Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa
File:                     7fa946ff-2576-3c20-a017-5633e6ef2732.roa (raw, json)
Hash identifier:          z8edzw4vMIaWRIThxfwUZ/MuPpeQPLriYuyySo/lXGc=
Subject key identifier:   31:8A:34:8B:CC:67:1D:86:48:E9:A5:0A:F8:8D:9E:11:A7:B0:F5:DE
Certificate issuer:       /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
Certificate serial:       010D0C9F43285849F01A8097ED384D3256568200
Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     14618
IP address blocks:        165.125.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:80:97:ed:38:4d:32:56:56:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=3b41b4c2-75f7-4311-960f-f1c4cc99d0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:82:83:b1:c4:35:77:d9:73:0a:89:df:35:
                    05:a1:f5:89:0e:de:53:c1:b2:27:a3:57:a4:5e:79:
                    38:c6:cb:dd:81:46:c7:53:19:bc:87:55:fa:e5:f5:
                    35:5c:55:87:ea:d9:36:3e:fb:09:3f:7a:a0:64:3c:
                    0c:22:a5:aa:64:67:f2:af:1c:d4:c3:e1:d8:11:68:
                    8f:0c:54:b4:fd:6c:af:e3:5b:e8:67:87:5f:04:e8:
                    48:35:6f:57:8e:a9:77:04:c4:b8:42:39:75:a6:c9:
                    98:19:7b:d9:bf:6f:97:88:a5:82:84:bf:65:27:cc:
                    55:89:7b:0d:97:66:83:db:24:56:08:e6:3a:6f:92:
                    7e:a3:d8:54:23:d0:02:52:e6:87:f6:b7:6e:66:70:
                    9e:40:fb:64:8b:d6:69:37:6e:ed:e3:bc:0f:7b:7a:
                    5e:6d:59:c1:1a:e9:c0:b5:25:1a:d6:24:c2:ae:54:
                    75:9b:70:3c:25:21:e3:59:06:fb:f7:22:d7:20:01:
                    0d:14:45:7e:f3:30:07:b6:42:37:d8:68:ed:06:f6:
                    af:c6:4a:28:19:22:0d:b5:dc:01:ab:64:81:0d:94:
                    b3:e1:4e:c6:c9:fc:3d:a0:74:d8:78:f3:61:fa:d9:
                    39:31:6e:fb:10:ac:cf:39:f5:81:fb:2c:6e:49:72:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8A:34:8B:CC:67:1D:86:48:E9:A5:0A:F8:8D:9E:11:A7:B0:F5:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.125.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:85:8d:e4:9a:80:6b:36:62:3a:31:e9:c3:d5:88:ac:89:
         02:36:b0:63:bb:6c:95:dc:71:ee:43:bf:44:ff:1f:6c:e9:14:
         62:cd:0a:06:b0:35:81:40:35:95:02:06:98:4b:95:9f:3a:d4:
         72:72:23:db:5e:89:d5:b1:a1:ae:48:eb:09:f1:6a:da:86:32:
         65:0b:b7:39:e7:2e:ad:c0:de:48:52:31:19:9f:cf:c9:ee:62:
         fb:4c:43:da:45:06:e9:35:78:c0:b5:d3:b6:f5:bc:97:3b:d3:
         63:90:ce:02:bb:24:5a:72:22:83:b7:d4:bf:8f:29:ba:0d:5a:
         f0:9b:5c:00:98:76:82:f0:06:12:02:13:95:b7:70:e4:60:7f:
         3d:3b:d9:8d:db:6b:23:93:ae:80:ea:3d:a4:82:20:7e:d5:be:
         78:c2:2c:dd:a2:9e:be:a5:d6:9f:62:dd:5b:b0:47:94:a5:02:
         15:91:eb:2d:52:58:00:e3:ec:f2:da:7a:6a:5d:73:09:8e:b2:
         8e:68:da:67:a2:be:30:86:22:57:e5:8a:1c:31:c6:c0:6c:a5:
         60:4b:04:c0:53:d3:3f:2d:a8:f8:b7:63:3d:95:78:38:3b:18:
         a9:c0:71:0b:69:ee:29:5f:32:60:fb:b5:5a:fd:cc:46:fa:d7:
         9c:e7:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:58 2025 by rpki-client