Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa
File:                     bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa (raw, json)
Hash identifier:          0tR+H51B4/cX6qev4iJhWY5oYs4NaLLPpVlxRXVm3K0=
Subject key identifier:   F7:EF:A3:FD:55:06:C4:A8:69:C0:B2:8C:FB:41:FC:E2:79:D5:D2:AD
Certificate issuer:       /CN=feb36888-683d-42bf-9c19-4ceaf1748703
Certificate serial:       010D0C9F4328584A66C06ADEC5B5374BB293F840
Authority key identifier: E6:AB:48:39:D2:04:15:A7:B8:17:F0:B3:04:EF:9A:4C:08:C4:59:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     6939
IP address blocks:        158.222.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/feb36888-683d-42bf-9c19-4ceaf1748703.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/feb36888-683d-42bf-9c19-4ceaf1748703.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:6a:de:c5:b5:37:4b:b2:93:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb36888-683d-42bf-9c19-4ceaf1748703
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=fc1de610-a232-468e-99ed-2a6f5101f130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:af:36:e9:83:d1:d8:ba:0e:51:e1:ad:c3:
                    36:a3:9a:8a:03:6b:ce:9c:e0:65:b4:c5:2c:dd:cd:
                    2c:27:14:0c:61:c3:e1:e9:43:95:80:97:18:da:e4:
                    d8:bc:c0:0e:06:d6:18:6f:9f:f8:72:07:d9:44:07:
                    fd:85:4c:79:aa:22:84:f7:16:a2:72:4e:53:09:3c:
                    36:53:20:90:20:be:d4:45:f4:9a:da:70:b9:46:ed:
                    ba:b9:6c:ab:b1:82:94:dc:ef:dc:0c:6a:be:bf:9d:
                    61:a5:f5:cc:84:86:95:af:47:e5:d8:eb:3f:28:74:
                    e0:a0:7c:27:a3:37:71:5d:b2:75:f5:84:7a:e2:bc:
                    7f:7b:ff:f9:30:4c:93:38:62:15:53:76:29:63:17:
                    5a:38:1f:17:52:11:64:95:68:23:56:49:73:ac:65:
                    3c:fd:11:84:00:a7:8d:bc:d8:db:fb:9c:54:ff:19:
                    53:f2:f2:3b:bf:9b:27:e9:32:c6:21:63:3b:a1:fc:
                    e4:18:74:7b:d7:0a:72:10:e9:74:81:fc:66:a1:61:
                    db:f8:1d:8d:36:89:5e:b3:c6:93:d5:02:f3:ee:7b:
                    be:61:f2:08:33:e1:e1:47:b7:f6:8a:83:ba:55:e9:
                    10:1d:12:98:0f:8d:05:a9:f8:4c:85:33:26:00:9e:
                    4a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:A3:FD:55:06:C4:A8:69:C0:B2:8C:FB:41:FC:E2:79:D5:D2:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/feb36888-683d-42bf-9c19-4ceaf1748703.crl

            X509v3 Authority Key Identifier:
                keyid:E6:AB:48:39:D2:04:15:A7:B8:17:F0:B3:04:EF:9A:4C:08:C4:59:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:8f:6a:12:c9:33:eb:bd:c6:3e:95:39:86:d2:f3:ea:fc:
         36:8d:5a:d5:31:89:5d:3b:48:f1:59:6f:c4:d9:ea:0d:64:bc:
         e9:b7:2f:1d:59:73:08:79:85:e9:4d:c8:35:13:99:86:d2:02:
         0d:2f:f1:a0:13:56:e9:a5:e2:ed:7e:a7:37:3d:83:07:8b:72:
         cd:37:84:ce:0c:e9:93:53:ef:40:70:b5:c3:e8:bb:af:71:e1:
         b9:3d:02:99:cd:25:19:9d:43:d0:38:c0:4e:b6:0c:d0:72:08:
         d8:5f:9f:d8:e0:a6:79:7c:80:21:78:d3:c1:66:4e:10:88:f9:
         84:6d:04:73:af:aa:54:73:0d:9e:22:d8:f8:aa:5d:4c:bf:18:
         e7:24:4d:a1:a2:e3:26:db:73:25:0d:7b:7c:cb:6d:7a:77:ce:
         ee:59:ca:c5:de:5d:c5:a7:95:03:1f:54:10:48:ce:b9:a7:cf:
         f6:23:ee:aa:f4:cf:11:e3:83:b9:f5:96:c9:d2:99:e2:a1:73:
         2a:88:19:c5:cb:e0:24:58:5c:2e:ff:2c:bc:32:f8:c3:8f:e0:
         7c:47:be:e1:2a:01:6c:2e:37:28:aa:da:c9:70:a4:e9:ef:09:
         f6:24:6d:5a:24:56:5b:65:4a:78:50:ca:97:6f:00:a8:ec:e9:
         64:55:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:41:40 2025 by rpki-client