Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa
File:                     8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa (raw, json)
Hash identifier:          srZ0dlmR/sbgkA15V0IQ1jTP7oqZVuvJEFlLKNy8bvc=
Subject key identifier:   BD:94:F9:22:62:81:FC:B9:A1:46:5E:05:A1:AE:A0:5C:9A:B1:35:38
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584B63673E50999B4BF77714E200
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     16532
IP address blocks:        66.158.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3e:50:99:9b:4b:f7:77:14:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=e3fac6e3-ac6b-4b5d-ba20-cc486575cc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c5:77:00:3f:b2:c9:d0:b8:d1:30:8f:79:a1:
                    88:b7:ea:5f:af:3f:ab:27:25:e0:73:18:85:c4:bd:
                    52:64:8b:64:b5:a2:68:89:87:fd:ab:e7:64:d1:35:
                    d4:d5:1b:09:29:20:91:d0:df:af:0d:8a:97:66:5c:
                    b7:6c:92:71:dc:15:59:e5:7b:d3:4e:a1:bb:2a:9a:
                    ba:43:88:4e:02:ef:40:a7:2e:4f:3c:e9:82:2a:65:
                    1e:13:ca:c5:93:07:74:45:a7:90:20:36:f9:16:65:
                    2e:ac:0a:72:a2:a4:92:b5:2d:fd:67:d4:15:0f:8d:
                    4e:03:e7:54:1d:84:f8:a9:73:d3:f6:9b:52:6b:e4:
                    e5:93:19:f7:dc:43:7c:38:83:55:26:66:db:24:b0:
                    80:43:84:de:5a:82:c8:f9:f6:f7:0d:ca:0c:f1:61:
                    c1:17:9d:aa:53:e0:35:b6:49:33:21:95:9c:dc:09:
                    2c:1a:33:c1:b8:27:64:6b:b2:74:95:e5:da:17:a0:
                    5e:96:05:0c:b4:c5:0b:11:60:30:81:8b:13:46:77:
                    ef:e2:56:ff:ad:8c:e3:67:f5:c9:68:c6:06:c1:a4:
                    b0:00:a6:57:c2:94:1f:8b:89:a4:aa:cc:28:47:3e:
                    85:65:6d:1d:1c:71:04:93:5b:78:04:bc:d4:ae:de:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:94:F9:22:62:81:FC:B9:A1:46:5E:05:A1:AE:A0:5C:9A:B1:35:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.158.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:cf:b0:f8:38:48:02:90:c7:63:c6:46:ad:15:6a:a4:54:2e:
         76:0a:c5:36:9e:f9:20:4a:03:52:8e:14:9d:66:c3:66:fd:27:
         a3:6e:35:06:42:1b:c2:4a:a8:7c:62:af:41:13:0a:e5:36:dc:
         4c:89:3c:75:2b:08:bb:63:4f:7c:91:63:70:68:f8:e8:70:7d:
         cf:15:a0:5f:fa:67:2f:d2:eb:36:49:2c:c8:9a:e8:4e:38:94:
         0d:a4:6d:50:29:b2:40:90:fa:c7:e2:98:06:48:67:e1:0a:71:
         26:74:6e:55:3a:f2:df:38:d0:d6:44:82:2b:64:f5:b9:9a:68:
         3d:45:c7:e4:79:08:e4:96:36:ad:4b:e5:aa:e4:1b:a1:d5:b6:
         ab:8b:fd:e3:a8:3d:da:80:f1:55:2f:08:24:43:91:d0:c8:64:
         56:1a:0b:42:8c:64:29:10:3f:f4:79:5a:12:5e:be:44:33:ed:
         09:22:94:9e:9e:70:f8:d1:7a:93:4c:26:be:99:de:1d:a6:84:
         3a:8b:7f:9e:b1:18:3f:fe:db:d5:2a:3d:e0:da:7e:50:e1:83:
         ed:41:fa:58:27:c9:6f:6a:80:8c:0e:d8:e5:d2:45:32:c5:cd:
         a4:a4:3a:2f:2f:20:e6:c9:47:75:66:70:76:8a:5b:ea:b7:ee:
         f4:f8:bc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:58 2025 by rpki-client