Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa
File:                     7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa (raw, json)
Hash identifier:          wa6qzIXlpPNUXZBLWeFZpeD+pp60GXgg8msUerYmxPU=
Subject key identifier:   80:D4:02:8E:25:AA:36:FC:E2:BE:DD:76:9F:54:2F:C2:42:CF:DE:A0
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F43285848DFB7CEE7340680379173526C
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa
Signing time:             Thu 13 Feb 2025 23:22:30 +0000
ROA not before:           Thu 13 Feb 2025 23:22:30 +0000
ROA not after:            Wed 14 May 2025 22:22:30 +0000
asID:                     32329
IP address blocks:        161.115.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:df:b7:ce:e7:34:06:80:37:91:73:52:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Feb 13 23:22:30 2025 GMT
            Not After : May 14 22:22:30 2025 GMT
        Subject: CN=f0606ecc-fb16-49eb-b38d-ecfc5329a24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:fe:b7:01:6a:ce:7c:b7:ef:94:28:93:b4:
                    bb:58:bc:ea:27:85:25:75:9e:e4:c9:bf:78:7e:1b:
                    f0:a2:1a:fb:4f:be:41:2f:25:46:f7:03:30:bc:30:
                    e8:b4:d6:48:7a:87:08:1b:1c:51:b0:82:74:f5:cc:
                    20:17:d3:f4:b3:c9:1f:9e:16:44:33:8c:4e:98:70:
                    67:52:d3:79:aa:26:1a:96:c5:3c:f3:97:80:94:b9:
                    e9:63:62:73:52:ac:be:af:61:8c:eb:55:e3:17:4a:
                    a2:2f:c6:4f:99:c8:82:a1:3d:d4:22:0a:1f:5a:ea:
                    df:a5:08:20:89:f1:72:d0:f4:2f:1d:8e:6c:1e:3e:
                    18:32:8e:0d:02:e0:ca:11:88:af:7e:77:ff:ef:96:
                    35:c2:a6:6e:6c:c3:bb:c5:5b:05:91:58:79:87:81:
                    50:01:9a:b6:23:29:87:e4:91:6b:ad:a9:6e:bd:83:
                    45:27:45:2b:a9:66:b8:56:6b:86:ce:c1:53:57:4f:
                    3b:4f:f0:13:17:19:65:cb:04:14:73:74:26:b1:e1:
                    5d:d5:28:40:59:22:c9:e0:97:79:f5:16:46:b8:67:
                    c4:1d:9c:c3:ef:bd:a6:9d:f9:13:5d:f4:4a:2d:20:
                    55:5c:ad:ca:08:ac:30:5f:49:1a:40:0d:a2:fa:1e:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D4:02:8E:25:AA:36:FC:E2:BE:DD:76:9F:54:2F:C2:42:CF:DE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:62:1d:a5:d9:55:4a:01:f3:b3:ab:4c:69:a5:59:d8:1a:
         76:e6:ec:de:52:26:6d:82:76:4c:97:34:4d:8f:67:fa:dd:78:
         ab:ed:bb:e2:b8:d7:89:e5:13:fa:7a:8b:06:24:9a:12:d5:14:
         f5:d2:53:79:39:0d:86:af:af:38:f1:9b:c2:2d:bf:5c:1e:6a:
         bf:0f:64:23:58:72:38:26:f2:a9:42:76:51:a7:91:90:c2:ee:
         4d:39:48:1e:37:a0:63:57:e7:62:6f:cf:99:b8:a4:33:f6:29:
         8e:04:0d:e6:fe:06:52:c6:25:9d:ba:31:19:3c:d9:b4:ca:09:
         60:cb:66:58:33:ce:5f:58:c7:ee:8c:50:cd:af:07:35:ed:de:
         e4:05:71:14:05:e3:0d:13:72:a3:50:55:54:1f:fa:35:ec:28:
         f6:74:be:34:f8:6d:b4:77:23:fa:b4:5d:c7:21:a0:74:ba:e4:
         03:84:29:79:6b:29:ca:bd:90:ec:cd:c7:37:21:fb:c2:d3:4b:
         d0:e8:d3:99:68:8e:b8:03:b8:3b:01:89:5f:3e:97:1f:48:59:
         4b:db:ef:79:fd:b4:38:b4:6d:5b:b6:56:1c:66:ab:f3:46:30:
         98:12:b9:7f:25:34:61:71:51:10:f9:67:ae:32:8a:9a:46:b1:
         f0:34:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:26:19 2025 by rpki-client