Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/65230665-6876-326b-b45b-705bc994a466.roa
File:                     65230665-6876-326b-b45b-705bc994a466.roa (raw, json)
Hash identifier:          UFwg/hOmcZSQIK5TxZU5U5hgFzU7kxiPeSXdRlVDJCE=
Subject key identifier:   43:CA:E0:12:BA:1B:46:9E:AC:A7:B2:97:A3:9D:46:6B:ED:30:64:D2
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F4328584AA9C0DBEDAE1597AB841F0980
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/65230665-6876-326b-b45b-705bc994a466.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     213684
IP address blocks:        128.254.226.0/23 maxlen: 23
                          2602:fbec:226::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:db:ed:ae:15:97:ab:84:1f:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=fafc2421-8087-4fe9-b36a-b7ac76b4cea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b8:dc:24:8c:6f:f0:2b:a3:51:99:c1:7b:80:
                    3b:e2:86:35:30:d6:79:9b:e4:10:02:95:4d:07:ef:
                    8a:69:91:08:08:f7:82:dd:a1:4d:47:e3:df:a6:89:
                    64:3e:8a:40:f3:6c:e5:62:f5:c3:d1:74:fa:02:cd:
                    98:37:59:74:21:32:50:af:35:0e:19:d7:81:5c:5f:
                    dc:bb:e3:97:a0:cf:7a:8c:c4:d8:a1:93:90:2e:dc:
                    51:cf:1e:08:a5:65:8b:c2:8b:b2:36:b2:32:29:d6:
                    93:c1:13:10:da:6d:fd:c2:6e:cf:55:9a:2a:1e:96:
                    3a:ec:80:4a:fd:b1:f7:01:ed:4f:62:11:ea:d4:fd:
                    9c:1a:bb:41:e7:b9:a0:49:0b:43:1f:e8:75:b3:86:
                    bc:65:f8:8f:8e:b0:d1:30:f6:32:e9:81:22:d3:f1:
                    c7:c0:9c:66:50:34:69:53:ce:74:2d:52:68:97:dc:
                    cc:cf:65:8c:fa:3b:0c:30:ef:d7:6a:5e:0e:6f:c5:
                    e8:e0:76:1e:ee:13:b8:93:e6:7d:ad:aa:cb:47:cc:
                    b8:a0:08:fa:8d:2e:d7:d9:77:5c:5f:1f:56:1d:40:
                    a1:fd:84:29:ed:34:e1:30:4f:c1:af:60:6b:b2:f6:
                    98:db:f4:03:a3:c5:1b:51:f6:97:0b:44:2b:3d:00:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CA:E0:12:BA:1B:46:9E:AC:A7:B2:97:A3:9D:46:6B:ED:30:64:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/65230665-6876-326b-b45b-705bc994a466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.226.0/23
                IPv6:
                  2602:fbec:226::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:71:ef:c3:57:d5:52:17:74:3b:91:97:0b:14:a0:d6:01:3c:
         38:5b:a1:97:7a:b3:b0:12:e4:0b:5c:80:00:3b:66:81:92:ca:
         b6:1d:21:d7:fc:63:aa:39:57:72:52:32:6d:0d:d7:9f:74:a2:
         f8:d5:ec:ef:7b:e1:e1:a7:7c:d3:f6:e9:55:9c:99:44:0d:11:
         b7:17:b9:18:96:af:a5:49:70:a4:d3:ee:8a:76:52:2a:76:c6:
         f7:ed:a5:2a:b0:cd:6e:8a:3b:fd:e4:f5:ca:d3:bf:09:b6:94:
         c5:a2:c9:07:5f:4c:33:7d:cd:4c:34:5c:a9:fe:8b:dc:3b:8f:
         ad:a3:9d:6a:42:87:2a:9e:f2:0d:8e:41:c7:35:64:ba:cb:2a:
         c7:00:7c:78:1c:c6:27:53:ec:d0:b7:0b:d6:f3:e0:7f:27:26:
         87:96:da:7d:2a:0a:e9:4e:23:82:da:9c:9d:7f:41:6e:83:9f:
         80:3c:0b:4f:a9:45:71:7c:37:af:8c:35:ea:1b:23:3d:6e:31:
         aa:0c:09:43:8c:c7:a9:9b:df:c7:a5:83:10:6c:1c:c7:1a:43:
         95:a9:c7:c2:67:11:ba:b1:34:40:77:4f:dc:b1:9d:69:8a:7b:
         bf:f6:fd:ce:f8:96:65:6a:f3:95:c9:bd:42:8f:29:44:0e:5a:
         28:23:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:53:04 2025 by rpki-client