Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/85eef083-3778-3c48-a361-5115785da7d0.roa
File:                     85eef083-3778-3c48-a361-5115785da7d0.roa (raw, json)
Hash identifier:          0HmyLBtVnHH55wLnxtHzv+sr0sCa/AlCkb7BREjS9Yo=
Subject key identifier:   43:16:B8:C6:CC:16:D7:9C:35:09:68:3A:D7:4B:92:B6:8E:D0:7E:AB
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584AE461160ED907E655E421C080
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/85eef083-3778-3c48-a361-5115785da7d0.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     399856
IP address blocks:        65.51.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:16:0e:d9:07:e6:55:e4:21:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=81288d06-5d03-49c5-b121-ab690bb6c9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:96:ec:a0:35:30:b7:46:46:d1:34:75:fe:
                    a8:a4:31:14:b7:56:b9:f7:bb:6a:da:af:ad:cb:fc:
                    40:3e:14:1e:96:f8:9c:53:e6:66:48:f8:9e:85:99:
                    42:89:d9:dc:cc:cb:91:2c:e1:c8:0c:96:f6:3f:ca:
                    54:56:75:d3:40:1e:3a:04:8b:f7:b7:ad:a2:54:e8:
                    6f:4b:7b:df:dd:01:d4:36:6c:e1:aa:45:a6:92:ad:
                    26:b2:58:e6:81:db:70:41:4e:11:a7:50:57:8f:d1:
                    3b:66:e6:a0:84:48:e3:ef:de:86:24:98:de:2b:68:
                    b2:4d:6c:27:80:ec:22:12:1a:ad:35:3c:c6:f4:4b:
                    6f:f5:a2:89:4e:dd:46:ce:8b:7d:99:67:03:2a:df:
                    12:2e:6c:e3:dc:c7:7b:83:d9:e9:56:4a:14:88:f0:
                    5d:c2:35:9a:f1:d1:96:f3:ec:45:44:42:01:7a:35:
                    d7:8f:53:89:e9:a3:df:6b:48:b5:1d:17:b4:b4:df:
                    12:db:78:82:77:39:77:18:4d:37:de:62:82:21:4f:
                    74:c1:dd:c3:1e:d3:ca:da:a1:e8:d1:d6:18:08:46:
                    06:3a:3f:c4:64:a7:30:0c:27:9d:5e:da:65:ad:68:
                    f7:e5:42:c5:c5:e5:b7:2a:79:cc:ed:39:25:e8:b1:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:16:B8:C6:CC:16:D7:9C:35:09:68:3A:D7:4B:92:B6:8E:D0:7E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/85eef083-3778-3c48-a361-5115785da7d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3b:f6:3a:f9:50:88:94:a8:6b:83:02:dd:23:fe:a1:55:46:
         54:2b:3d:95:63:dc:b5:6c:84:c4:10:02:14:de:03:3d:a9:e3:
         55:a3:27:0c:48:87:48:3d:47:55:4e:23:d9:33:ee:a6:ca:00:
         34:c8:b3:fc:ba:ff:89:f0:a4:40:1d:0c:c4:69:10:06:99:b9:
         24:3b:6c:13:7d:82:e5:71:a0:db:5b:f1:55:5a:f0:1c:6e:a0:
         01:4e:22:20:a0:3d:27:27:65:ad:c6:8e:f3:07:fe:9e:5c:4e:
         f3:52:cb:fe:6b:b1:fa:cb:1d:d5:9e:7e:87:84:87:03:6f:b4:
         01:25:64:e9:53:2d:bd:25:2f:1d:1c:42:01:ff:e7:61:f2:7e:
         4a:32:a3:60:60:9c:27:4c:31:79:ef:11:a3:5c:ef:12:8f:7f:
         73:89:fd:d9:70:7d:36:62:ea:ac:44:94:9a:39:74:e7:0a:1e:
         2b:d7:81:ee:bc:c8:d5:49:5c:77:57:83:11:b0:4d:31:b7:c2:
         d4:f6:3f:07:b3:9f:91:11:ae:60:c5:89:5c:70:c0:33:73:54:
         1d:0f:48:75:27:72:4c:37:36:c5:72:59:c5:25:67:e4:4f:6e:
         4a:88:de:3b:d3:3c:8c:14:81:56:1a:20:18:0a:1c:c5:1e:d1:
         a7:d8:ae:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:37:56 2025 by rpki-client