Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ab74b855-05a7-38a0-abdd-eb5284021c0a.roa
File:                     ab74b855-05a7-38a0-abdd-eb5284021c0a.roa (raw, json)
Hash identifier:          hLNbM+VN+BS9Ud4s2f3ohsG2MwLyE7aQPNVYTsaVCt8=
Subject key identifier:   03:04:02:F1:33:09:F4:A8:29:8C:FD:D2:66:B6:A1:6D:96:91:6B:7F
Certificate issuer:       /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial:       010D0C9F4328584A4F05D047B449CE5B0ECAA200
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ab74b855-05a7-38a0-abdd-eb5284021c0a.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     1766
IP address blocks:        158.26.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:d0:47:b4:49:ce:5b:0e:ca:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=ffa038a5-868d-4838-bd8f-2d90938ea900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:24:0d:42:ef:1b:09:41:af:e3:7a:c3:ae:b0:
                    79:ec:18:33:8d:1d:72:b4:08:bb:ca:11:c0:88:d8:
                    6f:6b:de:2c:b6:a9:ba:20:6f:d0:67:e3:fd:99:12:
                    2c:88:c7:95:f8:03:07:84:d8:d5:66:73:b6:fe:c7:
                    9c:9d:a4:cc:4a:0e:d3:8f:d5:b4:89:8c:b4:33:c1:
                    07:d4:bb:a8:24:a8:d9:97:bf:08:8c:3c:79:29:7d:
                    6a:7b:b7:0b:eb:9c:f8:a1:ba:25:da:55:35:26:a2:
                    32:c0:79:54:4e:b4:f3:de:09:6b:1c:a1:cb:ab:e6:
                    05:b7:af:7b:86:cd:9f:03:7b:23:b4:e8:1d:57:04:
                    2c:34:a9:a9:42:a1:ce:0a:18:f8:7c:79:3e:8b:f5:
                    c6:d3:e4:e2:fd:a8:c5:4a:c9:35:ac:2f:50:8f:b5:
                    ea:a5:60:6c:39:05:95:f6:6e:ff:2e:5e:67:c4:57:
                    ac:e1:9c:4b:b5:e1:54:b1:b4:ac:ee:de:59:d9:10:
                    21:41:d2:bd:71:ff:a2:5a:0f:a5:84:6f:70:d2:b0:
                    0c:7f:38:8e:cd:e2:81:3a:03:be:d4:fd:9c:3a:c4:
                    2b:4f:64:8b:fb:1a:2b:46:0d:ad:38:32:9b:cb:8f:
                    ef:2e:4e:51:4f:cb:f2:ab:ad:b6:b9:3a:8e:17:a0:
                    73:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:04:02:F1:33:09:F4:A8:29:8C:FD:D2:66:B6:A1:6D:96:91:6B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ab74b855-05a7-38a0-abdd-eb5284021c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl

            X509v3 Authority Key Identifier:
                keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.26.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:f2:4e:73:b1:38:93:8d:bd:dd:13:a4:5a:4d:48:01:7b:
         e4:60:25:0e:d2:c7:05:f8:30:f0:9c:cb:2a:47:ef:1b:50:1d:
         7c:92:4b:11:2d:fd:ca:89:87:77:0d:9b:fe:aa:67:47:8e:f8:
         20:81:69:40:39:58:fc:89:7a:5f:c9:40:2d:7f:01:93:d8:3f:
         d3:de:40:6d:e8:6f:2c:1b:b2:f3:e5:90:0a:08:e7:c5:c8:fe:
         11:75:b7:ca:4a:9a:2d:a9:06:21:de:b1:15:c1:23:45:c0:8d:
         2b:07:1f:18:a8:f5:e5:6b:1d:8e:65:59:49:94:a7:fc:f8:b1:
         db:67:2c:1c:3c:50:26:29:46:57:89:68:4d:55:f8:7e:33:f2:
         d0:1b:85:2c:cf:74:c8:23:82:4b:dc:0b:28:23:3d:3d:9f:6e:
         5b:81:1a:c2:c2:28:98:c6:07:b8:a1:26:61:09:f7:27:c8:99:
         b2:50:b4:e8:20:56:8c:2d:cd:39:74:e0:c4:d3:f7:9d:43:18:
         5a:50:26:47:d1:da:15:d1:d9:e2:21:05:d4:3b:86:20:23:1c:
         34:ee:99:28:a7:fe:1f:04:76:3d:59:e7:d5:07:60:35:6e:fb:
         cd:f7:3d:f9:4b:06:e4:1d:eb:98:28:41:79:98:75:ac:45:48:
         1a:4d:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:28:09 2025 by rpki-client