Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa
File:                     4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa (raw, json)
Hash identifier:          MQIaAUu4wQn38mSTChYBnUrLcaY4Rs34YhB4t1zwtPk=
Subject key identifier:   EF:03:5D:86:1F:78:26:B0:95:06:0E:77:BF:1A:82:E8:6B:29:3E:EF
Certificate issuer:       /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial:       010D0C9F43285849C4D4C732A64A22D73DE59600
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        158.26.56.0/21 maxlen: 24
                          158.26.168.0/21 maxlen: 24
                          158.26.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c7:32:a6:4a:22:d7:3d:e5:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=f31a656e-dc4a-4ec5-9228-0b7165a8181e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:db:8d:59:97:83:47:ec:f2:2e:26:ba:76:
                    23:07:55:39:2e:15:8d:74:7d:42:f2:14:dd:28:94:
                    a0:f2:1f:8a:a8:51:e6:de:03:b0:c6:9d:a7:49:36:
                    c8:a2:7e:73:f6:e6:be:52:e3:ed:84:85:0d:37:fa:
                    54:ee:54:e2:83:8b:3c:64:fc:5b:6d:80:dd:04:b2:
                    67:c6:f4:c1:39:01:ee:bf:a7:65:af:22:09:7b:a5:
                    57:bd:c2:d5:b6:02:f1:42:7b:16:cd:03:1b:46:13:
                    8a:06:67:fc:b5:f9:aa:77:05:65:83:32:9e:5b:fa:
                    4d:5c:95:9f:83:4e:b4:bc:9a:67:4c:6c:9c:03:81:
                    d6:6a:c7:2b:7e:40:91:e1:a2:db:08:c1:b7:2e:96:
                    3a:da:77:1a:8d:95:32:e5:98:3d:fb:11:60:ca:9c:
                    fb:e6:6f:92:f4:d1:e3:01:73:95:03:2f:54:85:d3:
                    52:bb:1d:d1:0c:2a:35:d1:47:3c:72:b4:a8:56:93:
                    e2:5d:2d:f6:f6:1e:df:13:49:86:a8:86:f1:4e:e7:
                    f0:a6:3b:7b:ac:72:38:79:4e:22:8a:c7:64:17:67:
                    4a:f7:11:c7:7f:63:06:15:12:d6:79:f4:c8:e7:6e:
                    d6:ef:d2:99:a2:98:eb:9e:51:5a:4a:7b:33:e5:d5:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:03:5D:86:1F:78:26:B0:95:06:0E:77:BF:1A:82:E8:6B:29:3E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl

            X509v3 Authority Key Identifier:
                keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.26.56.0/21
                  158.26.168.0/21
                  158.26.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:31:9e:75:8b:3e:5a:25:23:aa:65:1e:0b:09:8d:3e:1f:27:
         97:4b:ef:ed:fc:05:12:21:2c:d1:93:13:6f:6f:d1:00:fc:53:
         be:a8:61:1b:ec:1e:a5:7e:75:d2:85:7d:c3:ad:c7:ea:7e:ca:
         36:53:09:50:08:2d:e4:75:9b:7d:ae:89:a7:66:9c:cc:96:5d:
         62:6c:98:90:5f:35:48:dc:df:7a:2b:11:6d:ac:1b:da:50:ab:
         1b:89:0e:80:bb:79:59:49:d2:d8:0b:a1:90:3b:49:2b:9f:eb:
         fb:9f:f5:2f:c0:08:57:e2:03:a0:30:40:52:e4:e6:e1:af:eb:
         7a:f9:a1:21:13:8a:ef:fc:37:32:ca:3d:ac:70:11:94:96:c4:
         46:8d:0d:2e:67:7b:30:1d:2f:74:50:c0:04:87:fb:1d:78:b8:
         f0:06:bf:ba:e0:19:f6:78:79:f6:0c:d2:0d:32:51:05:85:99:
         3e:60:bf:14:33:66:21:2a:74:e6:1b:c8:ca:f9:32:a2:8e:dc:
         e5:d7:11:8c:9e:a3:9d:e6:2a:6f:e5:65:37:a3:e3:d3:2a:98:
         b5:c3:b3:05:4a:b1:4d:8e:fb:01:1d:cf:2d:14:f6:6f:90:a6:
         3c:9a:4a:b5:ce:72:8f:20:bc:72:aa:a4:5b:0f:2b:09:d1:af:
         f2:d3:6e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:57:02 2025 by rpki-client