Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a7ac83e-4bc6-3275-b590-353a96f998c4.roa
File:                     0a7ac83e-4bc6-3275-b590-353a96f998c4.roa (raw, json)
Hash identifier:          NXRr8tnoNK9OqxHE1LBoJsZAMtib8oAG/DVshBD6tRE=
Subject key identifier:   65:D9:D9:01:E4:DE:A4:F8:E0:4B:E7:30:3C:EB:5B:B9:AC:B5:04:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2215DAF98F69A522C027CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a7ac83e-4bc6-3275-b590-353a96f998c4.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        75.65.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:5d:af:98:f6:9a:52:2c:02:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=b99fe7da-ef00-43bc-a3fe-8d8d7e3cc529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:26:d4:16:b5:28:fb:18:c5:19:19:63:c1:7f:
                    71:b9:93:80:06:0c:dc:e4:a5:36:7a:3b:fc:1e:75:
                    3d:cb:da:34:fc:09:dc:a2:0c:7c:ea:de:8b:33:9e:
                    64:76:ba:6f:d8:0f:cd:25:0b:62:0e:1a:59:b5:05:
                    8a:80:4f:bc:aa:d0:f8:74:f7:48:67:57:cc:78:24:
                    d2:0b:3f:a7:00:65:4a:d6:4f:3c:9a:d1:9f:88:ae:
                    ac:0b:aa:a9:ef:37:29:cd:66:58:a9:6b:37:f7:b3:
                    77:21:2d:c3:ce:6a:61:65:57:35:2f:3d:e8:69:e8:
                    cd:07:34:f2:b6:a1:6d:3e:94:e7:b3:b9:b7:cf:cf:
                    0f:6e:ef:5e:83:16:d2:59:07:1f:2b:b2:a2:e4:b4:
                    26:1f:63:2f:d9:c9:84:f4:f6:0e:b2:8c:7a:57:97:
                    3e:5b:e6:ee:0e:02:2e:59:6c:14:f9:60:9f:2c:4b:
                    24:67:5b:e2:96:e2:17:cb:4b:56:01:9b:66:03:37:
                    10:01:84:11:6c:b7:42:1a:19:e8:ba:da:c5:59:52:
                    2c:bb:01:64:64:6c:69:bf:04:35:87:66:5b:36:d9:
                    4d:6c:11:e0:c0:33:bc:6d:0c:1d:a3:09:bc:a9:d9:
                    fb:34:42:a4:36:29:a5:86:3e:4e:94:cc:f0:9a:d9:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D9:D9:01:E4:DE:A4:F8:E0:4B:E7:30:3C:EB:5B:B9:AC:B5:04:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a7ac83e-4bc6-3275-b590-353a96f998c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.65.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:7d:c9:df:80:ca:31:c1:1d:9d:69:60:1f:ce:ea:29:a2:75:
         5d:13:4f:6c:b2:45:31:ec:c1:c9:dd:60:3f:73:24:be:15:d9:
         b5:9c:cb:c0:34:8b:31:7a:c0:40:e9:d7:76:a5:2d:4a:d3:e2:
         38:90:60:11:7d:ab:d4:cd:10:c9:25:97:c4:e2:42:e2:21:6d:
         01:89:a5:ab:26:67:86:07:ef:a6:48:f8:57:55:01:40:0c:77:
         4b:28:f6:3b:2e:5f:6e:a7:4e:6c:d6:0a:5d:7e:55:f4:3c:2e:
         31:2a:fa:fc:28:95:bb:84:cc:e6:d9:40:8e:b0:bd:ed:04:2a:
         eb:9f:41:c3:c2:f2:d4:68:44:6a:54:ad:eb:3c:63:93:74:d5:
         6c:fe:51:c5:f2:e2:28:f3:90:39:f7:02:d4:cc:e4:c6:a0:6b:
         29:cc:49:fa:9c:b8:a1:cb:dd:01:84:c8:6b:f3:ab:06:a4:2d:
         f8:6d:65:51:fc:7d:21:fa:a5:9c:ca:4e:81:db:1d:d0:c5:57:
         c2:dd:60:c4:3f:41:f9:c1:18:4e:17:06:05:57:25:ab:ec:2f:
         e9:37:1a:fd:e0:22:51:c8:f2:7e:bc:ec:06:9a:57:e0:06:29:
         9c:87:e5:5b:e1:2d:27:90:78:6b:3a:56:50:fe:43:4c:e5:8d:
         6b:8a:03:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:29 2025 by rpki-client