Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa
File:                     ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa (raw, json)
Hash identifier:          hzVtyFdusEM8bgBSvtg7zA6IPOStBiS1P/PGvwEo+HE=
Subject key identifier:   64:F4:C4:ED:62:4D:DF:7F:2E:B7:B0:84:A9:E4:3B:30:8F:0F:AB:D2
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584AF0F13581D4D7373EFA5FC180
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     46261
IP address blocks:        158.115.224.0/23 maxlen: 23
                          158.115.226.0/23 maxlen: 23
                          158.115.230.0/23 maxlen: 23
                          158.115.236.0/22 maxlen: 22
                          158.115.242.0/23 maxlen: 23
                          158.115.244.0/23 maxlen: 23
                          158.115.246.0/23 maxlen: 23
                          158.115.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:35:81:d4:d7:37:3e:fa:5f:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=9d5fe042-f7d8-4124-9e92-caac28744acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:51:66:a8:96:6a:e4:1f:37:f4:b7:20:d4:
                    10:21:d3:bb:81:e7:2a:8b:9e:91:e8:83:4c:ed:c6:
                    69:27:94:bd:58:7e:e6:b5:8e:4d:ca:f2:e2:12:fc:
                    f4:66:0c:c9:8f:24:02:d0:59:f4:7b:54:a0:29:81:
                    37:5c:32:62:13:fe:b0:95:1f:9c:ae:81:7d:2b:bb:
                    97:92:33:18:9a:18:d6:55:58:0d:a1:c1:69:e5:9e:
                    f3:b3:ed:48:bb:60:24:fc:48:ec:cb:98:94:04:ec:
                    c2:0b:ab:f5:94:cf:99:e8:0b:ea:f3:49:61:2e:3e:
                    bd:a9:8e:46:cb:24:c7:ab:cf:42:7b:48:ab:17:c8:
                    38:9e:c3:06:17:86:7f:6e:96:4c:63:0b:7f:2c:47:
                    4d:dc:76:47:67:e0:ab:7d:32:ae:6e:f7:3e:b9:28:
                    31:92:97:fd:b0:6f:66:3d:dc:90:38:f4:e8:e0:49:
                    3d:22:3d:5e:fe:7d:d5:77:90:bf:8b:5c:fe:82:cf:
                    d5:c7:0c:bc:6e:7e:43:f6:c6:c4:94:09:82:6c:63:
                    e6:35:b2:48:a0:f8:18:64:89:8b:ca:c7:f7:83:d9:
                    e5:d8:c1:d7:16:bb:3a:ca:6f:fa:85:ee:b1:4d:00:
                    e6:e6:59:c9:b7:8c:66:3b:cc:78:c5:77:fd:24:1a:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F4:C4:ED:62:4D:DF:7F:2E:B7:B0:84:A9:E4:3B:30:8F:0F:AB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.224.0/22
                  158.115.230.0/23
                  158.115.236.0/22
                  158.115.242.0-158.115.247.255
                  158.115.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:87:6a:06:19:48:94:b1:42:43:99:1f:bf:91:07:4a:de:d6:
         80:32:43:8c:20:a7:2b:8b:c5:79:1d:34:6f:6e:3c:dd:c0:f6:
         11:15:a5:b4:c3:e7:c6:35:7e:e5:50:38:64:80:37:fd:55:4b:
         5e:60:97:e6:08:aa:63:d5:bb:a9:93:9a:d4:19:e2:da:46:99:
         4d:ae:d1:53:65:f2:16:c7:7b:aa:e2:e7:1d:c7:3d:86:f5:1f:
         9a:6c:ba:0e:af:ec:e4:c8:30:2b:fb:b8:47:34:54:f8:72:db:
         95:96:f9:ef:18:c3:12:06:12:4b:6d:61:fa:bc:d7:15:29:24:
         93:27:49:6e:6f:9f:d8:e7:10:0b:6d:9a:d8:ce:e2:bf:3f:9c:
         63:6d:ac:51:ca:d7:f6:ff:e1:22:c1:19:4b:fa:cf:0a:64:21:
         f7:dc:69:37:36:86:03:3c:f8:7c:af:22:1e:31:67:e3:cc:06:
         1c:e4:99:54:3d:8a:3c:87:6b:1f:40:7f:dc:bf:b7:e0:c0:fa:
         80:b3:97:0d:26:30:c7:94:03:86:ad:e0:50:79:2e:dc:c2:a8:
         2b:d7:94:94:bc:38:c7:29:ca:21:63:c9:15:01:fc:8b:56:82:
         0b:7f:6c:a7:8e:9c:39:d7:df:48:9f:fe:ba:f2:f7:58:62:8c:
         a7:65:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:55:37 2025 by rpki-client