Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f898266f-fb35-3786-8b2d-eaf89cb6dba4.roa
File:                     f898266f-fb35-3786-8b2d-eaf89cb6dba4.roa (raw, json)
Hash identifier:          UyAc4aTBZNafdWINDQWx7OWEET/xHH2bMcqJZbG8/i8=
Subject key identifier:   99:B2:DC:73:F2:BE:44:89:09:64:76:88:DC:41:65:A9:41:74:81:B6
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00247C162EB056B8F6040
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f898266f-fb35-3786-8b2d-eaf89cb6dba4.roa
Signing time:             Sun 03 Aug 2025 02:35:45 +0000
ROA not before:           Sun 03 Aug 2025 02:35:45 +0000
ROA not after:            Sat 01 Nov 2025 02:35:45 +0000
asID:                     22616
IP address blocks:        165.225.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:02:47:c1:62:eb:05:6b:8f:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:45 2025 GMT
            Not After : Nov  1 02:35:45 2025 GMT
        Subject: CN=93b68a70-178d-4e4f-81c7-ee1567a2b1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7b:86:e6:50:2b:d3:41:a6:6e:0e:9e:81:74:
                    6f:00:dd:eb:51:89:da:73:b7:9e:4b:97:5b:f7:34:
                    1e:0b:b9:e3:3d:38:84:12:5e:e6:23:9f:90:f9:66:
                    ac:2b:6d:bb:0f:cd:b9:fe:04:d0:c5:5a:e6:a2:7c:
                    69:4b:e0:64:1a:c6:80:5f:e7:db:9e:05:b4:ad:8b:
                    2a:b8:3d:d4:d0:44:06:0f:f3:5b:44:c0:d0:47:3f:
                    db:17:3d:7a:c0:78:34:3c:bc:33:be:9a:12:cb:0e:
                    6c:0f:ea:95:46:35:e2:2c:71:96:e7:32:96:a6:30:
                    84:6d:83:20:47:84:9b:74:b3:b6:43:03:c5:74:92:
                    49:36:1e:4f:9e:b2:a5:0a:a1:bd:97:e0:b3:64:4c:
                    97:62:17:19:c3:1c:f8:e4:cf:0d:b9:f2:5c:3b:57:
                    50:5a:f4:80:76:e8:3f:59:42:69:df:8d:c6:d8:98:
                    ce:17:4b:7a:ac:b7:45:95:7e:1b:82:e1:e7:fe:06:
                    d3:7d:d0:9b:32:92:fb:eb:b4:c9:73:50:3c:de:9a:
                    a4:73:ef:c9:56:53:da:d8:29:b0:ff:ea:53:50:c7:
                    83:3f:be:b8:43:97:e8:59:fe:d0:52:ae:4c:9b:fd:
                    e9:4e:a0:2b:60:5d:69:f4:89:fc:6f:03:2b:12:4e:
                    9e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:DC:73:F2:BE:44:89:09:64:76:88:DC:41:65:A9:41:74:81:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f898266f-fb35-3786-8b2d-eaf89cb6dba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:62:15:01:12:47:e6:18:cc:6d:16:b0:19:f7:4e:94:5e:72:
         2c:13:6f:36:4e:ba:00:f4:d5:82:8c:4c:7d:e0:31:8a:ec:da:
         84:6b:81:81:60:8b:78:7a:bf:55:42:1c:dc:d1:27:09:af:d4:
         20:c4:b1:83:db:ea:ec:49:2c:94:0f:73:56:69:08:1c:10:0c:
         65:0b:54:01:e7:02:b6:26:80:91:a6:2e:c7:0e:9a:3f:00:b7:
         6c:a6:3c:a9:ad:46:7f:2b:7c:0e:50:4c:f1:36:2e:66:64:73:
         7e:d5:be:70:69:f6:29:7b:17:dc:2c:a1:f1:8c:7f:61:df:89:
         be:f0:fd:f0:bb:b4:c5:45:6a:fd:3a:3e:f1:1b:5c:34:5e:24:
         d4:7f:84:10:8e:a6:3d:ea:04:ae:5f:97:fd:fc:15:a2:91:11:
         cd:80:bd:0e:f6:36:4c:f0:c9:e0:2a:98:05:a8:e5:e9:0d:2c:
         07:48:ae:b9:c3:ea:db:aa:4a:6d:50:79:2b:ef:81:15:5d:6b:
         34:bc:c3:7e:22:c9:83:15:d8:0b:fd:41:9f:24:05:bd:c4:00:
         63:7f:2b:b6:3b:b1:fe:25:69:a4:cc:ea:4a:da:48:32:fb:a0:
         5f:12:37:50:90:48:42:81:fa:b8:32:72:70:6d:cc:f4:2d:65:
         b1:ee:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:57 2025 by rpki-client