Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/a824a67c-0613-3f73-98c0-d4773a77fbd5.roa
File:                     a824a67c-0613-3f73-98c0-d4773a77fbd5.roa (raw, json)
Hash identifier:          BnhoZVt23ADH+mwAuC0+zCyyx7gGbPDL+XWwDkzDxC8=
Subject key identifier:   42:23:B1:89:4C:45:BC:7C:31:D1:FA:72:9F:A8:89:CE:CA:EC:26:DC
Certificate issuer:       /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
Certificate serial:       010D0C9F4328584A5E6062D9B82EA29C2036B400
Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/a824a67c-0613-3f73-98c0-d4773a77fbd5.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        165.125.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:62:d9:b8:2e:a2:9c:20:36:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=47f90553-cd34-42c9-9198-bc0c4dd33eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b5:08:56:57:0b:23:91:c5:b7:c1:c6:fb:36:
                    47:b8:b4:67:bd:70:9d:25:14:66:ec:bc:99:4a:f5:
                    a6:e7:85:5c:3f:b6:6b:17:12:db:0f:ab:0c:96:e8:
                    1d:71:7c:7e:b0:0c:11:82:3b:d4:25:4d:f1:ea:7b:
                    52:fa:3c:17:2b:70:f7:07:8a:76:79:7c:a7:43:f9:
                    00:e1:73:d7:5f:c6:2f:23:a2:3f:b6:42:91:75:81:
                    da:95:b4:00:b7:1c:b3:f7:e6:5e:f4:5c:27:12:54:
                    a2:dd:6e:ee:7f:e0:cb:7f:42:63:0e:a8:2c:bf:04:
                    b9:dc:dc:80:7e:ad:57:15:6a:e8:c9:5b:05:11:aa:
                    0c:47:51:34:96:89:5a:0b:dd:8b:43:80:09:bd:03:
                    e3:97:ee:21:28:73:68:20:45:4c:4e:af:e6:e9:0f:
                    9f:06:b3:9e:99:b8:85:52:d0:11:b5:0d:a4:a7:ad:
                    48:89:38:70:91:f1:73:c7:d2:94:a9:73:cf:32:6e:
                    bf:49:37:8c:bc:db:d4:4b:52:2d:cc:be:05:73:41:
                    66:75:65:3a:ec:00:39:a2:ad:38:75:84:1d:ec:1a:
                    03:14:46:16:4e:e8:c7:9b:ba:bd:60:2e:2b:42:15:
                    c7:8c:ed:a3:4b:9b:8d:15:57:c3:cd:4f:e5:1f:16:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:23:B1:89:4C:45:BC:7C:31:D1:FA:72:9F:A8:89:CE:CA:EC:26:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/a824a67c-0613-3f73-98c0-d4773a77fbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.125.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:dc:93:fd:99:25:69:0f:27:6f:ca:65:ae:7f:db:51:4e:80:
         a6:99:58:3b:49:4b:2c:b3:d0:ec:3e:fd:de:16:db:54:0b:61:
         db:fd:c8:62:53:35:7b:06:c8:59:5a:0d:90:31:3a:3f:df:0e:
         4f:7f:e9:f0:01:03:09:df:33:e9:93:8c:37:69:f9:d6:96:f8:
         bf:14:af:71:35:ef:8d:3a:02:39:13:d1:90:1d:c4:37:a0:87:
         3a:38:e4:09:ef:ff:76:d0:c0:5f:72:57:ff:f6:57:50:7d:69:
         c5:29:93:83:8b:46:d2:83:8f:f8:2b:80:a8:86:11:78:3c:9b:
         8a:35:39:a7:89:af:4d:bb:78:da:30:80:b8:f3:14:e0:80:92:
         44:3f:93:99:52:45:de:61:d2:bd:fe:85:92:91:a5:33:21:36:
         33:5a:93:05:aa:4a:64:e8:cf:2c:6b:ec:b9:22:57:49:a1:02:
         5c:1c:dc:82:5a:ff:88:9f:49:02:c7:7d:6c:89:5d:12:3d:c2:
         0a:d2:00:7d:e6:f5:3c:61:97:b3:90:d5:a5:40:d7:90:bb:bf:
         30:3f:3e:86:f4:21:e8:5f:07:0d:20:d9:cb:d6:70:86:f8:78:
         95:ac:aa:af:ae:b9:10:bc:5f:f0:36:1f:de:a7:9e:3e:6b:db:
         82:c5:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:47 2025 by rpki-client