Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/f14cedf9-7841-3f3f-8971-d550f029429a.roa
File:                     f14cedf9-7841-3f3f-8971-d550f029429a.roa (raw, json)
Hash identifier:          UsifN0K6NkOyI53bev9e+t+kKXzn2btnTk3frhI4Jw8=
Subject key identifier:   45:96:6E:F6:D9:F8:4E:36:7F:2F:D8:06:31:AD:E4:9C:B8:C3:A1:78
Certificate issuer:       /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
Certificate serial:       010D0C9F4328584A7085E8C8E8BAF71C92160570
Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/f14cedf9-7841-3f3f-8971-d550f029429a.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     14277
IP address blocks:        65.182.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:e8:c8:e8:ba:f7:1c:92:16:05:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=a8438a34-70c2-4d6f-a115-0535741c78ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:d8:7c:cb:b6:99:a6:0f:94:0f:4f:13:42:
                    e6:4f:22:0f:47:90:53:03:53:8b:f4:ab:15:20:b9:
                    2f:f0:af:5f:f0:43:6d:a8:0f:1d:91:0a:c4:39:2e:
                    89:9d:a4:97:f0:0a:14:8e:1d:26:0b:3d:a6:38:05:
                    ae:69:7a:c7:7b:82:14:df:a6:c2:ef:15:bb:df:f6:
                    7c:6e:da:70:17:19:75:a2:b5:7e:7b:95:aa:dd:a4:
                    76:f7:82:2a:72:f2:bf:0e:50:28:25:c8:4e:10:40:
                    00:51:8b:c8:c0:cb:65:27:b6:af:dc:07:2a:6d:06:
                    49:d7:bd:e1:87:2d:87:c3:35:16:e3:a3:0f:4f:c3:
                    d7:3a:b5:c1:76:05:79:7f:ff:95:98:9c:24:19:4d:
                    0b:55:83:e6:16:96:94:37:7c:fb:33:f8:23:48:85:
                    3e:11:9d:bf:5a:6c:1d:da:17:69:43:bd:a2:95:70:
                    b6:e8:a9:25:ec:23:23:4b:fa:f4:68:43:90:c2:02:
                    30:40:c1:67:a6:64:c2:8a:57:e5:b9:74:5f:44:03:
                    3f:6a:8e:27:c2:88:c8:75:e0:20:93:4c:de:57:d4:
                    d8:dc:d5:2f:bd:aa:96:f4:28:23:2d:70:11:8d:8d:
                    a1:cf:88:e8:7b:d0:5e:c1:78:bb:74:81:bf:2a:26:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:96:6E:F6:D9:F8:4E:36:7F:2F:D8:06:31:AD:E4:9C:B8:C3:A1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/f14cedf9-7841-3f3f-8971-d550f029429a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl

            X509v3 Authority Key Identifier:
                keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.182.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:83:79:f2:e3:77:76:f6:5e:10:d1:48:d4:0d:e0:29:c7:
         2e:45:e6:20:81:41:9d:13:d7:a1:c9:95:cb:1e:80:e0:77:f7:
         a9:c3:a4:2c:35:e8:cb:88:68:ea:3b:4d:fa:74:4b:c0:a7:ba:
         4f:5a:85:2c:1d:85:f0:ac:7c:72:1c:43:ea:9a:49:a9:ac:39:
         5a:8d:6a:ee:23:4e:fa:e4:1e:c4:66:35:cc:bb:9f:47:01:5d:
         b2:42:08:21:0d:65:fe:9a:88:0d:08:62:01:bc:3b:75:e4:94:
         9e:ea:5d:f6:a6:77:ce:bd:3f:d2:41:52:0c:62:04:12:b9:66:
         5c:fc:97:6d:05:36:3f:9b:50:bc:3f:0f:ce:5c:e5:5a:ee:b1:
         75:e1:70:8a:9a:54:6a:98:9b:f8:3f:08:b5:4f:44:f5:c6:d4:
         2a:83:5a:db:ec:d1:02:9f:f8:21:d4:4b:85:fa:7f:5c:01:ed:
         fa:90:dc:9b:22:96:9a:e8:c1:98:ea:28:d2:fa:22:5e:19:4f:
         be:53:79:99:75:0b:36:f5:02:76:19:5b:f2:45:5d:d9:9b:17:
         26:51:1d:dd:5c:66:da:18:a5:27:1e:50:16:12:f5:44:03:d8:
         29:be:be:d7:a2:7f:44:67:d4:de:96:62:d1:fc:c4:0a:4b:68:
         85:9d:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:37 2025 by rpki-client