Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42cd57f2-0e19-3b53-b457-0f0c591d16bc.roa
File:                     42cd57f2-0e19-3b53-b457-0f0c591d16bc.roa (raw, json)
Hash identifier:          nO6kuKa179+tF219FNwIJgBpU+MQ+VYCXQ/EMwfN7B0=
Subject key identifier:   F0:9D:4C:7B:0D:7C:84:EA:47:51:FE:AE:4D:CD:DF:32:46:A2:7B:C1
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB001CA8F0D392511B41300
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42cd57f2-0e19-3b53-b457-0f0c591d16bc.roa
Signing time:             Sun 03 Aug 2025 02:35:45 +0000
ROA not before:           Sun 03 Aug 2025 02:35:45 +0000
ROA not after:            Sat 01 Nov 2025 02:35:45 +0000
asID:                     22616
IP address blocks:        165.225.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:01:ca:8f:0d:39:25:11:b4:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:45 2025 GMT
            Not After : Nov  1 02:35:45 2025 GMT
        Subject: CN=b65716a6-6e82-445f-b588-29e6a4711a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:cd:ff:c7:b9:35:74:1b:cc:a7:90:2f:82:
                    f5:4d:8b:4d:aa:eb:24:45:e4:cf:7f:03:cc:9e:8b:
                    f2:06:2d:09:9e:41:2d:35:42:7d:94:c3:7e:b2:03:
                    1b:d0:2d:7e:76:88:23:19:9e:65:51:29:e5:c2:cd:
                    89:bd:4c:2a:8a:a2:e8:34:f0:6e:2e:6a:7c:e9:31:
                    4f:27:5f:eb:88:57:95:9a:2c:0f:41:30:8f:09:03:
                    7d:2f:cf:e1:f4:b4:51:d3:1a:84:58:43:8d:50:cc:
                    ed:2a:3e:7d:7c:99:a8:f3:65:1b:2a:c9:9f:05:85:
                    b1:7e:13:22:a1:15:8d:41:12:97:22:aa:31:02:1a:
                    2f:8b:75:03:43:5f:e4:ed:3c:95:c0:21:05:1c:7c:
                    3a:14:1a:2f:2d:d9:1b:35:b3:34:2a:30:db:eb:4b:
                    35:29:4e:3e:e6:2a:a2:c1:ec:d0:e5:24:3d:a5:1d:
                    98:13:a9:b6:aa:81:a7:20:fb:a5:1e:10:98:07:f3:
                    02:23:7b:01:61:8d:f0:bc:4b:35:78:11:64:01:77:
                    70:03:e2:6f:cd:60:08:34:db:75:45:a5:59:e4:c6:
                    eb:d7:5e:6a:22:1b:7e:7e:85:dd:b8:2c:4c:3d:19:
                    03:0a:c1:9f:ca:cc:87:f8:69:fd:d6:0d:5d:ed:95:
                    4f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9D:4C:7B:0D:7C:84:EA:47:51:FE:AE:4D:CD:DF:32:46:A2:7B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42cd57f2-0e19-3b53-b457-0f0c591d16bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d2:97:ec:32:a4:9a:9b:5d:7d:70:c4:fe:88:08:d1:80:47:
         fb:5c:cf:5e:67:ca:95:93:5f:d5:92:b2:bc:3c:c5:f2:3e:14:
         a6:01:99:36:8f:20:46:1e:d8:27:9b:c6:6f:7f:12:0b:1d:09:
         9d:0e:10:14:e9:6c:e4:2e:b4:fc:fc:4a:18:3f:05:9a:5c:f9:
         72:f6:0f:24:13:20:54:f0:76:d7:23:5f:32:bc:af:9d:9b:55:
         8b:90:73:6e:98:3d:f4:1c:c9:15:0a:50:ab:3b:83:59:7f:ff:
         8e:41:46:c5:01:8b:a8:c4:2e:e8:97:b3:8e:96:ec:e4:fe:6f:
         86:d4:a4:22:b0:a9:b1:b2:d6:ab:94:98:cb:f5:dd:d7:b4:8d:
         16:e3:dc:75:5c:ae:97:b6:00:00:99:5d:81:69:a8:87:e6:dc:
         5a:81:81:42:a8:8e:86:56:eb:9d:0b:80:1c:a3:71:78:ad:a9:
         8b:d0:0c:e9:f9:ef:e4:86:f7:3e:e6:5d:56:72:30:a7:60:10:
         69:6e:45:24:46:d4:9e:2e:82:88:15:a7:48:fe:0e:e3:64:9e:
         2c:b7:b2:31:44:5d:f0:b0:8d:4f:9c:65:6a:2c:78:6e:c8:1e:
         74:05:40:be:e9:a1:43:da:05:11:79:aa:63:bd:c3:b5:1f:bd:
         e6:b3:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:09 2025 by rpki-client