Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/97f890fe-71d3-33d7-957d-44290971906e.roa
File:                     97f890fe-71d3-33d7-957d-44290971906e.roa (raw, json)
Hash identifier:          t9zCOBLC6/1sNvZO2b6YOcyx2Ss1OP2oPxuY2IOOA8Y=
Subject key identifier:   6A:B5:BD:38:E2:70:4A:52:C9:E4:EC:61:33:A3:ED:D5:BF:50:97:B7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A86DBF269863F413E8A72E380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/97f890fe-71d3-33d7-957d-44290971906e.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        64.9.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:f2:69:86:3f:41:3e:8a:72:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=79714497-2102-4a9c-b6ac-d5dc7d5e41dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:08:30:4e:9d:65:32:72:65:88:ea:43:ad:
                    42:52:b5:75:14:4d:22:27:55:bd:0a:50:3c:7b:40:
                    f4:93:1d:ee:b9:de:68:56:1e:e6:fd:04:ab:19:91:
                    5f:7a:67:8c:20:d4:48:87:e0:1c:8b:89:c7:53:d1:
                    3d:f7:b1:b2:0d:fb:e4:97:9a:c8:71:e5:1f:d7:35:
                    fc:cb:2d:ed:d6:88:16:05:3a:ce:e4:35:6f:c6:2d:
                    83:a7:48:1f:6a:30:c8:f4:02:19:d1:f6:08:62:d5:
                    ae:04:72:c9:d8:d0:03:3c:bc:13:e2:69:0b:9e:35:
                    25:b5:84:59:6a:ec:13:99:69:1a:19:83:de:4f:bc:
                    a0:f3:f5:31:4d:4d:a3:60:9c:dd:32:c0:54:62:b2:
                    18:4d:5e:bf:2d:b2:a6:28:ee:a3:63:b1:f8:12:50:
                    c4:86:26:e2:df:83:f1:95:5a:00:38:82:07:45:05:
                    fb:41:a5:25:e8:d1:a8:f1:cc:d8:c8:9c:1a:8a:af:
                    e7:11:34:9c:e2:a6:03:66:81:47:1a:4b:ac:de:55:
                    dc:d4:f1:96:ef:62:1f:b2:a2:40:aa:d7:a8:d4:58:
                    da:4b:4a:2e:12:f9:4f:1d:7c:c2:46:2a:04:25:97:
                    dc:7f:ae:01:8e:ca:4a:1b:cf:a0:f5:1e:df:c4:fd:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:BD:38:E2:70:4A:52:C9:E4:EC:61:33:A3:ED:D5:BF:50:97:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/97f890fe-71d3-33d7-957d-44290971906e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0b:6b:4e:7e:9c:01:9c:3c:70:b3:00:97:76:c6:9c:3b:c1:
         70:ba:9c:23:ce:f9:c3:dc:5b:fb:57:0b:56:e2:1c:d2:94:56:
         03:e9:49:46:cc:68:13:89:d0:36:ec:1c:f7:6c:f5:c9:fd:1b:
         eb:45:54:60:c9:e0:cd:dd:8d:69:bc:27:8f:98:9d:f4:09:30:
         74:4d:a3:1e:54:df:3f:11:96:2e:54:f1:ea:66:a4:b1:41:94:
         49:68:e6:dc:25:8b:22:c1:06:28:ae:8c:98:44:67:c1:f6:66:
         9b:4f:06:80:91:0c:58:e6:fd:c7:c6:d1:e4:cf:96:c5:71:50:
         44:29:3e:26:b8:9f:82:74:9d:02:d6:22:48:11:d4:ca:62:a9:
         bc:f2:47:43:ef:8c:63:d1:1f:f9:b4:6c:e4:c7:9a:ab:65:d8:
         58:6e:73:35:62:14:a9:f1:a1:8a:0e:0e:bf:7b:93:1c:b4:a9:
         18:54:de:d6:41:1b:56:a6:03:2d:c2:a6:bc:3f:21:15:18:11:
         26:98:23:cd:f2:36:b8:c7:74:c6:fc:f8:05:9f:b9:86:4c:d5:
         94:0d:30:38:e2:5d:f6:38:7a:88:cc:ac:0d:bf:ef:75:08:58:
         10:17:0c:9c:b5:e1:8f:14:3f:cc:e8:e0:b0:e9:6d:45:d4:2f:
         01:92:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:23:29 2025 by rpki-client