Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/e91a22cb-87e1-3554-bb34-785ca46d5f8c.roa
File:                     e91a22cb-87e1-3554-bb34-785ca46d5f8c.roa (raw, json)
Hash identifier:          y4iP90AsWYCdjLX1QaxuSnj7c0uKIvah36W+/mCNfx8=
Subject key identifier:   27:47:9D:90:C2:3A:94:DF:C0:7A:D7:5B:8E:BD:A8:6F:2E:00:5D:D4
Certificate issuer:       /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial:       010D0C9F4328584AD3A11583C40F50AA4890D780
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/e91a22cb-87e1-3554-bb34-785ca46d5f8c.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     1448
IP address blocks:        156.146.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:15:83:c4:0f:50:aa:48:90:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=78afbf2e-abd4-4868-bf87-8942bde1fb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:18:e3:08:e5:a9:35:4c:19:d5:d1:f2:ea:
                    09:a2:6b:f7:c1:c4:b3:10:de:4c:d4:c8:63:f0:0a:
                    c2:59:8f:41:1b:fd:e8:14:90:4b:9d:9c:de:94:1f:
                    1f:12:7e:2d:2f:42:2c:21:f6:9e:5d:8a:af:91:fa:
                    aa:be:45:8f:f9:8d:c2:be:da:79:e2:a2:dc:e5:b7:
                    0b:9f:cc:6c:4f:77:60:17:31:e4:84:f0:59:7d:f6:
                    a4:70:f7:27:67:d2:af:ce:f4:4c:95:ac:a4:99:b9:
                    91:d8:aa:bd:02:d3:c4:68:b4:28:59:3d:f4:47:7e:
                    65:f2:62:80:98:68:4a:3d:8f:57:e7:92:09:6b:0f:
                    a2:5e:ee:18:a5:91:8c:15:28:98:d9:34:76:71:a1:
                    67:69:eb:f5:36:e8:a7:b2:2f:72:6e:33:e4:e2:e1:
                    85:90:26:db:c6:95:2a:14:ca:09:0d:0f:c3:27:7e:
                    73:44:d1:3b:6a:4c:74:95:5b:e7:6f:56:a0:e1:be:
                    72:84:97:11:0b:db:02:58:e6:d1:87:da:87:15:23:
                    6a:a5:a0:47:98:8c:a9:d4:99:8b:fe:33:85:c4:3e:
                    23:a4:08:c8:d7:44:7f:02:90:cf:c4:fc:56:8a:bf:
                    23:b9:1f:e1:77:92:70:5d:13:bd:7e:b7:84:38:9c:
                    79:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:47:9D:90:C2:3A:94:DF:C0:7A:D7:5B:8E:BD:A8:6F:2E:00:5D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/e91a22cb-87e1-3554-bb34-785ca46d5f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl

            X509v3 Authority Key Identifier:
                keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.146.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:75:e2:69:83:61:01:f2:95:ed:f0:e5:51:c7:b5:c2:56:a1:
         f6:7f:cc:94:9e:6a:b0:e1:31:a0:2f:f9:0a:b8:54:fc:7e:c1:
         a5:a1:ad:44:78:4f:e4:24:0f:24:c3:f8:af:15:2b:57:a1:fd:
         83:32:0f:49:33:bb:35:d4:c7:58:2b:6f:3c:70:26:d7:9f:17:
         0d:f2:72:af:df:f3:02:63:d5:61:14:1e:73:4f:7b:71:81:a1:
         28:d4:7f:e1:c7:0b:51:f8:1b:42:df:12:9f:ee:bc:ae:3e:c1:
         2d:2b:a9:11:4e:62:1f:cb:eb:73:90:ce:10:ba:6b:70:d6:de:
         a1:d0:f1:d6:21:ff:00:13:26:6e:00:8f:38:00:54:9d:c6:6e:
         6d:1f:62:e0:21:d8:9e:26:3e:dc:3c:12:a3:12:8a:ad:be:d3:
         ec:33:db:92:1f:52:cb:4d:76:0c:4e:de:60:d8:1d:b5:9a:ba:
         6d:64:c2:e8:30:1d:c8:be:0d:2b:21:4c:41:1e:e4:b8:5d:9e:
         52:30:99:8b:34:9b:93:cd:51:71:27:c9:e4:ad:e7:21:8c:10:
         0f:00:e3:63:74:31:6b:8e:b1:6b:d6:06:a7:2c:94:34:c3:ef:
         b4:d3:4f:15:49:5a:c1:df:74:54:83:2c:30:98:f4:d5:a5:2e:
         1f:92:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:12:02 2025 by rpki-client