Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa
File:                     3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa (raw, json)
Hash identifier:          VMF/jUzppiKfkdDwOlD/2lsOC2pYmtFdTWVxrczTO+E=
Subject key identifier:   10:03:B5:39:C9:5B:27:7C:61:DE:B0:33:CD:50:BF:79:67:B5:FC:55
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584A7780A5FDF8DE065225C52A44
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     1403
IP address blocks:        66.158.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:a5:fd:f8:de:06:52:25:c5:2a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=c07254e1-976c-43ff-b695-dc33563c70c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:0c:e5:ce:1a:1f:e5:dc:8b:9a:92:a6:a9:
                    6d:94:82:f1:30:da:1e:ef:0d:5c:97:55:70:f3:03:
                    3d:0e:39:d2:d0:5b:80:d1:b2:43:4a:af:db:f1:b0:
                    6d:6a:e9:6c:cd:ef:d9:8a:51:0f:5d:08:cf:6f:e6:
                    5b:0e:f9:0b:2e:81:e7:09:10:ff:69:6f:36:49:9c:
                    3a:24:6e:51:a7:c8:b2:40:ae:bb:0b:93:29:7b:64:
                    bb:6b:1d:45:ad:5c:37:3d:4e:3a:69:77:59:9e:b4:
                    ec:47:bf:d8:7b:fd:9f:3b:15:39:22:a8:f5:d6:98:
                    08:aa:b2:6a:01:a8:81:84:11:ca:7c:e5:c5:b9:7a:
                    43:6e:5c:4f:b0:a9:62:6b:84:8a:35:11:b3:dc:0a:
                    7b:0d:fc:de:b7:86:a5:0b:b0:a2:1b:e5:49:f5:29:
                    da:97:59:6f:f1:51:01:1d:58:a0:0e:25:9d:45:04:
                    d0:06:2b:8c:f1:39:7d:78:c2:54:d2:21:98:f0:3e:
                    f0:0b:6a:f1:dc:d5:87:20:3e:82:11:92:89:6c:02:
                    75:51:79:f4:9b:f6:19:73:9c:86:d7:d9:be:34:11:
                    17:81:57:53:15:bf:67:80:92:ab:e1:1b:ac:91:ab:
                    f7:af:b7:47:70:64:d3:8d:ce:02:64:77:14:7b:36:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:03:B5:39:C9:5B:27:7C:61:DE:B0:33:CD:50:BF:79:67:B5:FC:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.158.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:95:82:5b:a1:27:8b:68:9e:4a:2a:a1:22:2c:8c:93:0e:ca:
         99:ae:5f:e7:3a:97:6c:fc:77:e8:52:bf:64:da:06:e0:31:fc:
         77:93:70:a7:5a:54:cb:58:1f:22:68:ab:8e:aa:f0:aa:8d:90:
         a7:e8:0d:c9:5b:8a:96:37:56:95:51:37:c9:31:66:f2:f2:a1:
         3d:9d:85:37:d7:8a:bc:d1:92:d2:f2:7e:78:a8:e2:0f:d5:28:
         ab:f1:a4:98:d8:52:4f:3d:5d:c6:68:24:ab:eb:90:20:0f:f2:
         c4:d7:2d:42:55:69:69:7d:3c:94:be:8d:92:e1:64:40:fe:98:
         ec:92:3e:c9:54:de:dc:3e:b0:01:c9:7e:56:3d:9b:97:98:84:
         33:91:05:33:a7:03:e3:01:71:1a:11:49:b2:47:1c:4c:fd:32:
         b4:17:d3:be:5b:44:95:d1:cd:09:49:ed:fc:87:86:2d:cc:d1:
         22:62:89:f9:8a:1e:10:13:36:ea:eb:9a:dd:7d:f0:d7:19:98:
         32:82:3b:f7:03:d5:d0:4b:71:02:b2:26:ea:1f:80:ee:e5:43:
         76:3b:aa:31:02:3e:dc:06:c2:ee:4c:4c:b4:6d:e8:ad:04:e8:
         db:b9:48:17:e7:d8:ae:9b:8f:2f:ff:50:66:f5:39:36:84:3f:
         ae:41:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:33 2025 by rpki-client