Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa
File:                     3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa (raw, json)
Hash identifier:          vitwes0OQ1eDjnaQR1siWO7AC8ZABrim5dZE7OFyYoo=
Subject key identifier:   73:05:B7:8E:2D:45:B9:19:CC:4B:B1:7D:6A:2B:D8:41:97:0B:1C:29
Certificate issuer:       /CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
Certificate serial:       010D0C9F4328584AF52129C3F17CF047B844DD80
Authority key identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     8849
IP address blocks:        162.247.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:29:c3:f1:7c:f0:47:b8:44:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=88e3ac8c-3efe-4c0e-9bfb-3acb453b713a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f2:ac:a2:1a:83:82:64:c9:c3:a6:5a:6e:e6:
                    67:47:3f:e0:15:b7:f8:9e:ed:c7:df:ac:02:61:d4:
                    6f:66:7a:fd:5a:2f:7c:05:bc:1a:42:72:69:46:c8:
                    ba:c5:22:08:64:f1:5d:a4:c9:55:6d:04:1b:96:e7:
                    f9:05:38:53:f7:6c:2a:ff:07:db:49:43:c9:c7:ef:
                    a0:27:43:5c:a3:a1:40:58:5c:18:7d:e4:32:b2:98:
                    ad:0e:b6:d6:9d:34:9e:31:16:81:32:1f:11:c2:e9:
                    c9:85:14:51:1f:b5:98:eb:e8:43:3b:94:fe:ab:96:
                    24:76:a9:bd:ca:7d:98:d7:32:c7:93:02:2d:9f:e8:
                    6f:53:32:36:d2:8d:12:9e:4d:57:b0:1d:18:8e:fb:
                    4a:ad:50:f0:99:96:0b:41:4f:2c:1f:86:24:42:be:
                    67:d4:b1:a4:25:f2:d5:d9:95:e7:65:5a:37:73:5e:
                    c6:d1:aa:39:ce:ca:ca:25:da:9e:d0:e1:0d:7b:2a:
                    5b:ee:92:19:9c:74:db:10:8b:61:f8:51:74:83:b9:
                    44:31:b4:60:eb:64:9c:9f:14:9a:4f:62:3c:79:36:
                    81:6e:0b:41:7f:30:71:46:e9:cf:77:73:16:45:49:
                    1b:45:bb:af:98:9d:11:7b:37:78:54:fc:a4:9f:b9:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:05:B7:8E:2D:45:B9:19:CC:4B:B1:7D:6A:2B:D8:41:97:0B:1C:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl

            X509v3 Authority Key Identifier:
                keyid:8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b3:62:6d:d9:6d:7e:c2:83:e9:79:2c:48:3b:d1:f3:ff:55:
         b9:50:23:9b:02:81:86:a7:72:3c:41:7f:b0:f0:29:32:df:36:
         93:3d:55:6a:6c:84:d9:f0:58:7a:5a:9f:82:05:30:0d:cd:31:
         d0:3a:57:5d:5f:3e:90:06:04:7a:06:96:c2:f7:b6:38:0a:e5:
         ef:26:a6:e7:fa:e0:e6:3b:1b:a0:e1:b3:ee:d9:7d:62:68:a2:
         56:c2:c3:90:91:04:15:f8:b7:ad:e1:27:ea:2c:e2:02:af:61:
         b8:6c:b3:24:8a:9b:b9:64:56:f1:cf:4e:b3:b9:c0:be:e9:97:
         f3:36:94:86:eb:ce:14:22:94:93:d8:0b:ff:1c:19:7e:8f:1a:
         5b:2b:74:e9:ce:b5:e9:33:06:77:98:c5:cc:50:88:69:e2:96:
         47:40:d5:c4:95:7b:93:3e:b4:7b:21:27:b9:b5:6a:6a:c8:0c:
         83:b6:33:d9:7f:d6:c1:c0:fe:2a:b2:cb:4c:e0:94:0f:d9:0b:
         61:08:46:4a:f2:0a:ec:d9:ed:d2:7b:bb:89:e2:d0:bc:bc:7c:
         d9:d2:88:7a:33:72:96:cd:8f:97:45:74:3b:8c:52:4f:76:f7:
         2d:24:52:7a:cd:cc:64:73:c7:b1:65:5b:ef:92:01:3e:dc:96:
         e3:27:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:39:50 2025 by rpki-client