BD:AA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/662d86d5-6ecd-3226-8f59-ed473d2df54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:cc:8b:51:9b:4e:1b:92:61:36:d0:f0:35:27:a4:d3:ed:aa:
         c9:22:01:23:ce:16:08:d1:7a:ca:47:c4:c5:59:1e:c7:3c:1c:
         8e:82:d9:09:c9:ff:17:06:ab:4e:3e:31:21:f1:b4:c8:18:27:
         b7:0a:9c:ca:22:aa:8a:e0:1a:c8:2e:8f:90:52:a5:2f:bc:3f:
         bd:9f:b3:59:f7:4c:c3:d7:b3:88:3c:9b:c4:8b:46:4d:0f:97:
         99:95:a2:52:1b:c8:89:33:28:d5:bb:b4:d9:0f:bb:a6:07:9c:
         8c:2e:52:d6:34:f0:e5:8f:d9:5c:dd:ff:f7:9b:fd:8c:5a:9b:
         c1:77:39:88:bf:eb:5c:02:bc:94:7b:5d:70:9e:a0:3e:8a:e4:
         d5:49:3e:f8:61:0e:e9:0d:1f:ff:53:ce:62:ca:a0:be:58:4b:
         78:e1:f2:53:53:78:6a:32:17:93:6d:d7:2c:2e:e7:ea:64:64:
         c4:b6:8c:5b:db:af:ac:53:aa:34:fb:e2:97:28:8f:81:fd:4f:
         d1:4a:4c:1b:40:ae:63:25:bb:7f:40:ab:ab:43:e8:23:b5:40:
         a8:5e:e3:25:fc:1f:8a:02:95:cc:48:9e:bc:ec:b7:8a:c4:ee:
         16:6f:3d:48:32:8c:f2:8a:90:f3:44:71:c0:a2:2e:9d:04:9e:
         46:d7:b5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:54:52 2025 by rpki-client