Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e19f540c-3b92-32c3-bafb-9fe1abcbb3d2.roa
File:                     e19f540c-3b92-32c3-bafb-9fe1abcbb3d2.roa (raw, json)
Hash identifier:          myoBSewFWyx9NxIlaYL7NiopszOKF6c8aUvIsYjgXSI=
Subject key identifier:   8C:17:A2:27:92:04:A1:3C:64:EF:A0:49:BD:87:84:DE:12:E2:D3:0F
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584B03168F29B7B7788B97B06F00
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e19f540c-3b92-32c3-bafb-9fe1abcbb3d2.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     10835
IP address blocks:        64.35.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:8f:29:b7:b7:78:8b:97:b0:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=825be905-f230-4d9b-a01f-aad0709f2bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:45:cb:3b:6a:43:63:80:f2:b4:59:85:ae:
                    3a:58:78:18:a3:4c:a7:b2:53:08:81:49:a5:4f:f0:
                    4d:a6:ef:b8:c2:33:44:d9:80:4b:d7:a6:b4:0a:4f:
                    3c:13:07:3e:18:7e:d0:61:35:65:a8:72:e8:0b:9c:
                    62:cc:96:77:46:ec:03:9a:f0:0e:09:ed:4d:33:ad:
                    7e:ac:bb:b2:52:bd:8f:68:98:95:a9:e6:8e:60:11:
                    54:9b:a9:58:42:bd:a2:70:23:8d:fd:cb:be:57:7e:
                    05:0d:7a:99:68:54:ca:ec:df:5d:80:6a:b8:12:c7:
                    52:b8:51:82:f6:1e:c9:d7:c7:62:42:cb:31:f3:a4:
                    0f:9c:14:f7:7a:61:25:bb:b6:b0:ec:6a:ce:67:5a:
                    1e:6c:e0:ab:33:35:5c:49:a5:9a:8b:65:34:61:20:
                    4c:53:3a:0b:c5:d3:b6:05:b6:97:3d:ca:e8:47:0b:
                    01:64:9f:9f:2c:10:88:b3:46:f5:1a:30:b6:39:bb:
                    3c:0e:cf:f5:b7:aa:3e:f3:84:a3:bf:f2:30:03:f7:
                    d3:fa:7a:7d:73:48:12:e2:6c:68:36:b3:a5:87:30:
                    9b:3f:c3:25:8b:c4:f9:5f:ed:65:68:4d:ea:c8:96:
                    b6:3d:b6:dd:23:1e:00:bd:79:8c:85:18:eb:a1:f8:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:17:A2:27:92:04:A1:3C:64:EF:A0:49:BD:87:84:DE:12:E2:D3:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e19f540c-3b92-32c3-bafb-9fe1abcbb3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:13:68:97:3f:b3:9e:66:da:23:00:79:0f:77:c5:5c:4b:07:
         1b:be:9e:88:fe:ff:68:9a:37:4f:1c:63:65:3b:15:42:f9:98:
         91:dd:14:cd:26:db:41:11:fa:49:f0:47:ad:b2:34:bd:bf:ef:
         9b:d1:d9:6f:d2:ac:69:2d:cb:bc:17:d4:52:44:eb:a3:dc:c2:
         cd:c0:66:db:29:ff:63:d9:79:ff:a3:2c:bd:d4:13:0a:d3:ec:
         f7:16:9a:46:26:d8:80:5d:14:aa:32:22:11:32:44:51:5e:84:
         90:61:4e:5c:16:bb:c0:05:a5:27:5b:89:a2:20:a9:7f:ff:63:
         a0:86:1c:2c:50:33:d2:c7:93:9e:03:19:e0:71:76:9a:34:65:
         6a:d2:8f:51:8b:89:f2:62:f5:75:e0:0b:73:38:12:29:5e:5e:
         85:41:7a:e0:e3:30:ad:03:e6:ea:d1:f5:9e:00:5c:9e:7c:63:
         f4:f3:5e:d0:a4:07:52:41:14:81:fb:85:d5:55:99:c8:ae:ab:
         86:df:6d:01:ca:91:05:b4:a7:9f:2c:c5:bd:a6:73:82:5f:dc:
         e9:82:b0:54:e9:ff:ae:38:c9:28:ca:8f:ab:bf:72:e1:f3:88:
         6c:a7:c5:89:1e:df:b8:d8:09:eb:a5:a7:50:5d:d5:b9:a8:30:
         d2:68:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:26:57 2025 by rpki-client