Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/692acf08-7ed3-33a9-a2db-7ec761a43eea.roa
File:                     692acf08-7ed3-33a9-a2db-7ec761a43eea.roa (raw, json)
Hash identifier:          GPsEublrJ4pSqm04BV6NNy3JNYPRh+wEstrIoLpwPnE=
Subject key identifier:   F6:AF:82:E9:07:3B:C8:3A:E2:3A:2F:87:EE:BD:51:EE:48:12:28:A3
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB0032AE0B5151B9E2D26DC
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/692acf08-7ed3-33a9-a2db-7ec761a43eea.roa
Signing time:             Sun 03 Aug 2025 02:35:46 +0000
ROA not before:           Sun 03 Aug 2025 02:35:46 +0000
ROA not after:            Sat 01 Nov 2025 02:35:46 +0000
asID:                     62044
IP address blocks:        165.225.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:03:2a:e0:b5:15:1b:9e:2d:26:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:46 2025 GMT
            Not After : Nov  1 02:35:46 2025 GMT
        Subject: CN=19e69f0e-e4f0-46bd-af0c-67ea323a1d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:05:1b:64:f5:80:81:f9:d4:98:83:58:05:
                    ef:0c:70:db:50:ed:8b:f7:22:cb:59:26:7a:b2:6d:
                    b4:81:1c:8a:5d:e8:60:20:a7:2c:aa:1a:a5:f5:49:
                    44:27:4e:b7:ca:a3:4e:8d:72:d0:88:62:32:13:ec:
                    50:db:9b:8e:3d:5e:49:f1:21:a5:d6:21:95:9c:ba:
                    9a:ae:8b:08:4e:95:9e:38:0d:b0:72:5d:08:3f:2c:
                    6f:dc:ee:5a:66:fe:ae:31:59:ba:b3:38:51:96:a2:
                    60:81:19:3a:ae:25:00:93:18:01:1a:7b:c6:7c:31:
                    b7:a7:8d:dd:83:be:e0:71:b4:f8:ea:33:f3:a6:1d:
                    c6:00:ad:27:03:de:4e:be:ad:38:9e:c1:57:44:2c:
                    9f:46:10:57:fe:a7:43:2b:27:40:a1:2f:ea:cc:79:
                    b4:6f:d0:2b:d1:d1:5e:08:5e:63:8d:aa:7a:dc:62:
                    b9:21:54:1f:78:ca:45:70:bb:c0:2e:e0:4b:3e:25:
                    19:dc:60:a0:01:88:b1:78:0c:d5:c4:79:ea:1c:43:
                    7c:9a:ae:29:9e:15:ee:8b:e3:ca:82:4a:de:d8:d4:
                    84:a1:62:fa:14:cd:88:ca:91:ef:ef:28:86:e1:10:
                    77:92:f3:8f:66:57:97:5a:13:fd:07:f0:a5:08:2b:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AF:82:E9:07:3B:C8:3A:E2:3A:2F:87:EE:BD:51:EE:48:12:28:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/692acf08-7ed3-33a9-a2db-7ec761a43eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:69:fc:a8:f3:3f:3f:a2:31:c3:f9:6f:9b:3c:49:da:f7:9f:
         c5:41:6c:49:99:0c:b4:e1:42:ea:2b:2f:ab:e6:80:26:4a:13:
         b3:e2:79:f7:a3:73:50:d2:f0:b8:42:c5:bc:9e:a6:b0:73:e4:
         75:1f:e9:8c:30:1d:91:de:d9:7a:79:6c:d1:80:02:7b:04:80:
         40:49:f7:47:5e:fd:35:d0:3e:97:86:06:8b:27:e2:85:c8:e5:
         41:99:a0:2c:7e:78:59:e0:b1:3d:20:b9:31:9a:cd:b3:1e:00:
         be:d2:06:09:1a:0c:61:35:0e:6c:aa:21:ef:e1:a9:37:7b:e9:
         60:db:a0:44:54:7c:6e:5a:c1:a4:c9:ea:e5:81:b9:d5:de:82:
         be:32:86:5e:7d:1e:5c:58:86:d6:5b:23:b0:f2:cb:82:49:2d:
         41:df:05:cf:58:56:e6:52:88:16:aa:5c:04:d9:8d:64:92:b3:
         01:2f:60:50:09:22:ee:fa:aa:1e:29:8c:ef:4e:84:43:64:a0:
         95:a6:95:1a:67:54:a6:56:6a:9d:ec:60:25:c7:23:8e:f4:92:
         1f:b6:a1:02:b0:5b:58:04:9d:02:19:2f:39:f9:0d:bd:4b:8e:
         6d:14:ff:43:d8:94:28:aa:bd:26:82:34:f1:aa:11:c1:55:ed:
         7f:b3:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:53:35 2025 by rpki-client