Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/74564d89-8c64-3bcc-a70f-70303d155fc2.roa
File:                     74564d89-8c64-3bcc-a70f-70303d155fc2.roa (raw, json)
Hash identifier:          e7kt6r5uRchzPTFJ1lhWkU1TCTOJWoaALZ5S1byYmbs=
Subject key identifier:   1C:88:B9:3E:7C:65:A3:1F:3D:B0:81:1C:C8:7F:9C:98:7D:A3:EC:51
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584A84A6B18CD2D92351B906EF50
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/74564d89-8c64-3bcc-a70f-70303d155fc2.roa
Signing time:             Mon 14 Jul 2025 18:03:20 +0000
ROA not before:           Mon 14 Jul 2025 18:03:20 +0000
ROA not after:            Sun 12 Oct 2025 18:03:20 +0000
asID:                     16509
IP address blocks:        158.51.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:a6:b1:8c:d2:d9:23:51:b9:06:ef:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jul 14 18:03:20 2025 GMT
            Not After : Oct 12 18:03:20 2025 GMT
        Subject: CN=4fc57a39-8d61-40b3-a49f-74b66c963927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:8b:cd:d1:d2:c5:4a:69:a6:aa:a9:e5:e5:
                    c8:fb:26:5f:e6:72:aa:f5:7a:32:42:36:6a:d6:78:
                    1e:55:09:3d:8e:1a:81:2e:1a:8c:5f:71:ee:7d:0d:
                    5b:f9:d5:99:7c:76:30:26:ae:bc:af:57:31:70:e4:
                    97:ba:da:35:a1:89:a3:94:05:7e:b6:bb:9b:27:14:
                    57:b0:5a:86:2c:2a:b6:aa:52:66:a6:ed:4e:a2:f7:
                    9c:fd:44:86:b5:55:e9:7a:81:71:50:a5:7a:ac:16:
                    8a:16:87:96:82:d2:2c:c6:ca:8d:89:0a:97:79:a4:
                    ca:36:ea:77:4e:50:1d:ec:0c:e9:9d:c8:60:5f:03:
                    76:51:65:34:23:be:ab:0e:17:2a:43:7e:7b:a7:cf:
                    ba:08:43:d6:ca:df:83:0c:16:bc:72:19:79:d3:8e:
                    ec:6b:0e:04:2e:3d:c1:a0:3b:f6:d5:9f:2c:99:9c:
                    d7:a9:24:0d:89:4c:88:8e:b1:59:2d:47:e3:d4:b4:
                    7a:24:6a:9a:29:07:c3:4c:e6:2a:58:23:fa:fb:30:
                    1c:0f:39:18:95:5c:2b:f6:09:e5:67:22:cd:df:c8:
                    9d:16:3f:10:af:12:44:e3:bc:5a:98:4f:ab:76:fe:
                    86:2f:ed:94:46:1f:a9:b8:96:53:32:8d:aa:57:fe:
                    72:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:88:B9:3E:7C:65:A3:1F:3D:B0:81:1C:C8:7F:9C:98:7D:A3:EC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/74564d89-8c64-3bcc-a70f-70303d155fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:29:19:1f:ae:35:ed:8f:8c:19:0f:af:e2:f0:c1:33:3d:a3:
         ef:37:18:97:68:0c:54:1a:9f:24:bf:95:92:5f:2b:86:5c:cc:
         52:11:56:f7:06:8b:8d:a8:a6:a9:98:af:78:8e:41:b0:58:b9:
         12:50:1a:77:b4:70:65:7b:24:2b:9d:97:cc:47:5b:5f:07:90:
         9b:08:16:04:f6:14:73:ae:c8:1d:91:a5:f2:47:e1:85:cc:07:
         71:33:da:25:f3:5b:86:1a:f7:25:e6:12:7d:9b:bb:cb:17:b0:
         2a:d1:b3:25:09:4b:0a:c2:02:30:f9:5a:4f:b6:17:5f:34:94:
         1f:21:ed:64:2c:bd:3a:55:ad:b1:e2:e6:cf:00:9d:fe:bb:1b:
         38:43:9b:76:e5:e3:aa:b6:d3:aa:fd:3b:41:57:ad:d8:f8:5a:
         a0:1c:1d:0d:d0:16:36:ed:c2:6d:06:74:61:ee:ba:b7:06:69:
         dc:ba:7c:af:39:4b:12:30:c2:60:5c:4d:ff:d9:ba:cf:00:1b:
         88:76:96:58:c1:68:2d:56:0e:b1:52:2c:fb:58:28:cd:88:a9:
         2c:a4:84:7f:a6:0f:d3:8f:bf:aa:cb:84:a5:ba:b1:dd:36:41:
         9d:a7:2b:4c:6f:fa:bf:11:71:5f:61:e4:d8:fb:34:05:a4:7d:
         dc:a2:df:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:51 2025 by rpki-client