Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa
File:                     66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa (raw, json)
Hash identifier:          axhLSwrCRHsNy24PPu8nsiArVAshGQkXa2RuxdR0+gM=
Subject key identifier:   5D:E9:E5:C7:97:85:42:DD:7B:A8:2D:EC:C9:02:AE:B3:32:FF:8B:F5
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB003EF23FD518725698E80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa
Signing time:             Sun 03 Aug 2025 02:35:46 +0000
ROA not before:           Sun 03 Aug 2025 02:35:46 +0000
ROA not after:            Sat 01 Nov 2025 02:35:46 +0000
asID:                     53813
IP address blocks:        165.225.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:03:ef:23:fd:51:87:25:69:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:46 2025 GMT
            Not After : Nov  1 02:35:46 2025 GMT
        Subject: CN=4e8c6aea-747f-4eaf-ada3-5ee030bfc5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:8f:0d:cd:6d:93:3f:05:61:c6:89:6f:ac:
                    b9:3f:e7:3a:ba:83:bf:ff:13:bf:a4:a7:a1:bf:5b:
                    b5:69:a3:71:7e:aa:1d:e6:6a:67:71:3f:e6:df:ed:
                    41:a3:44:44:15:5d:f0:75:19:0a:f7:0c:05:b0:b5:
                    eb:9e:1d:71:2e:b1:dd:99:e0:53:d2:1a:51:df:8e:
                    c8:2c:27:f2:51:5c:7b:3b:d1:83:c9:aa:54:4f:39:
                    21:f7:5a:bd:87:f1:16:ea:5b:c1:81:ce:1f:3b:bb:
                    3a:97:dd:84:52:02:a4:15:c1:3a:93:3b:6b:f4:5d:
                    c3:89:ec:ad:60:57:eb:8d:ad:8b:99:13:68:8f:33:
                    02:f3:50:5d:0e:4f:70:27:65:e6:94:4d:1b:b2:65:
                    d4:6d:8d:82:0e:61:17:41:63:20:56:0e:24:7c:5c:
                    62:a5:56:0f:b2:93:a6:db:81:28:81:a0:36:e1:c6:
                    79:ba:53:de:56:7d:f7:5e:fb:3e:d3:65:42:a5:88:
                    e8:f3:ae:29:56:48:20:ed:d1:36:b3:50:a7:06:e5:
                    bc:1a:f6:98:05:50:74:33:87:43:bc:3d:fe:42:90:
                    76:6a:99:19:60:2a:72:8e:68:da:88:5d:9b:a5:bd:
                    a0:d4:1d:1f:b6:38:92:c6:42:fd:30:48:b9:7b:18:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E9:E5:C7:97:85:42:DD:7B:A8:2D:EC:C9:02:AE:B3:32:FF:8B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:59:26:4a:0b:c9:5b:14:e4:f4:69:d2:ca:ee:bc:f9:60:7c:
         60:82:3b:d8:52:b5:ba:05:62:87:b6:5c:46:d1:59:38:45:95:
         4f:d8:fb:e7:ae:00:c0:d8:83:a2:93:ef:91:c3:4b:fe:72:4b:
         28:2d:70:46:5b:91:88:0b:bb:87:df:34:d4:f0:be:6f:3b:f3:
         c0:9f:52:31:39:b3:90:c2:d3:89:ed:c1:f6:29:48:49:68:30:
         c1:93:b9:0f:54:19:77:34:68:84:4c:e0:3d:69:43:bf:22:50:
         9e:be:4c:13:56:a7:d9:2a:fc:c1:53:54:8e:61:58:3b:41:89:
         d9:7e:06:e9:e5:77:93:dc:06:55:1a:b8:31:bb:a0:6c:bd:06:
         58:fb:ed:a7:e6:d8:41:ea:9b:61:8f:09:8c:b0:27:d5:bf:72:
         00:50:6a:4e:92:61:44:5d:55:92:af:62:72:7d:a2:7e:a6:7d:
         2a:c8:9d:f2:eb:1d:21:9d:71:79:7f:01:6c:26:83:aa:32:bc:
         32:d4:9d:83:8e:6a:a5:68:d2:fd:30:9d:1e:6d:c8:61:a6:75:
         f1:73:2f:cf:d4:f9:e8:6d:eb:b5:35:2e:df:80:40:8a:dd:df:
         3c:76:17:a0:cd:c5:52:b0:64:f4:ca:4f:91:c6:47:32:ee:86:
         75:1f:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:32 2025 by rpki-client