Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/2606173b-fabf-3790-9154-7704d68d1ba8.roa
File:                     2606173b-fabf-3790-9154-7704d68d1ba8.roa (raw, json)
Hash identifier:          E1YSfpsb1bp26ba+Y9ALY6emYOf8KfHVxYqwkSFZg+g=
Subject key identifier:   13:D3:2F:E9:2C:E3:AD:3D:52:B4:CF:88:D7:A7:3C:1E:C1:5D:61:71
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584B33F1A93CD408AD144B690B80
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/2606173b-fabf-3790-9154-7704d68d1ba8.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     36184
IP address blocks:        64.179.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a9:3c:d4:08:ad:14:4b:69:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=4b961dd9-22fb-40c7-99ef-d29e0a62ff92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:b1:f0:c3:b5:5f:d5:02:d6:54:12:46:e2:
                    5b:e5:e9:df:5e:08:0b:41:e2:e9:7e:29:89:ff:65:
                    cd:59:f8:2f:8b:db:b4:d7:7c:69:05:0b:15:4d:38:
                    fb:0d:8a:31:e4:bb:b5:44:54:56:65:e2:d4:20:ca:
                    0b:3f:2f:20:5c:73:86:49:54:53:9b:f7:84:d8:fc:
                    4a:57:a6:ba:82:52:91:33:c2:bf:cb:83:87:fd:20:
                    75:7c:20:88:26:59:06:63:4a:93:71:5f:2d:40:f9:
                    29:9d:af:5f:e3:29:ff:cc:f9:ba:77:25:2c:15:f7:
                    88:e9:16:d3:89:f6:f0:cf:5b:f3:91:ae:df:87:78:
                    c9:39:05:f5:8e:76:44:68:01:16:90:1a:4e:80:37:
                    d9:2c:8f:65:8f:63:d9:1b:8e:8d:b0:c0:01:37:e2:
                    b4:f6:75:cb:6d:63:94:d1:82:9a:e4:02:5d:9c:3c:
                    ef:b4:e8:dd:3e:99:f3:6c:24:0b:c7:18:f7:10:9e:
                    69:53:06:4c:30:12:88:8b:f8:61:69:d6:59:b1:8d:
                    75:c2:37:0b:ab:d7:1a:93:a6:58:9b:8e:b4:86:87:
                    18:2c:de:06:6c:37:ec:1a:23:d5:c2:71:55:ba:8b:
                    c2:dd:b8:8a:2d:ed:c5:37:1c:75:60:1e:ac:41:c8:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D3:2F:E9:2C:E3:AD:3D:52:B4:CF:88:D7:A7:3C:1E:C1:5D:61:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/2606173b-fabf-3790-9154-7704d68d1ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.179.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:aa:ea:9b:a1:c3:51:3e:e2:6e:75:10:74:fa:92:f4:92:89:
         70:1f:39:69:af:4a:4f:82:91:0c:8e:1e:c2:f2:1e:4c:35:0f:
         4d:26:48:dd:24:15:a8:a9:7b:ff:7b:0a:21:9e:97:b2:7b:e4:
         54:1e:4c:8c:c4:b7:b0:84:1e:98:2a:b3:72:75:aa:99:32:68:
         ad:45:de:1d:1a:63:e6:e6:94:fb:a4:a9:57:30:e4:af:87:ef:
         bf:ab:0d:50:61:8c:27:92:ef:1d:43:70:a1:7f:25:e6:ba:4d:
         a7:3b:69:07:47:d0:1f:2f:21:db:eb:f9:2b:d4:a7:8e:46:17:
         2e:bb:c0:16:31:c1:75:d6:1e:29:7b:1b:49:ad:65:4e:c9:8f:
         25:22:09:0a:6d:8b:c8:ab:f8:03:ae:35:82:82:e5:71:19:47:
         0b:8f:21:e3:cd:10:33:22:23:bb:74:f1:3c:ac:6b:d0:a4:fe:
         c9:99:94:10:d8:03:50:66:06:71:78:4c:53:72:bd:58:30:42:
         8a:e9:a3:85:e6:2a:8a:07:2f:9f:58:85:5f:99:e2:5b:eb:d6:
         bb:ce:4f:ef:4c:c1:ec:4e:ad:85:28:f5:a1:5c:c2:51:ca:36:
         64:8d:c2:c4:5b:9c:c5:6e:2a:f8:2f:ea:9d:62:8b:16:ea:87:
         47:2b:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:30:22 2025 by rpki-client