Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa
File:                     f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa (raw, json)
Hash identifier:          bQ5dFHjx2VUFOTDE4luweRLei/0lvgM2rpZYWZfKyv4=
Subject key identifier:   01:61:9C:85:4E:B7:A1:D6:01:4E:EE:FC:41:4E:34:E2:05:C9:76:6D
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F4328584A6C55D4FD45BA9CB1E93B4BF0
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     11878
IP address blocks:        64.112.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d4:fd:45:ba:9c:b1:e9:3b:4b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=5ba555f6-01f8-4879-b19a-309dce414541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d4:68:24:93:7c:49:8d:a7:41:b1:c5:ac:43:
                    19:b0:02:f8:71:b0:3a:16:98:42:29:c6:90:fe:95:
                    8d:2d:8c:b7:1f:99:2f:c3:00:f9:f9:98:87:60:28:
                    02:71:b7:ff:40:c5:29:10:7c:ae:d8:04:92:d8:bf:
                    aa:df:79:66:8d:c1:3d:20:62:00:54:16:2c:d5:44:
                    6c:b0:1b:cf:64:10:87:d0:48:3a:e8:eb:4d:89:c8:
                    b7:2c:ff:89:ff:05:c8:cc:c8:16:85:b6:6d:a1:3e:
                    83:00:1e:50:b2:1c:ee:77:ab:e4:bc:68:cd:46:cb:
                    53:bc:85:ab:91:a6:17:51:e5:bf:8b:87:a1:38:52:
                    68:b2:10:ea:c5:3b:17:14:b8:71:3b:b6:87:6f:8d:
                    c2:4d:8b:bd:0c:24:a3:97:39:e3:57:1b:95:05:60:
                    d3:a4:b1:7a:93:5c:70:a8:37:3f:ec:99:e5:2c:f7:
                    f1:a5:2f:13:8f:6f:d6:68:1f:6c:05:aa:6b:16:6b:
                    f8:29:79:c4:bc:6d:e5:d4:1b:fd:52:ef:de:9c:ac:
                    78:07:31:1b:d4:69:82:89:46:ad:c0:75:21:62:71:
                    9d:65:81:38:26:d4:7c:6d:2c:c3:51:58:68:33:d2:
                    b2:11:81:bb:34:b5:8a:24:e5:82:11:8a:3d:d9:68:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:61:9C:85:4E:B7:A1:D6:01:4E:EE:FC:41:4E:34:E2:05:C9:76:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:9b:e9:8a:69:f7:aa:93:ca:d5:df:c3:b4:7b:ca:f9:9d:
         cb:9a:7c:5f:49:21:a9:a1:1a:49:68:fa:26:19:cf:dc:09:d7:
         e7:64:58:40:00:94:1b:b6:77:79:c1:93:9b:a6:ee:32:45:23:
         02:33:68:3e:94:57:7b:11:bb:6a:05:41:a0:c0:3a:3d:8e:ff:
         11:3e:13:ee:17:e1:6d:7e:b7:04:10:17:87:86:f4:da:36:a0:
         65:22:b0:de:59:c8:8f:68:49:74:01:d7:c7:52:2b:00:4a:f4:
         38:38:41:93:e7:13:1d:12:5b:14:35:e2:dd:d6:b1:3f:fb:5d:
         6c:48:cc:00:d6:5f:48:52:18:35:92:9f:bd:0c:ff:95:72:ac:
         92:b1:7f:42:2a:13:21:58:3c:f5:3b:e2:bb:4a:96:2c:cc:73:
         90:e9:b2:52:b5:11:86:5e:35:ed:10:81:68:cf:af:81:79:e0:
         0d:12:f2:b7:fa:52:06:da:41:0a:05:3c:c6:8f:0c:fc:71:79:
         02:89:a4:a2:00:c5:03:50:3f:5a:90:8d:63:83:f0:b7:5b:e2:
         dc:e0:37:f5:e6:11:e9:67:03:da:f6:dc:83:88:bd:2b:9f:a4:
         ea:92:de:e9:cd:b7:c5:fe:e5:ad:75:01:ee:9a:23:13:6e:a1:
         62:ea:3a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:15:34 2025 by rpki-client