Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/fef7f89c-5424-30b1-8308-96892e1bf91b.roa
File:                     fef7f89c-5424-30b1-8308-96892e1bf91b.roa (raw, json)
Hash identifier:          raIot77JgViCQAxAiFRFBeoFGMRKmmRG/Kf1Ol0Iub4=
Subject key identifier:   2D:6B:20:BA:2D:65:25:62:60:69:B7:EE:53:75:70:E6:B9:25:C9:D2
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584AA160DE19BC3E57E03176AF80
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/fef7f89c-5424-30b1-8308-96892e1bf91b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     396042
IP address blocks:        148.76.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:de:19:bc:3e:57:e0:31:76:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=31e49d62-7a1a-48de-b496-8d736e6c697f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:dc:b2:ab:e5:8a:70:40:04:6e:4a:1e:d9:
                    b6:1f:e5:50:c0:2f:1d:bc:5b:39:4c:d9:27:9d:24:
                    89:0d:be:01:ec:4b:bf:5a:0e:6e:c7:e3:95:c2:86:
                    06:75:da:17:5b:6f:65:92:c4:4a:be:f8:c2:ac:46:
                    39:1d:58:df:89:94:51:c9:c8:a8:aa:33:6a:62:5a:
                    c9:05:b6:ce:cc:20:38:19:b5:b1:7b:d7:5d:7d:f3:
                    b7:97:a9:43:49:bc:81:11:83:fb:67:fa:1e:4c:1d:
                    e5:6d:cd:e3:2c:d7:af:87:b9:0d:c9:7e:11:9d:7e:
                    f3:f3:c0:61:80:44:db:ea:82:93:ce:36:d7:8b:da:
                    c6:86:db:47:86:ee:a9:0c:b0:48:c6:14:4a:51:af:
                    cb:83:24:51:b6:38:02:a4:f2:fd:40:3d:fd:8d:ab:
                    40:f9:de:f4:f8:86:2a:04:c1:0c:12:5b:03:90:03:
                    a0:b9:cf:a4:3c:a5:27:ac:4d:3f:ad:09:94:47:38:
                    05:a1:71:32:b8:5d:66:30:f0:15:6c:13:1a:53:2d:
                    43:3e:68:78:92:18:9f:20:d0:58:59:ea:01:98:b9:
                    cb:06:c6:72:53:85:69:8c:45:69:b6:bd:c0:e8:51:
                    33:2e:84:42:06:95:42:f6:f9:7f:1d:64:70:47:80:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6B:20:BA:2D:65:25:62:60:69:B7:EE:53:75:70:E6:B9:25:C9:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/fef7f89c-5424-30b1-8308-96892e1bf91b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:5b:60:0d:3c:39:36:a5:c4:cb:7a:cb:81:95:05:d4:60:
         3b:cd:86:7c:75:e2:08:75:e1:e1:3f:30:23:1a:b5:91:5c:b1:
         dd:d9:49:8f:66:86:5b:f1:2b:9e:61:c2:fe:5a:5d:ea:4d:b9:
         c3:3f:35:f4:ee:32:7f:f0:62:f3:03:24:1e:1e:39:fe:cd:9a:
         50:87:a3:a1:08:d8:02:18:44:c3:62:f9:19:d1:6b:c0:b6:42:
         23:28:5e:bd:7d:25:bf:7c:e7:46:5f:7b:2c:01:09:79:9d:bb:
         66:e8:29:e5:4a:92:aa:5b:f0:9e:a9:d9:d7:00:7c:ec:ca:09:
         72:8c:b4:e6:53:a3:2d:54:84:e1:08:bf:20:be:89:2f:24:2b:
         65:c0:0f:09:82:6b:c8:35:68:97:5a:8c:a6:b0:29:06:e5:5d:
         ae:d0:97:04:4f:f5:57:c6:dd:47:1f:ce:bd:7a:a8:11:ce:85:
         a6:9c:55:ab:59:20:01:2f:13:88:9a:5d:f9:20:97:f0:37:b6:
         ea:5c:0d:c2:c8:cd:22:eb:c5:a0:f4:ec:e8:39:16:d2:bc:fc:
         d5:a4:19:3e:c3:f9:2e:a7:42:e1:71:d2:f8:14:13:77:40:0a:
         4b:3f:d7:8e:2e:ad:64:f4:e4:8c:6d:f5:af:bc:65:cc:33:66:
         ec:1a:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:24 2025 by rpki-client