Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/259ba3d0-4349-3f21-9fe6-6c9dfdd15832.roa
File:                     259ba3d0-4349-3f21-9fe6-6c9dfdd15832.roa (raw, json)
Hash identifier:          KJFxGJirrtCruQ2lH3JZiAE+pwI7nSNUDaSyu3uVUhw=
Subject key identifier:   42:A0:3E:A4:C6:49:2A:83:1B:E4:1C:3A:E4:3E:81:0F:62:DD:8E:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBB0C5CAE0F237BEDEAEC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/259ba3d0-4349-3f21-9fe6-6c9dfdd15832.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33650
IP address blocks:        75.147.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:b0:c5:ca:e0:f2:37:be:de:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=65d2413b-8f96-4778-8be9-772bb7245679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:ed:6c:6c:90:2b:70:7c:35:b0:96:55:a4:
                    5e:6e:db:4b:4f:b4:1e:1a:45:24:5f:9a:91:43:22:
                    4f:69:fb:75:96:e1:9c:c8:7c:db:b1:96:2d:b8:ee:
                    16:23:60:af:e5:39:3f:0c:ff:61:9c:f6:22:07:ed:
                    fe:d5:e7:d5:b6:28:3b:2f:13:2f:f8:68:de:5b:0c:
                    b7:58:40:80:00:ae:df:02:18:b7:ad:de:cc:fe:d4:
                    f8:e5:e0:20:17:7c:5d:d3:c1:13:93:22:dd:42:5b:
                    ae:2c:67:4b:63:d1:06:4b:7a:6c:bb:d5:64:cb:f9:
                    40:1d:da:82:24:3b:a5:a0:29:e9:15:c9:4e:3f:e8:
                    fe:1b:ee:5b:40:a3:17:74:53:6e:2e:39:c6:ee:c1:
                    57:93:bf:2b:b0:5c:d8:bc:29:f8:e2:f5:a8:4d:a6:
                    31:61:d7:54:f3:74:d7:bf:9f:72:b0:bc:cb:74:28:
                    94:93:12:02:ef:98:49:3e:b7:38:8c:71:e3:3d:a7:
                    95:47:9c:3f:1c:7c:e0:e3:ca:04:23:11:2f:4e:1c:
                    81:bd:49:61:b3:38:38:de:7a:16:7d:84:6b:f4:02:
                    09:f5:a7:7a:40:6c:b5:02:38:b3:a6:95:b8:e6:ce:
                    cd:ca:03:e3:c2:5d:48:e7:3c:16:05:6c:69:3f:09:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A0:3E:A4:C6:49:2A:83:1B:E4:1C:3A:E4:3E:81:0F:62:DD:8E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/259ba3d0-4349-3f21-9fe6-6c9dfdd15832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.147.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:58:c7:ae:fb:f5:30:0d:8a:9a:8c:5e:fb:ae:1a:8b:f6:04:
         02:c0:ae:66:7c:e2:95:7a:e9:e5:89:cc:6e:ce:f8:9d:da:8e:
         6b:d1:15:83:01:6a:83:73:e9:bf:a5:38:eb:a5:c6:2f:1e:07:
         46:36:9d:b5:1f:16:fc:b1:24:9d:31:4d:6c:b1:56:70:d9:1b:
         95:9d:0a:5c:92:54:a7:f6:20:39:18:19:56:ba:b1:2d:29:7d:
         66:03:22:ae:4d:ca:c7:a7:20:91:d7:f8:20:af:28:e2:8c:30:
         d7:9c:16:70:09:99:f3:3b:e2:7a:98:04:0a:d6:d8:35:b2:13:
         77:7c:f4:3d:2f:71:0c:97:e9:64:19:ae:d3:d5:2a:9a:90:c2:
         bd:d8:22:85:6f:7e:a3:dc:04:0a:fb:5c:67:aa:71:37:41:33:
         4e:94:6e:37:5b:ac:0d:49:e0:ce:83:a9:de:0b:1a:08:f3:3b:
         ee:31:e9:9a:f9:01:fb:af:bf:23:c8:59:4c:8b:e3:a4:4f:18:
         84:34:bf:81:75:ea:ae:55:7f:db:66:e1:a1:5e:c8:4c:fa:48:
         e7:3a:e2:3a:0a:b5:5e:fb:02:41:c0:ec:53:40:99:13:f1:45:
         9d:6f:8f:13:1d:81:25:41:e0:a4:57:8e:74:e1:ae:d7:06:e0:
         d6:a4:cd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:42:00 2025 by rpki-client