Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa
File:                     ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa (raw, json)
Hash identifier:          hmK/qiYoyS7v96t6x4JHeHPgODUfFfKiwknaStdEmak=
Subject key identifier:   62:E0:E1:A4:72:17:12:00:24:C3:BF:8B:40:D0:D2:2A:F8:BD:C2:3B
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584A10353D67011A799BDF1FE980
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     46261
IP address blocks:        158.115.224.0/23 maxlen: 23
                          158.115.226.0/23 maxlen: 23
                          158.115.230.0/23 maxlen: 23
                          158.115.236.0/22 maxlen: 22
                          158.115.242.0/23 maxlen: 23
                          158.115.244.0/23 maxlen: 23
                          158.115.246.0/23 maxlen: 23
                          158.115.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:3d:67:01:1a:79:9b:df:1f:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=f44d7d5e-6b5b-4303-8bbc-1a957b5aebe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:20:f0:8d:1f:4e:51:01:23:a5:72:c7:1a:7c:
                    b9:23:3a:18:5a:bc:2f:21:08:bb:42:23:6f:12:77:
                    55:6f:04:b0:6e:45:ee:cc:d6:f5:b5:92:41:6c:89:
                    ec:3a:53:34:0b:ff:df:2d:0e:7a:88:2a:f8:cd:05:
                    84:c8:88:e8:fe:90:97:45:62:dd:d0:c0:58:ed:69:
                    25:b4:46:0d:f0:82:e0:66:3e:e1:09:4f:a3:1a:95:
                    99:d8:91:30:ec:5c:8f:8d:79:00:d2:96:e9:eb:23:
                    0d:13:88:7b:4f:b9:53:44:63:e6:ec:3d:1e:ab:f4:
                    39:83:c4:60:66:c8:ea:57:93:2e:e8:92:18:57:1e:
                    ae:84:f2:33:40:3e:b4:f6:ff:dc:d5:f8:51:60:46:
                    72:39:b1:95:04:74:ae:26:bb:31:f1:53:c5:50:b8:
                    7a:e1:57:f1:b2:91:b2:b8:0b:0c:97:8c:b5:43:0e:
                    e4:73:b5:3a:88:6f:df:35:56:15:d2:76:0c:3d:fe:
                    1e:34:4b:4f:0b:60:54:66:11:c5:5a:37:7f:a1:85:
                    04:3b:82:39:4b:27:07:95:3c:9a:f3:5e:af:58:f2:
                    17:a4:85:55:a6:f9:f7:62:fc:bb:55:86:7f:cf:a6:
                    03:b2:48:74:cb:b8:d9:18:32:94:f4:60:ad:a8:37:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E0:E1:A4:72:17:12:00:24:C3:BF:8B:40:D0:D2:2A:F8:BD:C2:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.224.0/22
                  158.115.230.0/23
                  158.115.236.0/22
                  158.115.242.0-158.115.247.255
                  158.115.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:e5:09:87:0e:ae:15:c6:de:bf:14:67:e9:9d:83:32:76:
         a6:d9:0b:50:2b:38:a5:23:55:d9:9b:a3:18:42:23:b5:99:78:
         3c:3d:b0:4e:e3:1a:4d:78:6b:6d:b2:7d:19:d3:3c:31:b4:53:
         5d:c8:5f:bf:e5:e0:ed:ec:4f:f7:69:48:21:7e:1a:31:32:fc:
         8d:db:fc:7e:02:58:38:46:ab:d6:1a:97:de:fe:4e:6e:ef:7d:
         85:c2:aa:c7:b4:ae:14:35:03:21:9e:09:f1:92:9e:1b:51:22:
         23:8f:d9:07:22:6b:a7:e5:62:d8:1c:ba:b7:65:44:2e:64:8a:
         5c:a3:55:2f:88:52:3e:34:28:29:c8:df:ad:7c:46:ca:26:4b:
         8c:d4:be:41:f0:b2:a6:e9:4a:c0:02:85:d1:56:01:63:e9:9e:
         b8:49:bb:5d:ba:d0:6f:27:a7:ee:10:0a:23:90:10:bb:4c:50:
         69:13:5c:78:4e:43:d2:27:7c:85:43:91:ba:b5:57:2c:97:1c:
         23:78:da:34:89:79:b6:24:70:ca:3a:1b:67:d4:df:8e:3b:86:
         72:da:0f:70:0c:cd:9b:e2:84:4e:29:3a:82:a0:01:24:08:84:
         9d:74:42:2d:58:26:d9:48:fb:72:f8:6e:6c:89:af:34:8b:50:
         65:a3:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:05:34 2025 by rpki-client