Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/ff6d3c54-e7e4-3093-80c7-bdad1b275067.roa
File:                     ff6d3c54-e7e4-3093-80c7-bdad1b275067.roa (raw, json)
Hash identifier:          HLUY9P9zYzcH0bLtZS7juMv1iWHyIwo+5XiiTkVh9CE=
Subject key identifier:   BE:07:66:10:43:E8:0D:4E:A3:9F:4F:02:06:83:48:07:B5:26:B9:5C
Certificate issuer:       /CN=e6b50385-8dc3-40bf-b077-89afa371f955
Certificate serial:       010D0C9F4328584B477C69D9D3C4F8E2B7B98E00
Authority key identifier: 69:0E:FE:C9:F7:C2:58:D5:A7:2B:B9:1B:30:55:61:A8:87:38:BB:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/ff6d3c54-e7e4-3093-80c7-bdad1b275067.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     22607
IP address blocks:        64.17.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/e6b50385-8dc3-40bf-b077-89afa371f955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/e6b50385-8dc3-40bf-b077-89afa371f955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:69:d9:d3:c4:f8:e2:b7:b9:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b50385-8dc3-40bf-b077-89afa371f955
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=f8585e3f-99f1-4111-9b13-3f6f90555297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:39:47:df:85:1e:39:02:3a:a5:3a:8c:73:
                    0c:e4:c6:89:7c:11:12:20:a5:5d:6e:0d:1d:a5:6e:
                    24:52:3a:8c:da:2e:46:b8:dc:25:3c:16:3b:ad:21:
                    c0:38:f4:31:f7:ae:10:6e:04:5d:9b:e3:bf:8a:d4:
                    47:df:7f:ce:93:ef:e6:a8:57:e9:e7:a6:b8:d9:64:
                    14:b8:38:4d:12:d4:ac:32:0b:d7:66:09:63:2c:7e:
                    a7:27:52:cf:78:bb:95:2f:49:38:d4:1a:eb:3d:2e:
                    16:4c:58:0c:a9:b8:f5:36:e2:02:64:3b:46:29:38:
                    5e:d4:78:04:99:f0:67:52:a1:c3:99:7e:cb:8f:cd:
                    d1:d4:1a:84:85:be:52:16:d3:66:1a:0f:0f:0d:9c:
                    4f:7a:d2:82:b7:c3:a5:4b:ca:21:ab:19:55:84:b5:
                    51:20:34:65:01:6d:1b:97:09:c1:75:6e:0a:32:ec:
                    6e:d3:27:44:c9:2c:40:e0:29:10:5a:31:22:37:e7:
                    bf:55:65:45:86:a3:8f:87:db:e1:00:65:4a:ae:0d:
                    f0:d6:26:4d:80:e7:e6:2b:a8:e4:70:0a:47:d9:b9:
                    34:b6:be:22:b8:7f:ab:40:69:41:d7:7c:dc:25:6c:
                    9e:01:9f:52:de:37:2b:63:e1:02:bc:f5:0f:d5:d2:
                    58:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:07:66:10:43:E8:0D:4E:A3:9F:4F:02:06:83:48:07:B5:26:B9:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/ff6d3c54-e7e4-3093-80c7-bdad1b275067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/e6b50385-8dc3-40bf-b077-89afa371f955.crl

            X509v3 Authority Key Identifier:
                keyid:69:0E:FE:C9:F7:C2:58:D5:A7:2B:B9:1B:30:55:61:A8:87:38:BB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:6b:25:2c:cc:62:01:4b:10:36:94:4e:cd:c4:97:b2:26:
         df:b7:02:37:66:1d:ab:79:f2:ba:d9:89:fb:5b:b2:18:5a:02:
         9d:68:f9:26:2e:cc:26:56:59:02:2e:60:06:c9:43:7f:73:77:
         70:8b:59:e9:7a:58:26:d1:1c:37:63:3f:ae:0d:23:a0:1b:dd:
         17:4e:e9:a7:65:f0:f1:b6:f9:84:96:1a:f2:02:4a:8a:da:cc:
         3c:8e:3b:d1:1e:36:31:db:c9:fa:b5:ce:6b:d8:3b:77:ab:ce:
         98:5b:5c:45:79:aa:5b:2e:2c:55:c1:4d:68:6d:87:69:ac:67:
         19:c0:f4:d2:e2:f4:88:0f:0d:ee:ad:cd:7a:e4:50:b3:a7:da:
         65:c0:55:54:5a:68:df:a7:43:d8:7e:59:da:2b:7a:5d:17:f0:
         ef:e3:bf:61:b5:d9:55:3e:91:e2:30:db:de:11:ff:a9:e8:a5:
         06:aa:4f:a8:c1:d7:33:81:f0:07:a4:d3:4e:b1:2b:44:d8:ad:
         f2:2c:6e:2d:5b:c2:21:bf:22:d9:30:6f:5a:27:94:09:67:55:
         93:94:2c:e1:e4:22:8a:93:71:f5:9d:af:1f:b3:d9:26:ba:81:
         03:b7:cb:59:b5:12:74:1a:6e:cc:ef:16:74:b7:49:66:2f:e2:
         e1:8f:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:16:01 2025 by rpki-client