Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/8d6bdb46-412e-3f89-ad68-155f71b1736d.roa
File:                     8d6bdb46-412e-3f89-ad68-155f71b1736d.roa (raw, json)
Hash identifier:          whkCp2uxYYkmrSs6CA29ezJh4kgENtyz6QscCcr7q+o=
Subject key identifier:   C0:37:2C:D2:6A:C9:2B:FB:38:9E:B6:94:18:6C:47:71:09:A0:30:C0
Certificate issuer:       /CN=91625b8e-8d13-496f-b542-d170ffd5f3fa
Certificate serial:       010D0C9F4328584A8410B3357646265425DB35E0
Authority key identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/8d6bdb46-412e-3f89-ad68-155f71b1736d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     5065
IP address blocks:        148.222.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:b3:35:76:46:26:54:25:db:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91625b8e-8d13-496f-b542-d170ffd5f3fa
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8d731df2-4b3a-4f6b-b534-68d2b5095231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:30:31:f5:bc:b8:c4:76:a0:19:d9:ef:b6:
                    a8:41:56:84:5a:ce:ec:e9:92:e2:f9:6c:0c:2d:63:
                    0c:1b:df:00:12:6e:19:f6:ba:f4:84:9b:31:fc:0f:
                    e0:4b:dd:44:59:d6:a5:67:dd:b0:81:d8:98:4e:82:
                    24:93:50:c3:53:0d:3e:e7:c4:cb:16:60:2c:cf:ed:
                    31:22:02:0c:ff:11:cb:56:5e:7b:73:ed:4b:84:ee:
                    56:ee:1f:73:fe:8f:e1:db:6e:ea:2c:6e:5b:51:09:
                    29:76:05:8a:f1:2a:ca:93:2f:81:21:6b:9c:97:b3:
                    bc:28:5c:b9:b3:f2:96:b5:27:f7:fd:b4:6c:9b:18:
                    0e:f4:68:8a:2d:3e:bc:9a:d5:ae:b2:38:56:c2:23:
                    20:71:53:05:83:d4:f0:e9:e2:0e:3e:bb:21:b7:6c:
                    0b:fd:6a:67:70:a5:6a:e2:3f:f6:b6:20:32:d4:08:
                    b0:33:de:13:82:51:70:56:d8:57:8d:94:3e:f9:5a:
                    d7:5f:80:07:61:9b:a7:07:eb:1b:3b:dc:3d:be:15:
                    48:f7:52:9a:b3:26:1c:c3:a8:44:e1:fa:61:1f:5f:
                    5b:25:71:8e:6b:cb:df:e2:48:42:ca:06:c3:6b:23:
                    93:6d:7a:21:7f:b3:f6:db:8e:65:2f:ce:df:6a:44:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:2C:D2:6A:C9:2B:FB:38:9E:B6:94:18:6C:47:71:09:A0:30:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/8d6bdb46-412e-3f89-ad68-155f71b1736d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl

            X509v3 Authority Key Identifier:
                keyid:95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:61:a8:3a:50:a2:a3:18:a5:cf:e8:e2:a2:a8:1e:21:25:d7:
         2f:a5:18:70:58:6e:58:af:07:39:fa:2c:64:43:f0:a9:c1:0d:
         e8:46:6c:64:91:5d:00:82:3d:f9:12:3e:ed:7b:e0:f2:f9:91:
         90:da:a5:57:5e:97:ad:20:dc:60:a5:20:ad:d3:49:b7:ff:2d:
         b4:f2:e6:1f:eb:02:8c:fd:0f:08:f5:ea:a1:ff:f3:55:a3:9f:
         4e:13:bd:2a:aa:68:5a:a5:75:50:28:c6:99:c6:e3:1f:ce:97:
         b6:31:18:b6:0e:8e:6d:c9:5a:00:bf:cc:d5:8f:a6:f9:e3:e3:
         4d:14:c0:25:59:9a:4e:93:ca:41:54:61:79:da:2e:80:d1:0e:
         49:14:0f:36:57:ca:e8:1e:b6:74:99:e3:05:57:dc:22:21:82:
         17:e3:fc:72:69:3b:e0:ee:06:ff:48:04:be:04:9b:32:07:67:
         15:de:0c:62:aa:01:01:0a:d0:1e:2d:9d:74:2a:ee:2c:8b:da:
         c1:30:eb:e5:ff:37:2c:57:e4:36:30:40:f3:35:61:70:8c:b9:
         af:ef:6e:49:a8:bd:c9:3f:55:87:13:cd:8a:e9:69:83:dc:ed:
         4d:ee:5b:cc:48:e5:67:95:d8:f6:62:6e:23:09:4a:49:0a:f6:
         6a:75:0c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:00:13 2025 by rpki-client