Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c5cb9f77-f0af-3a05-8611-473a4641a268.roa
File:                     c5cb9f77-f0af-3a05-8611-473a4641a268.roa (raw, json)
Hash identifier:          jmTM2Rvvq2bNKJOU0QY0FCbXORJ7Ys9aQeAZP7hDx1o=
Subject key identifier:   0B:6A:DE:A2:37:67:9E:CE:E8:18:90:21:44:13:34:EC:31:61:1B:09
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB004DA684ABEE525A28880
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c5cb9f77-f0af-3a05-8611-473a4641a268.roa
Signing time:             Sun 03 Aug 2025 02:35:46 +0000
ROA not before:           Sun 03 Aug 2025 02:35:46 +0000
ROA not after:            Sat 01 Nov 2025 02:35:46 +0000
asID:                     22616
IP address blocks:        165.225.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:04:da:68:4a:be:e5:25:a2:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:46 2025 GMT
            Not After : Nov  1 02:35:46 2025 GMT
        Subject: CN=5d220949-5590-4626-9e85-238baac0a28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:82:b3:8e:fe:6f:9f:c4:b5:06:fa:9b:73:
                    7a:44:a5:19:66:be:90:8b:86:3e:18:71:de:fa:11:
                    56:17:a5:af:40:6a:5d:13:1e:03:29:4d:87:f8:b1:
                    de:c3:b9:17:4b:8a:ae:90:d1:ac:ea:44:e0:08:20:
                    64:4a:c1:88:2e:e0:8b:62:7e:48:e2:55:3d:12:63:
                    db:36:61:9a:dd:b1:34:51:28:83:59:83:ef:69:cf:
                    96:40:d6:e9:60:6c:a6:5b:da:95:ed:65:b0:64:c3:
                    e6:4c:80:6a:bf:4e:2d:3c:a8:ac:7a:f4:8b:4a:da:
                    5b:99:56:f3:47:e8:36:df:9e:e5:50:aa:76:6d:35:
                    20:6c:30:f1:c9:30:78:44:28:6d:06:ee:27:26:51:
                    03:10:9a:dc:20:69:9a:6a:8a:ba:eb:9e:65:a3:5e:
                    36:f1:9e:b5:92:d5:8a:97:75:39:63:08:ae:82:53:
                    0b:a5:f1:1b:59:4d:bd:20:bf:b6:92:6b:44:24:38:
                    fb:e8:21:12:7b:27:04:83:d4:ca:76:c7:63:43:e6:
                    c5:ec:43:71:14:17:fa:3d:22:5d:0f:7a:6b:ed:6d:
                    09:e6:10:1c:ac:25:73:6e:41:32:91:41:f3:c9:a1:
                    72:7b:44:9c:3e:5b:ab:fc:59:cc:15:22:42:47:8a:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6A:DE:A2:37:67:9E:CE:E8:18:90:21:44:13:34:EC:31:61:1B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c5cb9f77-f0af-3a05-8611-473a4641a268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ff:a4:1c:cf:27:f4:04:bf:b8:af:8e:0b:8a:6e:66:fb:eb:
         f4:4b:0c:a5:dd:53:09:f4:cf:38:a7:77:ea:18:50:73:5f:62:
         39:93:2b:ad:c1:9d:df:55:ec:27:97:90:55:30:60:f6:0f:da:
         8c:72:04:b3:ad:dc:4d:54:03:40:58:62:7b:67:c0:69:66:93:
         e3:e2:58:26:1a:0d:e8:86:0a:1c:9f:4f:5a:ef:77:08:e3:c0:
         45:0c:2e:b0:2c:3d:c8:55:02:21:66:92:59:87:f3:6f:77:3b:
         82:cc:44:c5:ac:e6:f0:a1:0b:37:25:b1:9b:96:d6:b3:8b:36:
         ee:98:09:8f:b4:eb:bc:a2:ae:82:e1:36:33:0b:8c:60:24:ae:
         8e:8c:f2:78:ef:fb:82:89:b7:37:9c:54:62:b2:6c:87:c3:4e:
         2a:25:0a:ab:27:5d:9c:84:92:db:db:1a:9d:92:bf:07:38:13:
         74:ef:8b:07:dd:d0:a0:59:33:95:83:42:92:20:fd:5d:d0:f8:
         f3:66:53:67:0a:2b:5a:21:47:4f:c4:bd:b0:3b:be:3c:8d:c3:
         a1:82:e3:be:8d:f9:f8:5a:b9:06:63:31:66:b2:da:12:bd:09:
         06:18:4f:3f:47:ea:1a:b1:dc:c5:a3:54:29:4b:3d:b9:6e:b7:
         fd:0d:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:23 2025 by rpki-client