Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7b3d2913-fad3-3a00-9ce6-bcb76657bcad.roa
File:                     7b3d2913-fad3-3a00-9ce6-bcb76657bcad.roa (raw, json)
Hash identifier:          zvx0OG8jLqJ7C+E+U6k38v6PaOdb0coKD7EkMi9qVv4=
Subject key identifier:   74:02:86:67:07:C3:C4:0F:94:DD:F9:23:D3:63:A2:53:57:7B:67:B1
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB0013718CF223BB724F600
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7b3d2913-fad3-3a00-9ce6-bcb76657bcad.roa
Signing time:             Sun 03 Aug 2025 02:35:45 +0000
ROA not before:           Sun 03 Aug 2025 02:35:45 +0000
ROA not after:            Sat 01 Nov 2025 02:35:45 +0000
asID:                     62044
IP address blocks:        165.225.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:01:37:18:cf:22:3b:b7:24:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:45 2025 GMT
            Not After : Nov  1 02:35:45 2025 GMT
        Subject: CN=0eaf2bbd-1459-42b2-8651-17757cea1065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:1b:d6:9a:d3:b8:9d:44:4d:cb:31:cd:56:
                    40:47:cf:d4:1f:0b:bc:87:9b:52:ab:fd:0c:8a:3c:
                    e4:97:4d:0d:43:94:3e:66:ae:b7:ef:0b:e2:26:1d:
                    37:9d:a6:35:42:f2:0c:e0:d5:4a:63:5d:a3:31:fc:
                    3e:b5:77:4b:43:4b:f1:0a:90:db:63:a7:82:9a:c1:
                    33:91:81:9e:74:57:ed:c3:ca:08:69:28:7a:06:00:
                    73:6e:92:5c:82:8c:a8:30:ca:dd:8f:c1:29:72:80:
                    41:54:5c:5a:4b:00:a4:33:90:c5:38:4b:d5:17:bb:
                    bd:06:88:2a:8c:b4:69:d5:49:85:c7:e6:88:12:39:
                    f6:31:dd:20:8f:24:93:01:b4:08:af:92:3a:13:78:
                    11:ae:c0:ae:dc:2d:97:a8:6f:94:31:90:81:46:ce:
                    6f:56:4f:72:bf:d1:e5:9f:65:00:a0:de:21:d3:0f:
                    46:89:1d:80:64:f8:07:1a:f9:49:2c:a1:33:40:d1:
                    8c:ef:66:32:20:d8:76:66:f1:3e:88:74:6d:28:58:
                    2c:b4:1a:c4:4a:1a:bd:9c:9b:15:a8:8c:85:a4:23:
                    93:65:fa:08:ce:01:80:e8:74:f2:28:d6:44:77:e8:
                    5b:b8:22:ba:07:b7:35:4d:18:a4:88:36:85:f8:91:
                    d7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:02:86:67:07:C3:C4:0F:94:DD:F9:23:D3:63:A2:53:57:7B:67:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7b3d2913-fad3-3a00-9ce6-bcb76657bcad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:33:e1:36:6d:75:f1:61:f5:87:2a:92:58:25:9f:94:53:a9:
         d6:8c:fa:3b:f7:06:eb:40:3d:62:32:dd:4a:19:7b:fa:db:38:
         6a:75:1e:6f:48:96:72:e4:bf:3a:38:17:14:30:d0:fc:09:47:
         98:d2:51:c0:80:2e:0d:25:82:71:22:32:78:57:c1:fb:64:17:
         a4:d7:25:2c:dd:cc:44:7d:10:62:67:a0:30:61:7f:a5:cc:cf:
         fe:ed:5b:3c:56:3f:4c:62:86:28:85:4d:7d:00:f8:f4:fa:9d:
         82:e3:2b:53:13:1f:52:1b:69:74:35:66:4d:46:31:21:23:78:
         94:f3:1c:f9:57:a3:4a:66:f8:10:8b:cf:e6:72:97:42:fd:35:
         27:98:58:fe:96:f4:71:13:85:e6:cd:76:d2:ab:4a:56:25:21:
         e6:b2:cb:85:86:83:9b:34:a2:fc:df:09:8a:a3:97:94:c4:e4:
         87:d7:5d:8b:aa:b2:7c:fb:37:89:45:5f:e2:02:ed:b6:22:dd:
         7a:b5:70:6d:fe:fd:7a:10:82:03:8b:2d:36:89:50:6d:48:96:
         20:d1:b5:7a:3d:6a:17:0f:00:6f:46:ce:ae:de:2d:84:a4:99:
         ba:e8:f2:f5:ca:35:36:98:f3:8f:d5:bb:34:e9:fe:be:21:17:
         ce:f0:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:14:20 2025 by rpki-client