Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/b48b6092-fe7a-3630-8384-578a4e294be0.roa
File:                     b48b6092-fe7a-3630-8384-578a4e294be0.roa (raw, json)
Hash identifier:          E+DjxiB4//lx2MRkrFFUm5LZZm3pc4jCJ+KZjPZ4uaE=
Subject key identifier:   FD:41:1F:5E:F9:7F:27:8A:A0:EB:A5:23:00:AC:BB:CE:29:52:CB:6C
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584A189541D98C6C7455A20A1F80
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/b48b6092-fe7a-3630-8384-578a4e294be0.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     395213
IP address blocks:        161.38.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:41:d9:8c:6c:74:55:a2:0a:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=215ab96e-e413-4875-8304-48ad907c4728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:12:66:9d:26:e7:81:d1:36:d0:c9:72:76:
                    07:0d:26:5f:a2:e7:6f:20:1c:80:7a:60:0e:75:84:
                    91:44:30:cf:17:52:af:7c:76:dd:b3:d9:2d:ec:a0:
                    7d:c8:78:ea:98:4e:56:0b:30:98:24:69:6b:2c:8b:
                    42:7e:c2:fe:26:1b:98:b5:7b:cf:14:2c:6f:c3:cb:
                    aa:a8:0a:1f:e5:f2:9f:95:f3:37:a7:0c:75:0e:42:
                    85:1f:3f:8b:9f:82:e2:f4:f0:ab:e2:bb:09:72:45:
                    8c:c8:41:4c:2f:4f:2e:4b:17:8e:78:30:a8:63:1e:
                    12:0c:00:69:19:8e:4a:91:3c:0e:ec:9c:25:e9:c7:
                    96:58:17:c7:7e:fe:67:0b:54:4b:6d:6b:4b:a2:bf:
                    e6:2d:2a:ff:f1:6b:f8:20:97:d1:24:df:25:b4:64:
                    9a:e6:7d:dc:d3:86:5f:20:b4:f0:3e:5d:0f:43:32:
                    f3:72:6e:95:2f:17:d4:f3:c2:3e:63:75:32:a7:1e:
                    bc:db:29:dc:7c:7f:88:83:fd:f3:f3:28:ac:a7:86:
                    49:a6:1a:1f:30:95:e8:19:3f:e4:3e:59:cc:72:3b:
                    05:0a:4c:1f:b9:7b:c1:05:80:f0:f4:dd:fd:4c:8e:
                    9c:e8:02:a8:da:a5:59:a4:56:bf:05:2c:de:ea:1a:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:41:1F:5E:F9:7F:27:8A:A0:EB:A5:23:00:AC:BB:CE:29:52:CB:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/b48b6092-fe7a-3630-8384-578a4e294be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:6d:19:74:b1:59:c2:c7:18:18:a4:18:76:77:cf:4b:01:
         64:23:a4:99:12:df:80:79:90:60:f3:ab:80:42:97:df:fd:1e:
         53:bc:bd:be:bb:97:12:9c:f7:1d:6c:aa:dd:b4:72:93:93:67:
         a3:71:10:7f:3e:40:b4:8f:80:3a:ce:31:f3:2a:b7:0a:55:5b:
         4f:72:de:88:7a:cd:37:cc:15:2c:8a:0e:a1:bc:7d:79:d8:46:
         25:63:df:6b:a4:11:b7:71:2b:9b:89:84:34:46:d7:0d:4f:e2:
         8e:75:00:c6:2c:d3:ac:2b:a6:e6:5d:00:31:2d:ff:0b:99:d8:
         2f:97:35:f3:33:92:2c:53:35:af:0e:dc:7d:dc:0a:cc:b7:fd:
         42:f6:03:58:af:10:2e:05:52:06:3f:35:02:83:07:18:64:9e:
         1b:0e:dd:3e:dc:a9:c4:e4:ad:13:23:ae:3d:f7:ee:ec:47:26:
         4e:d6:3e:7a:9a:65:36:5f:6a:24:9a:87:4f:53:27:78:c9:56:
         cf:bd:a2:9c:27:0d:6f:b6:ef:fa:b4:08:b1:71:42:55:31:43:
         f9:fa:b7:29:4f:3f:3c:12:af:cd:f2:8c:d6:c7:1a:51:6f:60:
         af:3c:3c:84:42:89:49:5f:01:18:b1:ac:77:d2:da:f0:33:9d:
         84:18:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:00:11 2025 by rpki-client