Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa
File:                     01fb150d-a072-39ec-b4dd-9952490d8c1a.roa (raw, json)
Hash identifier:          S4SII0/WZRIi55NNvSOqw2l4DEKqF0xEVh84nH/OCPk=
Subject key identifier:   6C:6E:B2:B1:24:5B:18:1B:03:0C:4C:F9:DF:1B:5C:07:CE:52:BF:5B
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F4328584A3A1584BCF592D88F4F210180
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     40788
IP address blocks:        162.247.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:84:bc:f5:92:d8:8f:4f:21:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=75b2ccb9-4068-4661-8341-001092ec77b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:b6:28:3b:3d:15:53:ac:33:2d:0b:9d:fa:
                    e9:c3:65:54:69:fc:77:60:46:c7:34:ff:68:00:fe:
                    49:6a:6c:b3:e0:e0:cd:5d:1c:96:46:ac:64:46:2b:
                    81:32:c7:82:88:cc:9d:c3:8a:d0:1f:46:f2:e7:c9:
                    73:5f:c3:f7:0f:f0:9a:9c:76:04:fc:e8:90:2b:d6:
                    2a:a9:93:c3:0d:b7:73:bb:1e:a5:f3:00:c7:b9:f8:
                    b4:87:16:58:45:88:36:b4:f0:27:e1:df:3e:af:66:
                    48:6f:55:89:50:c3:04:7f:fa:70:b1:39:3a:b7:38:
                    20:17:58:31:88:d4:33:71:7d:56:67:7a:72:9a:c2:
                    14:41:75:b8:f5:8a:06:8a:44:51:7a:18:d4:fb:a8:
                    16:e4:06:d6:16:35:16:ca:16:9b:bf:07:9f:f5:3b:
                    37:6d:1d:87:d6:0d:10:3a:13:53:bd:1f:ce:ea:e2:
                    5b:43:f5:93:76:2b:bd:cc:00:2f:ae:60:87:3d:85:
                    9c:33:88:17:7f:89:ca:02:d1:6f:00:12:d3:df:dd:
                    62:7d:36:29:17:0c:c9:56:14:a3:a2:fd:e5:f1:b6:
                    28:e0:d2:95:4e:92:b6:5e:b2:87:2a:13:12:5a:6f:
                    4f:49:b6:ec:b1:16:e2:61:f7:e7:1c:2e:b3:80:99:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6E:B2:B1:24:5B:18:1B:03:0C:4C:F9:DF:1B:5C:07:CE:52:BF:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c0:6a:67:fe:7c:de:9a:16:6b:43:22:15:f5:b5:7b:32:1b:
         71:9e:e3:e0:18:f7:cd:25:cd:fe:4d:4a:72:6d:fa:f6:9e:0a:
         a5:63:c6:36:54:4c:84:13:9d:f4:f2:b1:36:52:88:9a:48:fb:
         ab:e8:71:82:57:8e:18:b0:99:a6:cd:cb:d6:e4:64:06:50:08:
         e5:31:82:87:17:9f:23:ec:f5:e6:5e:14:d1:d5:71:ca:e5:1b:
         85:39:9c:0e:2c:e4:e6:93:74:a2:9c:d9:07:35:25:62:4a:1c:
         07:8e:10:6b:ec:65:9a:29:49:f2:ce:7a:17:39:24:51:c8:df:
         3e:91:be:7c:ba:f2:02:74:b3:1c:2b:25:83:f1:c6:3b:3e:13:
         25:ae:5a:93:b7:1d:b6:75:1a:a7:cd:d6:7e:eb:49:dd:a8:0c:
         f5:96:56:46:92:65:59:0b:68:2d:09:e1:6d:5d:b1:0e:c8:26:
         ac:d0:fb:8f:95:f7:cf:e2:fb:b6:8b:fa:40:1c:ef:b1:9f:d4:
         54:c9:3d:48:4a:09:e1:81:9f:ae:7c:bb:a0:55:ac:50:b5:f2:
         50:45:66:ec:e2:14:a1:f9:a8:92:57:0b:ce:95:46:af:7c:59:
         14:af:62:76:ef:73:8c:8a:c0:6e:c5:71:66:dd:1a:3c:41:2c:
         bd:53:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:58:59 2025 by rpki-client