Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/091666c4-1ddf-3ca4-b228-c77ab1155028.roa
File:                     091666c4-1ddf-3ca4-b228-c77ab1155028.roa (raw, json)
Hash identifier:          IeUxR8yRK2og43kU+AcgYnlo1YGUFSeNlMp4RyKYx1Y=
Subject key identifier:   50:AC:14:FB:07:33:95:32:E8:17:68:70:92:BF:2A:A4:EB:59:61:97
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2A2C58C53810C7557162F240
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/091666c4-1ddf-3ca4-b228-c77ab1155028.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        158.62.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:58:c5:38:10:c7:55:71:62:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=eaa77424-3785-44bb-ae48-da0cdf7b3b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:23:c7:32:c7:3a:00:bf:89:28:43:e0:20:e6:
                    93:b0:dc:43:37:2a:85:09:8e:fe:a5:f2:47:db:dd:
                    e3:1e:b8:c4:66:5b:22:5c:d0:b0:5a:77:93:d2:cc:
                    18:e2:e4:75:cc:b0:71:ec:a3:3c:07:6c:8c:25:bf:
                    59:1a:57:3a:43:64:b1:b3:45:39:fc:06:96:f9:95:
                    d3:73:ff:fd:cc:9a:86:2b:b1:24:9a:f2:bf:22:2a:
                    e9:c2:19:18:d3:2b:78:71:5a:b2:53:0d:84:9a:88:
                    e8:53:02:1f:44:af:a2:3a:6a:5e:62:84:99:c1:cb:
                    14:d0:9f:a1:c1:8c:43:10:af:7b:fd:77:bd:cb:ff:
                    a9:c1:e5:0e:9a:8a:f5:f5:f5:f9:71:3c:39:c1:2f:
                    7b:24:e8:d5:34:e7:82:f3:9d:9f:bc:66:1b:05:e2:
                    a3:4c:67:15:26:64:bf:a1:2c:c4:ca:d1:bf:cc:80:
                    45:73:a5:c0:2c:e0:9f:9e:01:c4:e8:04:1f:ac:14:
                    78:31:9c:78:57:73:e2:52:8c:70:f9:73:10:a7:af:
                    52:bc:eb:0d:9e:0b:ad:ef:3d:d0:33:56:ae:fd:f1:
                    0b:d1:42:e2:b1:c6:23:61:e7:9f:a7:50:4e:44:b5:
                    45:a5:ec:16:70:d0:6c:44:3d:47:08:b6:6c:1f:7e:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AC:14:FB:07:33:95:32:E8:17:68:70:92:BF:2A:A4:EB:59:61:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/091666c4-1ddf-3ca4-b228-c77ab1155028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:87:fa:05:d3:9c:7a:d2:9e:86:1b:19:30:af:4d:e9:85:58:
         c0:6b:6f:25:24:f4:d8:c4:b8:c4:1d:29:f6:b2:c5:16:fb:79:
         6f:e6:23:ae:a7:b8:7a:db:fa:7c:71:b3:7e:8f:31:e2:0f:1c:
         ec:ef:b4:22:19:9a:fb:0d:71:77:e2:a1:fb:cb:23:e8:05:8a:
         a6:fd:02:c6:6e:b6:3e:33:50:d3:aa:a7:bc:d8:26:f5:d0:23:
         62:6f:b2:da:91:03:98:ee:7e:11:6e:6a:db:d2:af:d1:8e:22:
         47:05:fc:e7:80:a5:be:d7:94:a0:99:9b:e0:e2:aa:06:cf:b1:
         5d:3a:f2:64:a1:b2:a6:0a:8f:02:c6:b0:5d:31:f4:1d:ce:a8:
         c6:99:fa:cd:e4:c4:d4:e8:ed:5b:12:fd:b6:0e:ac:ef:37:8d:
         13:42:38:ce:38:7a:0a:b5:6a:b7:ec:9a:12:62:a6:8e:77:82:
         7d:de:cb:6d:0e:bb:9b:bb:6f:ce:93:ae:bf:49:6b:8d:ce:41:
         f4:b1:4f:47:6d:f9:52:e4:98:7b:9b:b1:93:1d:4e:88:47:26:
         44:97:91:a8:fe:5b:0e:93:8c:f7:29:22:d4:83:2b:a1:c9:9d:
         5d:aa:ca:e8:9d:c1:17:df:72:c7:1c:46:c7:0c:8e:ae:0a:98:
         d5:b3:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:16 2025 by rpki-client