Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/926e0972-1aa5-3620-bbba-6986dfcb7187.roa
File:                     926e0972-1aa5-3620-bbba-6986dfcb7187.roa (raw, json)
Hash identifier:          8aTqgsLJqThU1eMnRf2/JaT8nnIZvYKNRDgcojbM/jE=
Subject key identifier:   84:DC:14:F9:6B:1E:27:A3:94:09:6C:E3:2E:87:62:3F:1E:C1:7D:43
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584ACE0B9CC2CED72B512D77BC00
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/926e0972-1aa5-3620-bbba-6986dfcb7187.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     16666
IP address blocks:        148.77.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9c:c2:ce:d7:2b:51:2d:77:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=0a470cee-d08b-4f0a-a756-5370b3932738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:b9:ef:fb:62:ac:6d:21:38:ec:09:f0:9c:
                    c3:3d:3a:6a:b7:c0:e6:e1:61:4e:b5:58:32:6d:05:
                    3d:4e:5d:2b:32:90:ce:4c:5f:8a:2c:5a:30:db:fb:
                    bb:ac:76:ba:84:72:3c:be:5c:af:b0:53:81:23:c6:
                    1a:1b:32:fe:e6:e8:1c:59:80:bf:98:39:79:4e:12:
                    89:32:d1:57:0b:77:ad:6f:30:18:ba:e8:7f:e9:40:
                    f2:7b:94:c7:9a:98:cf:b9:b5:22:ec:f8:e8:37:86:
                    a5:e6:5c:0c:24:c2:a9:9a:3c:0e:9a:50:70:78:32:
                    1b:8f:99:53:c5:d2:9c:26:20:60:0c:dd:b3:48:a3:
                    f8:52:21:f9:18:4c:04:d1:a5:20:6f:0a:ff:44:86:
                    a6:a5:bd:98:e3:52:a2:53:51:60:0d:9f:22:b7:29:
                    27:f1:2f:ae:30:35:71:b3:a1:45:05:29:ed:35:87:
                    e9:b7:81:33:02:7e:0c:91:c9:54:7d:65:88:91:05:
                    ae:61:60:ff:ad:d6:c8:6f:bc:ed:36:3a:03:f9:b7:
                    20:40:af:b2:a2:12:5a:fe:42:e2:99:36:a0:9a:e3:
                    d5:d7:c7:d3:f7:cd:0e:f4:0f:d9:c9:fe:fd:b7:be:
                    bf:15:93:ef:73:e0:c4:79:37:df:43:15:14:67:52:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DC:14:F9:6B:1E:27:A3:94:09:6C:E3:2E:87:62:3F:1E:C1:7D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/926e0972-1aa5-3620-bbba-6986dfcb7187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:39:b2:e6:f7:ff:b4:15:5d:14:09:40:55:bb:2b:32:f2:e4:
         42:53:fb:7a:d5:eb:30:35:72:c5:68:fb:9b:67:f5:60:bc:b4:
         cc:7e:52:6e:f2:ee:ee:ea:a7:9d:73:c9:4c:a9:e4:99:d4:bc:
         b1:a8:65:04:cf:e3:8d:3b:af:8e:3a:74:41:83:fb:e0:6e:61:
         62:e7:2c:0e:b8:19:b5:af:aa:74:b4:cf:64:58:7f:7c:68:75:
         0a:ea:db:97:e4:7d:2e:22:c7:cc:48:b6:e1:96:bd:fe:54:f2:
         8e:61:9a:87:16:63:20:43:fb:83:26:d8:76:44:e4:21:a7:16:
         ca:71:8a:bc:84:7d:dc:38:7a:40:6b:64:99:2b:1c:13:f3:56:
         0c:b2:cd:67:d1:c3:54:b9:dc:ce:2d:48:3e:34:23:80:38:2e:
         be:73:61:50:52:12:58:b3:43:46:02:6c:02:32:6e:c4:06:93:
         3c:6a:d5:84:dd:c7:55:d6:e0:57:25:87:99:75:06:9c:03:2b:
         90:72:a4:2f:21:45:9f:97:35:5a:9f:cf:b1:8f:0a:78:b9:51:
         df:96:d8:f1:38:7e:34:70:78:23:01:17:52:ef:04:3f:83:3a:
         29:15:91:7c:50:e3:69:8e:63:ee:9d:82:5a:1e:fe:4d:7e:b8:
         ec:a1:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:57:16 2025 by rpki-client