Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/481045a7-f2f9-3e3a-ad00-8cd6aab6ed1b.roa
File:                     481045a7-f2f9-3e3a-ad00-8cd6aab6ed1b.roa (raw, json)
Hash identifier:          30ZMBtHOdyQbom0J0L9H1+aBzohttqS2tYA7C1tFaQk=
Subject key identifier:   74:6F:4C:74:34:CF:8F:FE:0B:F9:31:66:05:66:F6:A4:8B:9C:2B:92
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F4328584AB69D447D15AED16DC87F4B00
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/481045a7-f2f9-3e3a-ad00-8cd6aab6ed1b.roa
Signing time:             Thu 17 Jul 2025 22:37:24 +0000
ROA not before:           Thu 17 Jul 2025 22:37:24 +0000
ROA not after:            Wed 15 Oct 2025 22:37:24 +0000
asID:                     5065
IP address blocks:        216.150.72.0/24 maxlen: 24
                          216.150.74.0/24 maxlen: 24
                          216.150.75.0/24 maxlen: 24
                          216.150.77.0/24 maxlen: 24
                          216.150.78.0/24 maxlen: 24
                          216.150.79.0/24 maxlen: 24
                          216.150.80.0/24 maxlen: 24
                          216.150.81.0/24 maxlen: 24
                          216.150.82.0/24 maxlen: 24
                          216.150.83.0/24 maxlen: 24
                          216.150.84.0/24 maxlen: 24
                          216.150.85.0/24 maxlen: 24
                          216.150.86.0/24 maxlen: 24
                          216.150.88.0/24 maxlen: 24
                          216.150.89.0/24 maxlen: 24
                          216.150.90.0/24 maxlen: 24
                          216.150.91.0/24 maxlen: 24
                          216.150.92.0/24 maxlen: 24
                          216.150.93.0/24 maxlen: 24
                          216.150.94.0/24 maxlen: 24
                          216.150.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:9d:44:7d:15:ae:d1:6d:c8:7f:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Jul 17 22:37:24 2025 GMT
            Not After : Oct 15 22:37:24 2025 GMT
        Subject: CN=cf57ffef-3691-4f6e-b6ce-c2f63daf45d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:c4:25:b0:88:98:fc:47:82:5e:f0:09:d5:
                    5d:fd:0e:4f:71:09:cf:56:fd:fd:df:35:9f:4b:ca:
                    5f:4c:31:d7:ea:5b:5e:1b:58:bf:e2:80:26:a0:10:
                    a9:14:1f:d3:66:dd:e9:3f:e4:7a:bb:49:ec:37:1a:
                    fb:01:19:98:40:27:3d:b2:4a:39:cb:3f:4d:7e:6b:
                    eb:d3:0b:b4:5d:e3:5a:90:93:09:f7:bb:0e:af:97:
                    54:b8:d6:8c:4d:4d:10:68:14:d2:6d:76:2a:2d:09:
                    55:3e:fe:09:6c:ca:07:c5:02:98:96:cd:97:d0:9b:
                    cb:d9:0e:89:1c:1d:9d:68:d4:56:78:2d:a9:24:ca:
                    35:15:f8:db:45:57:3e:fb:7d:b2:61:e7:5f:6a:1e:
                    db:52:cd:42:59:cd:05:c4:b2:d2:b7:fe:a2:80:48:
                    e9:28:47:6c:bb:7e:ec:05:62:2c:e8:3b:20:a9:88:
                    e0:70:5c:ec:9b:b5:59:eb:d7:97:fa:a4:3d:f7:c6:
                    47:b5:4e:31:38:3b:42:85:71:c5:13:cd:61:1f:7e:
                    68:3a:ec:12:54:36:0c:d7:9f:57:0c:34:59:e0:38:
                    61:cb:73:c3:b5:ed:7f:59:7b:bd:34:61:24:b5:4c:
                    6a:47:7d:bd:67:4b:a6:78:61:37:51:01:3c:c5:aa:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6F:4C:74:34:CF:8F:FE:0B:F9:31:66:05:66:F6:A4:8B:9C:2B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/481045a7-f2f9-3e3a-ad00-8cd6aab6ed1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.72.0/24
                  216.150.74.0/23
                  216.150.77.0-216.150.86.255
                  216.150.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b1:6f:98:71:61:90:cc:ec:19:f6:27:64:89:63:12:bc:eb:
         f3:08:b6:fa:97:f7:d1:a1:04:e7:1f:88:22:97:82:8c:17:c8:
         d2:d8:a8:2e:96:4b:21:35:25:eb:ba:b4:78:c7:f5:04:57:56:
         4a:6c:c7:fa:bd:a5:95:a2:40:15:ea:f0:75:2c:bd:f7:51:07:
         7c:13:43:6f:eb:4f:01:72:76:4d:98:39:25:44:2c:7c:8a:6c:
         01:3f:7f:e5:b2:ba:22:4c:27:4e:8e:3b:e4:b0:1a:21:67:48:
         a6:d0:57:6f:f6:dd:b3:0f:b7:a8:1d:3e:9c:6b:39:3e:10:cb:
         51:77:52:6e:0a:5b:73:4d:e3:d9:ca:c8:cf:12:ad:94:c1:49:
         38:ca:72:99:c8:d8:c4:48:1b:f2:14:af:ca:b8:3e:0f:95:67:
         d1:29:c6:51:df:86:cc:34:c0:c5:9c:51:89:41:f1:71:0b:57:
         79:5b:f5:67:e5:11:e7:df:d2:2c:e5:5f:3a:75:c7:9c:bf:20:
         68:90:11:3b:ee:a7:68:08:61:69:7a:58:87:8b:8c:dd:f6:ea:
         bb:4c:d6:9d:38:1d:17:2c:78:d4:57:0e:ea:aa:08:be:75:2b:
         ec:9b:f9:1e:a8:c6:2e:6c:21:a8:13:1e:28:dc:fc:30:a8:0c:
         39:85:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:56 2025 by rpki-client