Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/600796a1-ad56-3f64-a245-134764ba9e7c.roa
File:                     600796a1-ad56-3f64-a245-134764ba9e7c.roa (raw, json)
Hash identifier:          aKR9mWUMI6AkQvAzeZSHXD6YJXrEkI6z5B/PiMCIVx0=
Subject key identifier:   5F:5E:25:8C:8A:DD:C5:8C:28:25:01:B3:88:2C:BE:18:08:B9:D8:D8
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A86DBEE6D410AA3BDA3F48D40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/600796a1-ad56-3f64-a245-134764ba9e7c.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        64.9.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:ee:6d:41:0a:a3:bd:a3:f4:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=e5651a87-bfed-42e7-8c63-0b38cdd1266d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:f6:ac:fa:16:a1:14:f9:6a:2a:e8:a0:5d:
                    7f:06:b8:38:ad:df:3c:60:4d:a4:1d:24:0b:09:96:
                    f3:4e:03:3b:b9:18:31:8b:30:a0:0c:c6:67:ed:5f:
                    35:c2:8f:3a:97:70:60:db:98:1f:ad:19:d8:43:e6:
                    3b:2d:e6:50:76:3c:42:55:c3:9a:c9:2e:4f:93:51:
                    10:c3:fb:b1:06:0d:4b:f5:ac:39:ac:67:b1:38:c0:
                    60:13:6d:9f:8a:5f:f2:bb:60:ce:c2:b0:bc:70:20:
                    fd:f9:bd:8b:d2:39:b5:56:dd:b7:f8:2d:4e:ca:53:
                    a8:44:dd:6f:c0:5a:12:d1:f0:e7:aa:ae:29:92:4a:
                    45:45:d7:cb:d5:5f:3e:b6:37:0d:c1:07:23:16:b6:
                    fd:19:0f:e5:e1:04:86:82:0a:6c:f2:4c:0b:a5:06:
                    ca:f4:12:c7:a5:b0:42:d6:c8:d1:a8:c4:bc:a4:7f:
                    e6:d3:02:d7:64:4b:b6:fd:01:25:72:19:95:d6:64:
                    bc:e5:94:4c:15:6e:fc:17:ef:8e:43:e6:60:02:5a:
                    97:e7:05:d0:a7:15:81:e9:58:32:c2:91:11:8c:93:
                    96:fe:bd:91:a1:f4:5e:3e:cc:80:0f:ef:18:0a:f0:
                    2a:61:13:5a:c3:ba:1f:c1:d4:5e:12:8e:a5:0a:69:
                    62:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5E:25:8C:8A:DD:C5:8C:28:25:01:B3:88:2C:BE:18:08:B9:D8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/600796a1-ad56-3f64-a245-134764ba9e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:9e:5c:86:1d:b8:5a:34:cc:53:f4:d9:64:cf:d6:22:a0:2d:
         54:0a:02:35:4d:18:f9:7e:0d:07:33:c8:00:45:e2:4d:ad:45:
         0f:51:dd:a8:88:a7:45:e2:ee:30:fd:37:3d:f8:82:96:4a:b2:
         60:bc:9e:bb:b2:04:0d:7b:c7:2d:a1:f2:93:7c:32:06:b6:0b:
         e0:cd:7a:42:33:16:c6:76:eb:6e:ad:65:29:f6:0c:05:30:8a:
         bc:34:f8:ee:7f:6e:39:1d:fe:ed:8b:af:9c:32:fd:4c:00:22:
         c2:c2:9b:f7:67:ae:6c:ee:a9:b6:41:08:f8:55:4d:a1:e7:11:
         57:cb:b7:62:f6:35:61:50:5e:bc:ae:b9:26:14:c6:b4:01:8d:
         ec:e5:24:89:72:f8:c4:1a:bc:f1:3a:5b:12:8c:6f:de:02:09:
         3b:ba:8c:b8:18:04:b7:0c:19:39:d3:2a:6f:b8:34:f0:3c:bd:
         fe:7b:37:8b:75:fe:66:59:9b:49:4a:c0:b0:30:3a:b3:7e:97:
         c6:14:64:ef:0c:a5:61:6f:6b:77:40:59:d5:de:00:23:2d:5a:
         fb:21:97:b0:2c:47:88:57:2b:58:47:e2:74:cc:83:65:47:cf:
         5c:b4:a3:52:ed:17:e5:a8:b4:ad:0a:6c:5b:ef:96:d3:c0:34:
         5e:6c:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:26:24 2025 by rpki-client