Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c321ecc5-d89e-379f-be4a-1ff183ad1529.roa
File:                     c321ecc5-d89e-379f-be4a-1ff183ad1529.roa (raw, json)
Hash identifier:          hbgkq45oo9Z3rEuOsZtbU1sujGCnlwCnZJ8m9z1yIhM=
Subject key identifier:   E6:FD:F1:D7:4D:DA:DC:47:D1:49:D9:D4:D5:E1:27:30:33:70:C6:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD0239ED999B65EE121180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c321ecc5-d89e-379f-be4a-1ff183ad1529.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33489
IP address blocks:        162.151.239.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:02:39:ed:99:9b:65:ee:12:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=6800ebc0-acca-41b3-9ed3-2ea1c5f33225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ba:3c:4d:9e:8c:fb:86:c7:e2:53:c1:74:46:
                    bf:62:1b:49:f6:72:29:7a:63:93:7c:9e:c5:b0:73:
                    bf:6f:52:f5:1b:d5:d6:d8:40:58:0a:c7:e6:b4:e7:
                    9e:ca:88:7d:7e:0b:f6:0c:c7:83:91:e1:6c:05:c5:
                    90:34:8b:8b:c1:54:25:c8:62:01:53:c8:08:2d:30:
                    99:6f:9f:2c:c7:4e:01:ab:e3:d3:c4:e5:6f:02:68:
                    68:f6:26:b1:6a:ae:94:45:62:4e:5b:b5:0b:50:05:
                    5c:e1:0d:8f:31:be:87:36:7d:4f:ab:d6:28:1c:93:
                    e5:7c:ac:a8:80:e8:86:3f:bf:fe:b1:92:e9:c9:22:
                    14:58:fd:92:94:2e:f7:59:3d:e8:c2:17:0b:52:91:
                    05:90:52:62:e9:a2:2d:6a:29:2a:fb:72:c6:a9:a8:
                    43:2b:f9:b3:6c:2a:00:06:e5:92:9c:a9:ab:12:39:
                    94:fa:f3:43:69:03:46:f4:a5:07:ee:66:43:82:56:
                    65:16:99:4e:c9:d5:d2:01:74:81:e3:95:2d:e3:74:
                    bd:70:e4:60:3b:1b:d1:9c:5b:bc:55:d8:3a:d7:9b:
                    1b:0e:e4:88:5f:53:aa:eb:c1:02:09:01:19:49:0f:
                    4a:49:76:a7:79:c7:49:61:8c:c6:b2:47:c1:17:02:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FD:F1:D7:4D:DA:DC:47:D1:49:D9:D4:D5:E1:27:30:33:70:C6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c321ecc5-d89e-379f-be4a-1ff183ad1529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.239.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:2c:77:b0:4f:96:f2:e1:c4:2c:32:4e:0e:6d:cf:f2:a7:df:
         9b:78:37:37:52:12:0e:3d:6a:9a:5f:14:c8:10:6b:17:52:8c:
         d1:a4:c7:d1:a1:f6:ac:95:c9:53:fd:0b:24:10:2c:08:ad:37:
         f6:a1:c6:e8:8b:c1:2b:cd:48:54:20:5c:eb:16:90:c5:8f:ef:
         28:b2:70:62:31:c1:eb:76:2e:35:20:9f:17:b0:25:80:e6:e1:
         63:b8:81:df:c3:5a:c5:b0:8f:9a:21:db:51:ac:76:46:eb:b8:
         fe:2e:65:da:dc:2e:57:64:ff:eb:02:71:ad:bd:07:01:03:d3:
         72:bc:fb:b1:c5:0c:30:5c:93:da:7c:12:7f:d8:9d:f0:73:89:
         f8:75:42:1c:13:bf:f4:4f:a9:7f:d1:65:81:2d:18:27:12:3a:
         b3:c7:08:ca:e0:ff:19:bc:0c:68:4b:d5:2f:f3:46:a4:56:b7:
         80:2e:39:b1:2c:dc:90:a9:ee:20:48:61:db:e6:e3:42:8d:d9:
         5d:42:aa:22:0c:09:fd:c4:c1:f0:f4:b3:b6:67:fd:c2:38:f9:
         48:70:6a:86:20:80:0b:61:fe:f5:ea:4c:d5:01:4d:e6:42:05:
         96:80:f8:70:7d:9b:48:c5:af:eb:98:48:15:81:a6:05:2b:af:
         64:39:14:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:14:25 2025 by rpki-client