Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/4d4cab64-b689-363d-b0b6-8347b7102bee.roa
File:                     4d4cab64-b689-363d-b0b6-8347b7102bee.roa (raw, json)
Hash identifier:          qFcWoCAguFejyunYblyLVsvqSiUTVja3MULdxr0qGH4=
Subject key identifier:   D2:3B:D2:71:90:CC:6B:32:43:0E:28:18:EB:A0:8A:D9:47:8B:DB:21
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584A050A7C36A9C12E56D2211FC0
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/4d4cab64-b689-363d-b0b6-8347b7102bee.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     398156
IP address blocks:        158.120.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:7c:36:a9:c1:2e:56:d2:21:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=7fd2c62d-992d-4ef8-b774-58ab938beb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b1:07:d5:35:c8:52:ba:97:21:4b:08:c7:70:
                    db:fe:40:f8:18:ce:cb:1e:5b:1b:d4:73:85:a6:e3:
                    53:03:be:bd:91:7f:b9:f5:86:3e:e8:9e:bb:cf:3d:
                    0f:14:17:52:5c:de:a1:c2:99:f0:5d:dc:07:40:55:
                    38:a2:e1:68:a8:34:16:6f:37:6f:42:25:b6:d3:88:
                    37:f2:45:19:f9:e1:cc:6e:b9:7c:b0:6c:87:51:dc:
                    b2:9d:4e:27:bc:00:7b:d0:04:d8:3e:1a:de:ad:2d:
                    db:28:b4:e4:d8:6b:31:29:36:61:52:c3:a7:3e:99:
                    4b:b7:79:46:ff:84:07:ed:09:40:d1:79:91:02:c9:
                    36:20:e3:d3:fe:f0:d0:9a:70:49:56:37:9f:65:2f:
                    9b:af:75:c3:53:f4:05:6d:02:9a:05:c4:37:cc:aa:
                    f8:9e:7a:38:d6:2e:09:68:2b:2f:44:5c:b9:6d:56:
                    8b:87:20:69:d1:3c:61:59:cf:34:78:ad:28:8d:fb:
                    ba:08:ca:65:0a:bb:22:80:53:17:18:ec:98:a8:a9:
                    dc:dc:f5:47:c7:f8:0e:f9:6f:95:57:74:8f:20:bd:
                    86:85:2b:3f:0d:d2:b5:33:78:db:95:e4:00:97:0e:
                    f2:25:fd:72:b5:42:8b:d4:94:9e:3f:40:ee:bb:00:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3B:D2:71:90:CC:6B:32:43:0E:28:18:EB:A0:8A:D9:47:8B:DB:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/4d4cab64-b689-363d-b0b6-8347b7102bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:82:61:57:e8:e6:7a:f1:7c:be:6d:db:7e:fb:3a:0a:1d:77:
         8d:ea:17:80:ec:eb:76:6a:77:f6:23:3a:7b:b8:2d:f3:37:97:
         d8:4a:e2:85:e5:9d:55:e1:4c:c5:aa:c2:e1:83:da:92:06:a1:
         2e:97:3c:4c:e4:0c:ba:cd:2f:fe:0b:7c:16:b0:64:16:88:13:
         c2:bb:d4:99:b7:62:25:02:9d:b9:a3:49:50:ab:a5:20:e6:2b:
         12:be:0a:22:66:b9:7b:09:30:12:32:cc:b6:92:30:3b:f1:59:
         a4:ad:dc:1d:ca:18:f0:80:70:30:16:f0:29:cf:61:12:18:97:
         2e:b7:18:1a:2f:16:68:a1:2f:e9:3f:76:af:fb:c5:cd:a9:87:
         a0:8c:32:31:d6:51:22:a6:c5:4f:3c:11:8f:cd:0d:17:59:ce:
         c5:bc:c1:e1:e5:24:54:76:62:f8:c3:35:28:24:31:0e:7e:c9:
         9a:41:28:f9:b2:cf:f0:01:bd:f2:bd:7a:6c:fa:34:2b:60:7d:
         80:b7:16:39:c3:b9:87:f9:2a:30:e5:2b:ff:ea:65:e8:c0:0d:
         9d:35:f8:e9:e2:29:61:1c:d4:cd:8b:40:29:a4:8e:a8:f5:e5:
         7f:aa:9a:d7:8c:9d:6d:f8:e0:e2:37:f5:02:a4:74:38:97:c1:
         b1:9a:70:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:24 2025 by rpki-client