Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/37bfb549-e50c-3d21-94d6-f38459157fbc.roa
File:                     37bfb549-e50c-3d21-94d6-f38459157fbc.roa (raw, json)
Hash identifier:          vIf+NYMKd8bt8p3cNTr3jLHoHWY5UMvU4jEZUB54NhE=
Subject key identifier:   91:46:78:58:B7:88:A8:77:B4:F9:50:72:C1:75:A4:78:7A:59:42:81
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F4328584B1F0171C1EDD1A06B912D02A0
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/37bfb549-e50c-3d21-94d6-f38459157fbc.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     23274
IP address blocks:        64.6.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:71:c1:ed:d1:a0:6b:91:2d:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=7b24b7e5-b484-4f6e-8a0d-98a318111565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:10:ff:53:0d:e4:f9:48:12:ea:c5:6e:5c:
                    75:eb:4b:07:61:da:ad:fb:b3:9e:2c:3c:b4:5c:b2:
                    6f:1b:cb:ea:a1:7c:88:bf:72:af:b8:d6:33:53:60:
                    df:6c:9c:34:a3:20:bf:8d:ef:08:fa:d0:6d:cc:e9:
                    15:54:2e:4d:60:ec:45:67:7e:92:46:97:0b:e9:b1:
                    6f:6b:e4:47:dd:98:54:27:7c:7c:6a:31:6a:52:54:
                    ea:42:e8:76:99:72:d1:b4:0c:b4:a3:05:94:11:4d:
                    16:28:17:14:ad:70:77:99:c8:82:81:f8:d2:73:48:
                    12:d9:0e:fc:6a:3d:8a:5d:cc:7b:73:7d:8b:ef:64:
                    e5:4e:b9:91:9a:e5:68:90:1f:98:9c:3b:20:04:94:
                    b8:7a:d2:7c:96:75:84:ff:fd:4b:69:73:31:16:79:
                    56:63:22:fd:fa:97:fd:47:a0:1b:b1:ea:7a:11:5b:
                    17:51:27:16:61:00:b7:5b:e5:af:66:26:d7:ca:d7:
                    86:cb:b0:b0:33:db:1d:98:69:2d:81:1b:c3:59:cd:
                    96:f4:51:3f:6c:45:32:b2:1c:74:22:bc:29:c0:17:
                    42:b1:49:db:0b:80:e0:09:47:b9:39:10:f7:6a:bf:
                    bc:c3:71:26:ac:03:dd:3c:01:79:a7:b0:b6:2e:e2:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:46:78:58:B7:88:A8:77:B4:F9:50:72:C1:75:A4:78:7A:59:42:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/37bfb549-e50c-3d21-94d6-f38459157fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:a4:9b:7f:51:32:4c:0e:e5:af:ef:c9:8a:c2:ee:e6:ef:
         a5:11:68:af:49:bd:56:76:af:4a:2a:39:57:0b:91:e3:8c:1e:
         d9:32:81:0a:02:92:1d:57:15:09:22:bd:23:71:92:1e:bc:32:
         24:f3:b6:c1:4f:cf:bd:db:2f:d7:df:73:55:a9:ca:13:79:e2:
         bc:bd:a6:a9:f9:58:a0:f6:2c:86:1c:ed:b1:67:ce:1c:b6:01:
         3a:01:86:ce:78:6f:bd:a2:b4:cf:61:c6:66:23:23:6d:81:c4:
         24:f9:10:3f:9e:67:ae:ee:b2:72:cd:5d:6b:cf:74:7f:2b:7b:
         04:cf:af:c3:1d:2b:e1:5e:c8:1b:37:96:93:5a:b9:ed:a0:77:
         f8:fe:1e:21:b5:ad:98:00:49:30:46:59:86:14:77:21:2f:80:
         98:da:4f:8e:7a:e6:e6:5e:68:b9:87:1b:00:f7:0a:b8:d2:fe:
         c2:b1:92:33:cd:99:a1:b7:fe:1e:2e:eb:38:f2:39:e0:60:cd:
         34:f8:bd:7b:19:c2:8a:d1:05:f5:4d:bd:5e:88:77:8f:04:69:
         29:52:ea:08:f0:27:be:3a:63:b1:59:4d:b1:23:f4:d1:6b:3b:
         7f:e8:97:a0:12:e7:5f:e0:cd:01:71:cb:fc:0e:41:c4:b4:a0:
         81:48:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:34:39 2025 by rpki-client