Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/b5c54115-55ad-3316-b7ed-1d4f8aaf3d64.roa
File:                     b5c54115-55ad-3316-b7ed-1d4f8aaf3d64.roa (raw, json)
Hash identifier:          FG1wnF6FPIBgPH2D2+KsAz8iMBroqznoSpOxli4TsUs=
Subject key identifier:   3E:12:8D:55:57:53:2F:7E:6A:5B:08:58:B2:DD:76:40:2A:EF:4B:0F
Certificate issuer:       /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
Certificate serial:       010D0C9F4328584A814652E07949FD32FDF5EFB0
Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/b5c54115-55ad-3316-b7ed-1d4f8aaf3d64.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     29848
IP address blocks:        144.26.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:52:e0:79:49:fd:32:fd:f5:ef:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=176c28d8-2043-46c2-8d9e-a46586d3c99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:77:ec:b2:ef:51:1e:c8:cc:b6:7e:00:70:
                    29:5a:59:ad:b4:e2:22:38:aa:3f:9c:f0:b1:34:7a:
                    2a:d4:2e:94:6d:ad:28:27:92:e3:21:92:08:c4:0b:
                    75:78:7d:27:bd:c0:20:06:c8:dd:f6:a7:11:23:14:
                    2f:86:18:6a:72:e9:14:f4:55:18:32:00:ce:f9:fc:
                    ed:32:20:77:94:94:b7:70:b2:d7:a4:db:92:3f:0d:
                    f0:81:b1:56:4c:02:14:8d:ec:f1:fb:22:fe:54:8b:
                    4a:99:91:1d:9d:35:06:14:f8:00:8b:c0:82:54:20:
                    b2:2b:ca:20:af:cc:16:3f:41:eb:64:32:24:ba:a4:
                    c7:36:e5:8e:22:2c:0d:51:32:42:12:a7:a7:a0:f1:
                    c3:d6:91:db:46:63:4d:83:40:53:1e:71:51:b7:8d:
                    e9:86:33:f0:0d:4c:97:95:28:6d:4f:ad:7e:2d:43:
                    11:7f:81:ac:f8:a0:40:60:01:97:90:bc:46:64:d0:
                    75:e7:09:43:f8:fd:21:32:ab:f8:21:69:f5:d0:8b:
                    52:14:62:9d:6f:11:bf:2a:82:41:b2:ad:b5:94:54:
                    ff:6b:b1:72:99:5d:0a:99:0c:ca:5f:18:06:aa:79:
                    ae:69:b7:e4:c4:35:b4:43:b6:1e:f1:cc:9d:55:f4:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:12:8D:55:57:53:2F:7E:6A:5B:08:58:B2:DD:76:40:2A:EF:4B:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/b5c54115-55ad-3316-b7ed-1d4f8aaf3d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl

            X509v3 Authority Key Identifier:
                keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.26.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a0:1d:06:c1:a9:27:da:2c:4e:82:31:f9:c0:d0:02:56:ba:
         14:74:3c:6c:01:bb:45:d0:a3:88:39:0f:87:b8:a0:56:e2:ee:
         90:8e:d4:b7:d3:6c:ce:c4:2e:0b:a3:1d:06:47:04:9c:1c:b1:
         6b:b0:76:5c:a4:e4:c2:36:47:de:5b:c0:a6:91:a5:3e:61:de:
         82:bc:3d:0a:55:9c:68:42:97:4c:32:c5:29:88:9c:2f:41:94:
         c4:25:69:40:5a:4c:16:7d:96:ca:13:35:eb:9a:63:fb:9b:6b:
         12:35:ad:b3:ff:7d:dc:07:c4:7b:30:63:ed:5e:c8:c2:c0:65:
         b6:d5:21:e9:8a:cb:54:36:f0:4f:ec:1b:f3:08:cf:50:26:46:
         13:22:f3:0a:e0:1b:34:6e:91:8f:0b:e8:e3:bc:ac:6e:69:c1:
         f6:4b:02:81:e8:33:b1:d9:c7:39:1e:d3:84:1f:39:09:74:40:
         7e:3e:f8:45:63:b6:fe:82:4b:8a:7e:85:74:cc:07:11:a7:04:
         6d:56:7d:0e:b1:e2:6b:64:79:76:33:56:bd:ce:19:be:80:34:
         78:a1:d0:5d:82:a0:d6:80:a9:8d:67:33:db:a9:e0:8d:bb:b0:
         7d:4a:88:e7:71:44:83:63:c7:90:7f:52:b4:e8:f2:0e:a5:67:
         fe:b6:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:37:51 2025 by rpki-client