Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/eddf452d-1527-3813-a5df-7c9e9dbcfba3.roa
File:                     eddf452d-1527-3813-a5df-7c9e9dbcfba3.roa (raw, json)
Hash identifier:          z03vc7HUvJS71RNTuSVdt6s+PzpZQLwQLyfDgnfhReo=
Subject key identifier:   23:6E:B1:17:48:F5:B0:EE:31:AD:7C:FF:37:88:CD:5D:A5:BC:72:3A
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F43285849E7BA7E5CF0257F2A020F2100
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/eddf452d-1527-3813-a5df-7c9e9dbcfba3.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     5662
IP address blocks:        157.166.148.0/22 maxlen: 24
                          157.166.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7e:5c:f0:25:7f:2a:02:0f:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=4a9fd550-9e21-47f3-8e33-9e835e81330b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b1:7a:53:10:5b:09:2f:01:9d:28:e4:20:23:
                    fe:b6:cb:1b:53:40:05:61:3a:fa:c4:e7:d1:b4:41:
                    48:1a:e0:a0:23:90:2f:b0:6a:39:c8:74:28:c1:2f:
                    c7:e8:8f:84:61:ac:ed:2b:d3:e7:8f:27:37:c6:40:
                    63:ad:f1:25:1f:90:93:45:a6:4b:fa:36:f4:a7:96:
                    f6:7c:1b:87:bf:64:2a:dd:23:63:f9:16:cf:74:8f:
                    14:35:db:06:eb:66:d7:a6:f7:70:9e:6f:2f:27:0a:
                    14:23:68:4b:db:fe:de:e4:18:41:cc:99:05:4b:4b:
                    20:72:aa:e9:92:2b:61:a4:6a:72:92:93:f8:71:ed:
                    42:ef:c4:14:89:06:bb:b4:79:a0:cb:91:84:2a:73:
                    fe:b8:fe:47:1e:28:81:08:92:b7:92:6f:75:ba:26:
                    fa:33:33:0c:75:c0:aa:a4:ff:c3:62:a1:4d:56:99:
                    0c:49:1d:fc:ba:e4:7c:66:bb:6b:5c:65:97:c7:f8:
                    53:d0:63:b4:3e:d2:00:2d:53:c5:c8:c1:78:22:f8:
                    75:5b:08:2c:c4:98:cf:ec:33:79:0c:04:7c:cc:5e:
                    6c:90:7a:4c:6c:ba:be:56:39:4c:e9:93:4f:72:16:
                    9a:0e:78:d2:04:a4:2c:1a:b6:25:22:ed:53:c1:75:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6E:B1:17:48:F5:B0:EE:31:AD:7C:FF:37:88:CD:5D:A5:BC:72:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/eddf452d-1527-3813-a5df-7c9e9dbcfba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.148.0-157.166.152.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:71:7d:58:fe:af:c7:2c:5d:a0:6d:2c:79:db:6f:3d:0d:
         8b:c2:e2:43:37:fc:4d:83:53:4f:4f:de:0e:1c:75:cd:9f:bf:
         b6:18:d0:68:c4:09:2c:d1:c8:b5:ec:d6:5d:02:a3:32:b4:dc:
         b6:d6:1c:de:36:fd:db:f9:cf:30:00:f6:35:4d:12:a0:f1:28:
         76:49:cc:5a:9b:b5:2f:4c:61:7d:65:8a:a2:e5:0a:6e:2d:b1:
         88:5c:45:81:cb:fd:29:1c:68:b3:7e:bd:c6:6c:e5:65:b9:fb:
         bd:ad:8e:28:d7:74:a7:2c:f4:a8:9b:b9:6c:c4:19:a2:57:5d:
         7b:e5:71:f6:26:e2:ef:22:8a:b2:c4:f3:a2:4f:1a:dd:be:3f:
         ad:4a:86:dc:cc:0c:35:82:27:37:06:54:be:b1:06:e4:02:db:
         f2:11:fc:cf:5f:b2:6e:83:08:b5:5a:0d:c7:f9:89:15:d2:0e:
         79:0b:6a:7b:ea:09:a9:4a:2b:f6:96:4a:72:3d:15:ab:a2:0c:
         20:13:07:20:49:05:47:11:fc:17:b2:16:44:5d:9d:06:7a:56:
         5e:e7:20:41:db:c6:ed:bb:74:53:60:67:01:32:0c:3d:41:90:
         59:d7:81:37:7f:91:96:98:53:f2:c7:de:ad:31:49:92:d3:60:
         a4:10:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:31:09 2025 by rpki-client