Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa
File:                     d0812d54-f0d3-311e-83ad-e1bce560e63f.roa (raw, json)
Hash identifier:          Gk0Yl/5Ms94b1hXohyJIEY+kA7NAA3G3V07M39FiGHk=
Subject key identifier:   3F:8F:6A:C5:ED:EC:3D:D8:A1:7F:93:C2:9B:46:34:09:0A:4E:08:5F
Certificate issuer:       /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial:       010D0C9F4328584AADF1271F2EBC3BEF07F276C0
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     15404
IP address blocks:        148.188.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:27:1f:2e:bc:3b:ef:07:f2:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=fd60ba4d-0983-4811-a507-7fb0f28719e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:73:7e:48:34:13:ea:03:1b:05:0a:c6:49:
                    59:f0:7f:2a:f6:f6:50:15:c8:fa:f4:81:58:e5:05:
                    e0:4a:72:26:62:fb:e7:8c:4b:86:3d:87:18:9e:f5:
                    49:f0:90:25:d7:bb:fa:22:e7:4e:6a:71:76:57:05:
                    95:ef:04:b9:78:9e:82:4d:ba:c5:a0:5b:4d:6d:24:
                    d3:aa:4b:a8:be:a6:33:e9:a0:bd:25:da:9d:54:c2:
                    6d:07:f1:bb:6f:d6:be:b1:09:03:e9:2c:45:3b:22:
                    6a:dc:42:ae:91:7f:b0:55:79:39:72:5c:d3:f8:35:
                    92:72:81:ae:25:1c:05:d0:8d:97:c4:ff:8f:eb:33:
                    75:db:1b:81:80:11:1c:58:d3:5c:86:3b:af:b3:55:
                    84:09:28:76:85:7d:50:4b:30:ef:94:95:32:b3:f3:
                    2d:2d:4d:3b:8e:df:e3:15:06:ff:8e:6b:b7:26:55:
                    c0:a9:32:ee:f3:67:f8:9e:21:ac:3a:f4:42:3b:0f:
                    a4:5d:03:99:63:fd:fc:84:f6:a8:b4:90:4d:09:dd:
                    e1:f3:aa:df:4c:f5:ee:3b:6b:91:a0:35:0b:fa:50:
                    d1:db:10:37:3f:2b:83:e7:23:0d:f1:7a:fc:34:f5:
                    79:82:37:1c:d3:d5:69:e9:1f:7c:c5:40:41:cf:dd:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8F:6A:C5:ED:EC:3D:D8:A1:7F:93:C2:9B:46:34:09:0A:4E:08:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl

            X509v3 Authority Key Identifier:
                keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.188.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:56:c1:de:2c:ec:8e:f2:8d:cb:e3:5f:ee:75:65:d6:b9:21:
         9e:55:b9:23:37:16:87:80:69:f0:51:b5:ee:c8:79:94:5b:89:
         79:58:49:de:69:69:01:b7:bc:4f:b2:6a:fa:5f:8c:5c:01:54:
         a6:9e:d4:0a:b3:f7:f0:14:0d:64:bd:51:ef:dd:b5:8f:6b:51:
         f7:63:c4:e9:97:3c:b2:4e:7e:dd:50:db:f5:a3:a1:5e:b8:89:
         56:e9:cc:1b:f3:39:ae:9e:b6:78:d3:0a:ee:d3:26:d4:23:7d:
         7e:a8:cb:85:42:37:04:05:0d:03:d5:d9:ec:11:27:a0:7a:04:
         30:c5:8b:22:6c:80:f9:4b:03:6f:a1:3b:96:f8:7e:9e:e1:54:
         1b:a9:10:47:20:6e:08:63:6e:f3:9d:be:18:60:b2:ea:95:14:
         cc:19:ca:36:ad:ad:be:ed:69:51:9e:bf:90:95:94:81:5b:21:
         70:07:64:5e:15:39:bf:07:3e:c8:79:9f:92:86:55:46:0b:07:
         48:df:d4:c3:0b:1c:51:77:9c:d3:8c:ca:b1:53:b1:02:e6:ac:
         49:3e:e9:f0:19:2b:9b:37:5b:76:70:d6:b5:f9:88:02:54:c5:
         60:b5:ea:62:7d:d2:a0:9f:9b:36:de:fb:7f:09:b0:b3:88:f0:
         82:6a:7f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:09 2025 by rpki-client