Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa
File:                     a317804f-60e4-3002-925a-258b38ed37e9.roa (raw, json)
Hash identifier:          MHAbCJlQcfjXWCD2E9/ZtEcb8S5N41rvDl20jTle37g=
Subject key identifier:   EE:B4:38:AE:04:B7:28:20:1C:CC:D6:3A:39:5F:52:18:74:84:B4:16
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328584A8C70C7CBE98BEBD293DB0BE0
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        157.248.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c7:cb:e9:8b:eb:d2:93:db:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=8e6000c3-4663-4f52-a76c-e18ba1265cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:ec:ec:35:88:da:b2:e8:25:cf:81:a0:f4:
                    62:7a:98:bc:4b:a9:de:33:48:87:2e:97:c8:a2:82:
                    78:a6:b0:ac:e5:70:48:30:26:39:f7:5e:84:bd:8d:
                    78:ca:07:64:c2:e3:b2:c8:7a:3c:ca:ec:2a:02:d9:
                    ee:96:93:15:ad:13:0a:49:bb:f7:b1:78:3d:71:60:
                    7e:7a:c2:de:64:99:91:c9:f1:0b:55:a5:f0:cc:3f:
                    d7:68:88:de:85:7b:3c:79:7d:b1:f5:98:7c:d1:f0:
                    cd:96:df:e9:23:87:e2:a1:0f:77:01:b5:71:6b:68:
                    00:8c:5c:f9:ce:3b:3f:1b:ee:e2:1d:c6:fc:6b:3f:
                    74:8a:6a:e1:56:8d:95:a9:34:36:01:20:30:20:6d:
                    c2:76:8b:3c:9e:61:6f:23:4a:21:4b:81:61:a9:f9:
                    b6:31:b8:0a:50:e5:c6:35:96:50:a7:2f:93:20:f2:
                    6f:be:c9:02:5e:35:66:0d:e5:df:25:47:03:80:40:
                    9a:49:df:83:95:73:09:5e:f1:37:ca:fb:04:a7:81:
                    b8:2f:19:00:89:2e:85:0a:72:86:94:0c:eb:5d:80:
                    9d:3d:bf:ba:89:98:25:b7:86:bd:3b:83:ec:91:47:
                    8c:20:a1:41:1d:74:56:20:55:76:a4:4f:2d:aa:88:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B4:38:AE:04:B7:28:20:1C:CC:D6:3A:39:5F:52:18:74:84:B4:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:33:44:cd:81:63:f2:06:4e:d0:85:7e:56:42:ce:8e:93:6d:
         a1:d9:e6:19:b4:c3:21:f4:09:1a:cb:5f:8e:31:f5:b1:43:1c:
         09:1b:c1:80:b2:4f:b3:0f:60:a8:4f:1d:a7:a9:1b:8b:d4:0e:
         6e:9b:b1:41:fd:15:ee:ad:db:ab:49:a6:b1:da:bc:96:bd:b2:
         a1:17:c9:64:58:6c:66:d3:e4:d4:68:23:04:43:a2:02:c1:32:
         ae:60:06:ca:c8:34:90:65:d9:55:52:22:e8:ee:fe:14:36:62:
         64:aa:26:d9:69:b9:0a:21:c0:f7:c7:0c:83:ac:5b:e1:1b:7e:
         5b:ee:fa:f4:09:a0:44:9f:b6:d1:06:19:ff:34:5d:be:fa:7e:
         07:33:0b:39:11:e3:30:a9:38:75:47:a3:9c:cc:63:15:aa:cd:
         b1:6e:41:ab:f9:9d:17:47:47:f0:e6:72:84:96:fe:c0:61:fb:
         b3:31:4a:b6:b2:6f:09:32:e8:32:09:00:d5:af:87:6e:63:70:
         93:2c:a1:1c:3b:d5:7a:08:b9:0b:dc:f3:04:68:b7:52:34:5e:
         13:3d:63:ea:67:94:53:02:da:51:08:cb:68:6b:c2:3c:94:7a:
         a2:9f:91:52:f0:f0:39:52:44:52:68:f5:0c:32:22:fa:6e:98:
         df:cd:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:52:57 2025 by rpki-client