Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa
File:                     ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa (raw, json)
Hash identifier:          ML1+m/sO/N6t1bGW3oAb8G0L7Nx3HYZdkK/ZaKzjxHw=
Subject key identifier:   1D:B3:57:2D:BE:02:F2:0B:CF:81:2A:5E:69:8C:12:95:29:92:7D:30
Certificate issuer:       /CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Certificate serial:       010D0C9F4328584A43DAF81349C0C2AA96E2E880
Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     394356
IP address blocks:        158.51.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:f8:13:49:c0:c2:aa:96:e2:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=475cba07-edf1-47cd-ad5c-0c7ca28c6095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:ac:b3:8b:b5:8f:f2:ce:a8:30:5e:85:8a:
                    ba:e9:99:7a:b5:a4:1a:60:01:f9:a1:34:23:09:5b:
                    02:35:6c:d7:98:4c:d2:1f:12:44:aa:68:f5:27:e3:
                    77:f2:20:e9:bd:f2:5b:db:db:46:13:8a:f5:6d:d6:
                    fd:47:44:e5:a8:78:4a:0f:b9:89:f1:83:3e:a8:2f:
                    66:6f:74:cc:b5:a7:1b:73:39:00:35:11:f5:63:b8:
                    8e:74:02:2b:fc:c5:fb:02:78:f7:7a:97:d5:0f:00:
                    be:b8:fd:dc:01:66:7a:1a:b0:d2:e3:61:4a:dd:41:
                    ac:2e:e4:5c:0e:20:22:33:3b:5f:ab:99:8b:fe:bd:
                    03:a9:db:49:38:43:5e:62:5f:c6:c2:be:c8:58:fa:
                    f2:02:a6:cb:99:13:a0:ec:7f:cb:a5:61:cc:0f:c2:
                    e7:9f:a4:6e:09:8d:76:85:0b:7e:35:c0:ad:4b:90:
                    a6:38:e5:3c:7c:df:b8:12:cf:42:d3:d2:1a:56:37:
                    6c:9a:d9:93:8b:9e:2a:c4:20:96:7c:fc:80:7c:9a:
                    01:94:10:8e:df:1f:a2:b3:fe:62:ed:89:06:85:0c:
                    55:68:3d:9c:9a:15:8c:55:b5:4f:0c:6e:65:0e:ca:
                    31:f7:6e:a5:0e:ef:64:27:f8:6a:ea:cf:63:2e:a6:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B3:57:2D:BE:02:F2:0B:CF:81:2A:5E:69:8C:12:95:29:92:7D:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:89:71:94:7c:c3:46:4e:6b:ef:41:a5:03:57:ab:19:06:1f:
         50:6c:6d:99:29:41:cc:9e:1b:1b:0f:82:74:12:22:49:a9:c6:
         c0:f7:f1:da:79:f3:86:76:35:95:8d:db:73:d4:ae:29:16:3a:
         bc:c9:d8:9b:b0:e4:df:36:ae:92:ea:56:30:f7:4f:72:9f:16:
         74:20:0e:0f:7a:7d:90:65:a4:01:80:c4:77:5b:24:d8:34:d4:
         bd:5b:7a:35:57:31:68:03:a0:50:3d:b2:0d:f5:a5:f5:3d:43:
         75:d0:ec:1c:5b:bd:d4:77:d0:5c:b2:ab:16:53:8e:5c:cb:41:
         87:8c:a1:bf:02:3d:84:47:54:9e:14:d4:92:ec:54:b4:af:b7:
         2d:75:4f:cb:47:53:95:28:ec:56:54:5d:5d:01:6d:1b:3b:fa:
         1a:a0:6f:2a:39:9a:49:87:53:15:e1:4c:f8:13:df:b9:c4:30:
         df:7d:71:6b:ce:33:4a:85:1e:88:ce:33:8f:66:9c:c4:37:0a:
         ac:a8:a4:30:f2:d6:54:74:47:b0:fa:59:f3:bf:41:fb:75:d3:
         9d:e4:a9:bb:31:8b:7c:05:46:11:1c:c5:8f:93:65:5d:9d:3f:
         2f:e8:03:7f:ce:db:01:95:c5:20:fe:78:d1:2f:ca:df:fb:2b:
         22:0c:04:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:32:12 2025 by rpki-client