Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa
File:                     3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa (raw, json)
Hash identifier:          dJYW2mGZ0IrBcwTDnqeAIkJqVcMvzaHmPA8yHJ0B/bE=
Subject key identifier:   E2:0B:15:8F:44:B5:45:C2:CB:FF:2D:57:97:5C:C2:3E:D5:BD:6C:8C
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584B583CA81BDAC88032CB80F888
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     1403
IP address blocks:        66.158.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:a8:1b:da:c8:80:32:cb:80:f8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=92b897df-ada1-4abf-b5d9-605b38792cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:f9:b9:18:e8:bf:9b:97:c7:9a:70:90:7d:
                    9c:88:ae:74:5f:19:30:bc:45:19:a4:7a:3b:f3:96:
                    61:68:d2:b4:a4:1f:da:3b:08:d0:f0:6c:73:c2:f2:
                    83:05:15:66:8f:f7:ac:de:02:c1:b9:30:81:0d:fc:
                    85:fd:3e:aa:31:7b:92:65:38:15:e9:e6:25:89:f1:
                    7a:c3:2a:ff:30:b5:d4:46:c3:fa:c5:4e:32:03:dd:
                    9e:61:30:22:23:d5:0a:9f:f5:9e:89:96:7f:d2:21:
                    23:c5:9f:7b:59:da:10:67:bb:34:c7:a4:61:b9:d0:
                    69:62:91:f6:d4:bc:ee:5b:a5:ef:31:26:c3:cc:4f:
                    27:f9:c8:a3:8d:61:42:6b:e5:35:ff:62:13:4c:60:
                    c1:98:8f:06:88:d7:ee:d2:ec:6f:d9:c1:0a:b0:d3:
                    47:a6:0b:c7:7a:17:e9:61:ae:e7:12:76:42:81:90:
                    50:80:e4:1a:0c:21:2e:62:ef:f3:20:0a:0a:87:c0:
                    e2:1a:de:73:96:32:da:69:17:3d:0c:99:e2:23:df:
                    a2:54:93:a7:e7:8f:e5:e0:ac:d9:85:31:ad:96:fb:
                    b8:24:be:e2:d0:86:04:bc:d0:db:28:40:2a:0b:35:
                    2b:da:ec:b6:6f:b3:11:31:91:be:e0:a9:9f:d3:d9:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0B:15:8F:44:B5:45:C2:CB:FF:2D:57:97:5C:C2:3E:D5:BD:6C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.158.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:10:6f:0f:80:cb:fc:73:64:d2:d5:6e:09:c7:7e:5a:75:9e:
         38:ca:44:31:d2:73:9a:58:a0:e9:f7:77:e9:ea:27:68:64:17:
         5e:16:d3:96:82:84:cf:dd:ad:08:db:aa:9f:b6:58:cc:74:e5:
         64:3a:79:bd:e1:9e:f7:48:0d:70:97:6d:57:58:52:60:24:1c:
         90:ba:fd:02:27:d9:bd:d5:0e:d7:98:c0:1e:b2:1c:f9:31:74:
         f8:bc:fc:5b:d6:d7:23:6f:97:d7:dd:94:db:93:6c:9b:20:74:
         75:ef:bf:ef:f7:83:44:bc:22:e4:ae:16:c3:72:16:4b:13:a8:
         e6:46:1a:45:88:01:f6:f8:9f:9b:71:65:78:e3:1f:c5:70:20:
         22:44:30:37:e1:ed:60:84:52:7a:8a:37:fb:50:1f:2a:9a:e6:
         5e:3e:ed:03:c6:66:1a:3c:9b:e9:a2:1a:ec:58:9d:57:e9:34:
         b2:71:48:5c:50:b3:64:1d:0b:de:5e:b6:f4:9b:08:ec:67:07:
         08:68:c6:c5:1c:49:78:5c:82:3e:32:60:c2:34:b1:c0:22:24:
         7f:95:fa:42:bd:4c:0f:39:1a:cc:22:90:9f:3d:da:94:be:bb:
         83:01:8f:de:bb:bb:f0:dc:a4:d9:97:f1:68:97:4c:64:53:b0:
         19:ab:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:32:13 2025 by rpki-client