Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa
File:                     3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa (raw, json)
Hash identifier:          K9IH1NdAoR2pwY5XCigdWn2tzwtd+LKx4+bMyGyXpFg=
Subject key identifier:   BD:C3:57:85:ED:DA:37:00:4F:E0:FE:D5:AC:97:05:C7:75:02:DB:E9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A9BCB70A564DA2E7776277E80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     33659
IP address blocks:        158.62.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:70:a5:64:da:2e:77:76:27:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=ce27003d-9f8a-4771-a972-e3c2d9f660e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6c:76:49:fa:f2:f5:98:fb:0b:48:aa:c3:e4:
                    19:1a:be:1a:60:f3:ee:2b:03:d5:3b:1c:29:fb:90:
                    85:3d:49:7b:f3:f7:ee:24:46:7b:4a:f0:2b:c0:b8:
                    89:8d:90:6b:f4:f1:70:7c:8f:ba:34:55:d3:a6:fe:
                    e6:9c:a9:e0:91:e8:7d:fd:90:c4:cc:27:b2:ad:c2:
                    6a:14:71:8c:b5:2a:af:b4:11:a6:b4:f4:6b:af:24:
                    3a:73:15:ca:fb:99:8c:1a:26:98:61:94:0b:0f:d1:
                    dc:ed:0e:46:4a:1d:3f:20:95:22:2a:b1:b6:87:4a:
                    02:9b:d2:c9:c5:56:00:7a:c8:e9:97:a2:6b:b2:8a:
                    14:0e:2c:26:a6:03:71:7f:1f:df:9a:e1:dc:f0:d5:
                    9e:d8:e8:d7:4f:3f:96:74:51:ff:27:57:20:5a:c3:
                    45:4e:b9:33:bc:f9:c8:76:b3:81:e0:e4:c1:17:72:
                    0d:78:3a:3b:c8:4d:1c:ac:35:40:73:5c:89:c8:79:
                    67:95:8c:86:54:78:99:e7:09:2e:d8:ad:39:d0:50:
                    e7:d1:b6:02:f8:84:3f:01:ce:ea:92:c6:f7:0e:74:
                    80:8e:bb:a2:f9:a3:36:5b:1c:0f:ce:82:a3:61:e5:
                    44:ce:f5:c8:c6:3a:a0:3a:9c:df:09:3a:aa:2a:06:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:57:85:ED:DA:37:00:4F:E0:FE:D5:AC:97:05:C7:75:02:DB:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:85:12:5a:24:00:7f:bc:b1:0e:95:df:49:f0:fc:cf:3d:15:
         61:e9:49:f2:13:28:a3:43:e1:29:c6:2a:5f:8e:3b:62:eb:b5:
         cf:87:0d:66:1b:64:15:9f:a0:eb:b1:e4:52:4a:d9:f3:0a:cd:
         51:c1:5d:0a:65:aa:37:95:53:cb:fb:ad:c0:bf:4f:d1:23:2e:
         03:6e:35:8b:a7:d3:6c:0a:6f:ba:da:a2:eb:e8:7f:5a:03:8d:
         2d:53:a0:fd:fa:ff:a8:f7:b0:89:ee:c7:86:78:62:6d:3b:ca:
         c9:a4:8a:fd:eb:b8:ed:9f:d1:31:c7:72:cb:ec:5d:be:bb:0b:
         05:12:42:c0:da:52:b7:f3:08:22:58:9d:aa:3c:42:72:de:7c:
         84:53:cc:e8:6f:a6:07:00:29:83:0b:46:d8:97:55:7e:1a:d4:
         14:a1:e5:7c:1b:0f:7c:82:bf:ea:92:6a:ba:ec:dd:36:de:0e:
         86:37:ee:b8:d2:4a:de:3f:64:35:76:a5:c4:6b:34:b5:5a:14:
         e0:88:91:85:18:df:99:69:18:7e:46:fd:8e:aa:45:d2:13:9f:
         fc:ec:a7:51:40:97:b6:3b:0a:cf:33:27:b0:65:bb:83:e1:60:
         64:3f:df:49:3c:a6:82:48:1d:45:65:94:a6:32:4b:5d:87:09:
         3b:d5:d3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:52:29 2025 by rpki-client