Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/1f8b8f9d-ae7b-3c7b-bd6e-2becdddce545.roa
File:                     1f8b8f9d-ae7b-3c7b-bd6e-2becdddce545.roa (raw, json)
Hash identifier:          /Qoj1nlZtgK08qa/2MKdJJjNfu6dbZq1j/D/23fUkQc=
Subject key identifier:   67:C9:94:AC:A1:AB:A3:6A:35:FD:D7:71:B9:0E:D4:22:81:74:D9:5E
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584B5C5E46F6101F9C884E45E940
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/1f8b8f9d-ae7b-3c7b-bd6e-2becdddce545.roa
Signing time:             Wed 10 Sep 2025 20:00:16 +0000
ROA not before:           Wed 10 Sep 2025 20:00:16 +0000
ROA not after:            Tue 09 Dec 2025 21:00:16 +0000
asID:                     13335
IP address blocks:        64.40.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:5e:46:f6:10:1f:9c:88:4e:45:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Sep 10 20:00:16 2025 GMT
            Not After : Dec  9 21:00:16 2025 GMT
        Subject: CN=88a14618-3b73-4af6-bd81-e67145621897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:3b:ee:e0:a7:6d:fb:b9:85:b1:20:7b:d3:
                    e4:88:38:04:ef:aa:da:cd:5f:c6:9c:55:34:6b:40:
                    f5:0a:b9:5d:f0:66:11:ec:5e:f7:47:0a:ce:cb:48:
                    b9:d0:de:c6:88:63:a5:e0:6e:b4:ca:39:89:3d:a3:
                    a9:5a:2c:5b:03:dd:24:93:42:32:ae:51:b1:ea:d7:
                    05:f2:7c:32:60:ac:a3:6b:da:8f:5b:29:76:c6:01:
                    68:22:a1:2f:6e:17:d9:76:17:ee:4c:45:fb:ea:39:
                    c6:61:8e:93:d5:5a:fe:55:7b:b8:05:47:25:70:da:
                    cc:9c:c6:ea:3a:b4:8c:43:ff:00:57:74:53:02:d9:
                    da:6c:d4:d9:72:b1:40:00:c6:4c:02:ae:f1:33:99:
                    7d:ed:04:5c:6a:6e:28:35:2a:42:13:1e:16:93:0d:
                    49:08:7b:36:20:f4:a6:c8:01:c3:83:ec:eb:ac:ae:
                    44:f7:99:30:fc:ae:21:a3:c6:48:e8:cf:21:ac:45:
                    46:f2:ec:d2:f6:62:86:8b:9f:e4:76:35:62:4c:a5:
                    90:32:88:67:70:aa:de:a3:10:ad:b9:6e:08:15:bf:
                    16:cf:32:f6:a1:5b:1d:48:de:15:a8:af:6e:b4:dc:
                    19:fa:52:d1:21:03:23:2c:b0:15:61:7d:bd:31:b7:
                    9b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C9:94:AC:A1:AB:A3:6A:35:FD:D7:71:B9:0E:D4:22:81:74:D9:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/1f8b8f9d-ae7b-3c7b-bd6e-2becdddce545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:99:d6:50:71:15:9a:3b:68:58:7d:56:22:9e:73:b8:86:d1:
         c6:ac:7b:41:23:ae:44:5a:13:3c:50:26:13:76:1a:fc:d6:ce:
         ce:24:75:a6:ff:30:c6:8b:a4:cd:ac:34:91:e1:29:e8:07:57:
         7a:6f:96:5c:2b:92:c6:f4:c3:46:cb:60:a3:a7:e6:b1:de:e3:
         be:a1:04:85:81:89:67:cd:f2:e8:9b:af:ed:63:b0:f2:71:b2:
         09:c9:4d:e0:38:96:79:63:15:a9:4e:6e:1f:5e:77:b2:56:b4:
         c4:ea:88:1f:7c:9b:4c:e8:fe:a9:e4:f1:81:91:e6:e3:db:d8:
         d4:8d:3d:b9:73:12:e6:ad:cd:f6:1c:0e:e7:19:02:24:b2:72:
         f5:ad:72:19:4c:b7:e2:7d:62:8a:3a:7d:af:bd:27:9d:c8:75:
         ba:47:17:a6:0e:08:ee:82:71:8b:b6:01:c7:b3:48:68:9c:df:
         83:3e:ed:7a:64:d7:81:f8:c0:fc:6d:52:0f:4d:c3:c3:87:b7:
         56:f2:f8:47:75:1a:0b:54:7c:77:9a:cb:cd:2f:da:cc:46:55:
         c9:f0:1c:b6:4d:1a:1d:1f:09:43:62:89:06:33:ec:bf:82:45:
         6a:8f:03:a0:a4:16:32:fe:d4:15:e7:af:6d:36:31:e6:8e:cd:
         a3:55:83:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:40:47 2025 by rpki-client