Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/47c6b4d8-1273-3be3-b355-561d935f5734.roa
File:                     47c6b4d8-1273-3be3-b355-561d935f5734.roa (raw, json)
Hash identifier:          PGeckNHZZYsmxyyX5hrOpZuS/X+6jGbWAx1d1vkn/Fc=
Subject key identifier:   05:38:6E:03:40:A0:3B:32:AE:21:38:8F:99:D9:8C:2A:EC:FD:75:74
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB0016CBA42734E13078F2C
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/47c6b4d8-1273-3be3-b355-561d935f5734.roa
Signing time:             Sun 03 Aug 2025 02:35:45 +0000
ROA not before:           Sun 03 Aug 2025 02:35:45 +0000
ROA not after:            Sat 01 Nov 2025 02:35:45 +0000
asID:                     22616
IP address blocks:        165.225.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:01:6c:ba:42:73:4e:13:07:8f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:45 2025 GMT
            Not After : Nov  1 02:35:45 2025 GMT
        Subject: CN=37ab188e-432f-42ad-86ee-4abc872246a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:8e:5a:ff:ff:71:89:44:9d:6b:55:f3:13:
                    a9:ae:5e:dd:e2:81:7f:2b:2e:b9:cb:9f:2b:4d:51:
                    52:91:d4:c0:13:e8:2b:37:7f:5e:03:7c:ca:58:f5:
                    fe:ca:0a:7e:7b:96:01:8e:05:c4:9b:ca:aa:b3:2a:
                    9a:7e:61:bb:78:df:13:37:15:99:5a:5d:24:ae:68:
                    ac:71:ce:a8:29:a8:52:de:95:fe:d2:72:41:d3:95:
                    ef:94:21:3c:c3:8f:01:c8:fa:66:9f:7e:f2:e6:58:
                    49:03:ef:6c:9a:ad:2a:82:4e:d1:fd:58:dc:92:67:
                    d4:6f:19:bb:68:b6:81:be:7c:e1:a8:cd:0f:71:eb:
                    b4:e2:89:b2:fd:13:d6:e5:7f:79:96:f3:9a:3b:4e:
                    b0:6a:3f:92:c3:2c:1f:0e:a3:e1:a3:20:b2:3d:2e:
                    17:8c:9c:bc:34:ea:17:9b:2b:ae:06:d7:69:0a:e6:
                    33:33:4d:69:b8:c6:5a:9b:2b:91:d1:79:f4:da:4a:
                    f3:69:32:cf:b9:5f:4c:de:ed:dc:a9:22:07:00:3c:
                    a5:57:34:b1:4e:82:90:1b:ec:67:5a:3c:c1:6e:1b:
                    78:52:7c:04:91:dd:f8:a7:f7:1c:af:fe:9f:4a:40:
                    3d:d9:04:5f:84:f8:5e:15:1b:8f:e2:f6:9c:c8:6c:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:38:6E:03:40:A0:3B:32:AE:21:38:8F:99:D9:8C:2A:EC:FD:75:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/47c6b4d8-1273-3be3-b355-561d935f5734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:7f:96:93:d4:a7:52:73:2f:ad:10:5d:e6:d4:eb:d9:99:
         4b:3b:6c:41:ee:b5:fa:47:34:82:56:61:d3:73:4b:5a:36:68:
         7d:cb:e5:22:e6:52:7e:1f:f6:ed:73:dd:a8:bc:97:09:24:ca:
         59:65:75:49:96:6a:8a:76:a2:1c:60:c0:f4:df:d8:1f:ea:8e:
         fa:6d:0d:de:94:e8:ec:80:e6:45:35:01:ba:61:5e:a2:13:b3:
         b8:ef:af:97:12:3f:00:d1:46:76:cc:f5:91:2c:54:c9:a5:62:
         ec:c6:d8:a8:36:5f:16:18:2a:2b:44:10:21:5f:16:19:5c:2c:
         ad:53:ca:e8:06:06:10:7e:14:70:77:8a:dd:45:20:6a:ce:65:
         8d:2a:1a:e3:1d:1f:23:ae:4f:45:57:ca:c8:9c:08:3f:d4:36:
         53:d5:50:40:b8:07:0a:04:56:29:a7:db:c8:55:fc:be:c6:c2:
         92:83:fb:31:38:aa:15:06:70:63:98:cb:3b:46:b4:45:8a:ac:
         8c:1d:a8:e9:a3:06:1e:e5:42:c0:f2:b0:01:81:22:61:64:58:
         5c:49:c5:47:f9:f4:4e:53:88:a2:82:01:18:9e:e7:74:ce:0b:
         ce:3d:83:d5:a2:b8:fe:4a:6b:9a:2b:d2:4a:b7:85:ca:0c:67:
         93:dd:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:54 2025 by rpki-client