Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/358a9cc2-3448-3c6c-910a-7f3af1ef5ff1.roa
File:                     358a9cc2-3448-3c6c-910a-7f3af1ef5ff1.roa (raw, json)
Hash identifier:          kyTEWW7ab08M1w0E1XwIcn7McztYu76rQXvHT/D4uYI=
Subject key identifier:   3C:C6:72:31:A5:67:A5:22:08:9C:76:2F:14:EA:3A:3C:7D:0F:F0:B1
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584AC5AB86A463A235C74CFD23C0
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/358a9cc2-3448-3c6c-910a-7f3af1ef5ff1.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     32181
IP address blocks:        158.51.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:86:a4:63:a2:35:c7:4c:fd:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=6e3efc5f-93cc-415b-bb9d-ba059ac98970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:e5:6d:a1:6a:f4:86:f2:bb:18:dd:5c:49:
                    e2:3a:b6:83:24:e1:33:7d:05:61:7a:51:e9:7e:7a:
                    e4:9e:2d:58:a1:b1:f4:93:e6:4b:10:6f:52:76:62:
                    3c:8e:9b:51:b8:de:24:2d:5d:f8:76:4f:a4:ab:a6:
                    43:c7:57:0c:35:a1:64:97:7f:13:c4:6b:02:bb:fe:
                    34:78:4f:ba:2b:56:93:0c:50:98:38:ed:7c:1b:f4:
                    09:19:aa:0f:0f:b8:1e:04:a8:37:b7:c9:c7:b5:c0:
                    26:76:17:cf:2b:57:96:6f:2a:4b:9c:b3:83:98:63:
                    cc:19:7b:c0:fe:64:48:3f:4f:01:7a:9c:07:97:c2:
                    59:9b:cd:12:b2:da:76:65:46:e5:31:b4:68:b5:8a:
                    a0:57:5d:b8:3b:1d:58:87:cb:42:b6:e0:a4:a5:c5:
                    d4:c4:5f:88:a7:7b:e7:79:cc:39:90:1a:7e:4c:70:
                    28:24:b1:b9:8e:a6:f3:c5:8a:97:55:59:8b:67:45:
                    34:7e:05:34:64:c7:2a:fa:eb:d8:e9:af:f2:87:64:
                    c5:54:cc:c6:c5:e3:3c:31:91:77:4d:83:7e:57:08:
                    69:5a:e5:fd:48:e0:f8:38:6d:3f:05:16:28:2b:4c:
                    ca:3f:ec:ca:44:75:54:2f:e2:65:5a:a2:64:c8:ce:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C6:72:31:A5:67:A5:22:08:9C:76:2F:14:EA:3A:3C:7D:0F:F0:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/358a9cc2-3448-3c6c-910a-7f3af1ef5ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:b0:7c:a3:50:06:fa:6e:16:da:4e:9a:9c:fc:81:80:4a:
         b3:43:49:e8:08:16:a8:a1:92:a5:31:93:f4:fc:63:8d:6d:e5:
         9c:82:8f:bb:e7:70:5b:f9:28:f5:b3:fe:02:b0:1c:6d:0c:a6:
         f2:60:df:45:93:b3:dd:e9:74:34:b4:29:52:48:70:17:31:46:
         31:ae:12:06:00:e6:b0:95:7d:1a:cb:8a:87:42:b8:24:59:49:
         a3:2b:99:10:32:32:69:b1:dc:ad:b3:d1:2b:e7:bf:30:4b:06:
         eb:8d:d0:cf:46:5d:14:a9:3c:db:8d:67:22:6b:4b:3b:5c:7c:
         a6:87:03:4b:d5:74:f6:25:f3:5c:c4:0a:17:ff:dc:7f:01:d7:
         35:4a:17:02:79:11:90:2b:10:8c:31:3e:e2:74:bc:cf:f9:67:
         58:54:e9:48:79:5c:04:7a:23:ec:5f:8b:88:56:0f:5e:0e:d4:
         bd:b6:89:f5:95:93:db:93:e5:47:3f:c0:80:e1:20:db:15:40:
         1e:e1:20:ee:8a:55:2a:f2:3c:d8:1e:4e:4a:35:e8:5a:a7:2a:
         04:16:34:aa:81:82:33:9d:8b:63:c0:6c:b2:84:54:7c:3f:42:
         33:a8:1f:f5:5b:76:8f:07:3f:74:43:2f:fd:ad:54:12:4f:a2:
         78:42:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:42 2025 by rpki-client