Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4278b08e-ac4d-34e7-aee5-0eee13930419.roa
File:                     4278b08e-ac4d-34e7-aee5-0eee13930419.roa (raw, json)
Hash identifier:          3UQoGrigHrOCL/9dbBVxM3bQCJFXlTVXnYeOsHi4WWQ=
Subject key identifier:   EF:C3:6B:05:89:00:5C:7D:72:FA:03:31:D8:3F:2B:DE:46:43:31:6D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B1806F6ED931E73F0EECD6440
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4278b08e-ac4d-34e7-aee5-0eee13930419.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        158.62.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:f6:ed:93:1e:73:f0:ee:cd:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=ce55018e-7c54-4b38-a109-2a2b5af9d8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:13:8a:bf:a7:87:d7:78:45:e6:86:8f:69:
                    0f:04:35:ae:0d:1a:7b:d6:2c:ca:5f:41:c5:c5:d3:
                    ce:82:fe:a4:a5:f6:71:f9:d0:cb:b2:ed:71:aa:9a:
                    5a:34:f9:bc:cb:fd:6e:75:8c:bb:39:46:fd:cb:a9:
                    52:54:b7:99:d1:77:20:78:8f:79:97:b9:41:f3:19:
                    81:84:37:e9:00:66:f8:db:64:42:40:47:94:1c:83:
                    eb:8c:84:3a:e6:ee:3a:b1:ec:7e:31:49:14:4c:e3:
                    ed:4f:47:1e:36:01:2d:b3:d7:a2:2b:22:80:c9:b1:
                    4b:c2:39:4c:0d:f5:4b:37:41:da:b3:b1:0e:a1:97:
                    3e:51:35:ae:19:c2:90:c2:aa:e5:08:b5:30:33:45:
                    c3:b5:67:b1:b9:62:f0:1c:f1:41:c6:bc:15:a1:ee:
                    bd:f1:03:94:83:11:c2:49:0e:f5:e0:84:e8:9a:36:
                    cd:de:4f:6d:f3:23:84:d2:98:50:c4:c9:f1:2b:43:
                    29:00:f7:76:16:8a:0c:39:13:5b:4a:c6:20:36:e6:
                    60:bc:8d:f4:be:54:8c:59:75:bf:5b:90:5d:d7:cc:
                    ab:d0:4e:80:92:36:77:2f:5c:a3:1f:47:e8:ac:e3:
                    71:04:77:06:b3:a3:f1:38:96:51:70:aa:f9:c8:8a:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C3:6B:05:89:00:5C:7D:72:FA:03:31:D8:3F:2B:DE:46:43:31:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4278b08e-ac4d-34e7-aee5-0eee13930419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:38:d6:3e:82:be:cf:29:fd:44:bc:8f:29:c6:58:64:1a:
         06:a2:dd:93:ef:10:95:c7:9b:3e:60:44:bb:4e:c2:20:4b:e3:
         fa:92:2b:b0:51:e4:7d:8c:e2:3c:a5:1b:43:e1:0a:07:00:6c:
         03:4f:a5:34:65:a8:92:58:92:71:a5:f8:8c:7d:6e:c9:67:73:
         4f:b6:2c:06:24:cd:d4:50:f6:f8:01:33:b5:a9:4f:5c:1c:7c:
         b8:16:be:e9:39:f9:fb:89:01:f6:d5:e5:87:42:12:af:cb:d6:
         81:46:5f:15:ff:f7:d6:70:f5:e9:69:8a:a6:e0:f2:0c:aa:73:
         4c:b6:40:6d:ab:ec:8e:4c:fa:ef:22:75:69:73:d6:c8:31:1a:
         4b:fb:7c:5b:c4:fe:ae:4f:40:f7:e6:cb:89:d8:c6:cf:d1:3b:
         e6:3e:cd:f1:64:16:2f:64:e3:0c:a5:9a:af:81:62:16:ed:1a:
         a7:85:04:17:06:75:84:5d:71:ca:a1:eb:f5:6b:2d:af:ec:7e:
         67:54:77:08:f4:56:a1:e3:d4:b7:14:fb:dc:35:82:de:f3:fa:
         13:81:31:4b:e5:d7:06:7b:31:1e:ad:54:f9:ab:1b:98:6e:ca:
         7b:49:c6:f6:8a:67:af:ec:a9:d7:ff:12:93:b9:76:75:39:81:
         da:ca:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:29 2025 by rpki-client