Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ec3e1746-1968-3b3e-ac38-6d206a12815e.roa
File:                     ec3e1746-1968-3b3e-ac38-6d206a12815e.roa (raw, json)
Hash identifier:          tAEjbfbIl1agdH3oEaUqmZaR3xbi8/n+EIjTeDuK3is=
Subject key identifier:   A8:59:11:25:53:D5:9D:90:8D:8D:B1:14:DC:3B:16:46:09:2A:4B:22
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A23C019FB80D390FD55CBF980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ec3e1746-1968-3b3e-ac38-6d206a12815e.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     64267
IP address blocks:        158.62.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:19:fb:80:d3:90:fd:55:cb:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=b5502143-1dbe-426c-b46a-0ce0d58bbbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:00:6a:7c:eb:4a:61:ab:5e:c4:c7:65:03:ba:
                    76:4d:1d:50:69:af:b5:af:db:61:9b:cb:92:f1:3a:
                    8d:f0:44:57:80:aa:2a:a0:da:a6:3f:8f:ab:a0:2e:
                    8a:7a:63:14:3d:d0:ed:77:e9:4b:3c:38:ce:60:0f:
                    c4:ac:59:76:14:bd:70:4d:47:51:7b:8c:ad:07:81:
                    62:1c:09:d7:cb:d5:e9:ea:da:24:09:52:4f:0c:a5:
                    d4:2d:9f:24:78:a0:2a:85:48:46:e6:45:c3:24:af:
                    d8:0c:db:3c:04:44:e2:33:77:2a:94:c9:cc:51:20:
                    10:59:84:d1:88:26:bc:62:3d:31:f4:32:dd:2e:29:
                    bc:d9:a4:2a:7e:b3:fd:72:6a:d0:7f:9e:93:27:38:
                    8a:ce:8f:8d:50:d3:36:5d:17:2f:92:f6:26:e6:70:
                    37:d3:4c:c7:ee:26:1e:bb:55:28:5f:d8:b0:f2:b6:
                    e2:f5:80:9e:91:56:af:e7:04:50:fa:a6:2c:77:fd:
                    ef:fa:ac:10:0c:f9:2a:b9:03:a4:97:21:69:95:11:
                    3d:e0:06:0b:8c:70:d3:8b:7e:90:92:c7:e6:0b:09:
                    80:1a:b4:a6:1b:6a:5c:89:b2:ae:b6:e7:a1:cd:3a:
                    3a:86:c5:26:9f:be:31:23:49:70:2a:e6:df:87:4d:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:59:11:25:53:D5:9D:90:8D:8D:B1:14:DC:3B:16:46:09:2A:4B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ec3e1746-1968-3b3e-ac38-6d206a12815e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:a2:4e:e1:b2:73:c9:6e:44:f5:b1:4e:cc:74:1b:79:26:b3:
         41:8e:76:89:87:dd:00:fd:6c:94:0e:7f:19:ee:9f:c6:ae:eb:
         d4:84:a9:f0:af:69:24:0a:0b:c8:b0:a5:52:cd:0d:4e:8b:8d:
         ca:0d:94:27:d7:5f:81:ac:a2:cb:8f:09:b7:4e:ae:59:70:be:
         ca:a5:5c:1a:72:70:17:8c:e3:83:be:f7:c9:f9:74:e7:07:26:
         99:22:4b:fb:3e:17:bb:03:28:f6:63:ef:9e:aa:92:5c:c4:ea:
         11:0b:e5:3d:4c:78:94:6d:c8:72:0e:8c:b8:1e:c8:90:89:f9:
         6a:83:3c:eb:91:70:b8:25:36:65:35:28:c1:e1:4b:67:93:0e:
         b3:e7:1d:b7:9d:05:ac:19:00:87:8f:78:50:98:ab:bb:65:3d:
         a1:00:0a:66:a1:e8:42:77:2b:e6:df:13:98:a9:d8:c3:20:2d:
         af:fb:d7:41:7d:d0:79:f3:91:13:d9:88:ba:88:a1:eb:7c:4d:
         aa:d1:4f:ea:cf:7f:6c:26:72:e9:bb:1b:e5:24:4b:e9:c8:ae:
         fc:48:07:6b:99:dc:a4:20:20:a9:9b:2d:9c:5d:a6:c2:b9:ac:
         98:19:59:d0:1b:44:00:7d:1e:76:5b:8a:e9:59:25:93:89:86:
         16:23:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:01:21 2025 by rpki-client