Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ab6d06a5-967b-38cf-aa76-593dbfbb52ec.roa
File:                     ab6d06a5-967b-38cf-aa76-593dbfbb52ec.roa (raw, json)
Hash identifier:          EUyH7r5N7I8vtvPYu9w3Oy3G6pmVOFj9Zr3yzZ+7CfQ=
Subject key identifier:   C4:FA:4E:E0:A9:E9:CC:24:B6:F8:B2:3F:6E:2B:F5:EF:57:8E:79:7D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A86DBDFD40D5E2A1309C70580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ab6d06a5-967b-38cf-aa76-593dbfbb52ec.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        64.9.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:df:d4:0d:5e:2a:13:09:c7:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=97ba0c42-1ade-4440-a816-1ccf749718df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:04:54:4a:68:f8:f2:00:cf:7b:86:a2:f9:
                    33:83:55:89:27:f6:6a:42:15:f8:61:0c:e0:eb:a3:
                    fd:f3:15:3c:2a:f1:5c:a1:f5:a9:e6:d3:8b:ee:b2:
                    61:3c:8c:22:5c:77:b1:07:15:ad:ba:d8:0e:0d:0d:
                    eb:56:c9:34:c2:16:16:71:d6:7b:5b:1c:23:e3:6b:
                    72:ee:5d:d4:72:62:de:5b:97:b5:3e:4b:5a:c4:99:
                    fa:6c:1d:31:32:50:69:84:49:35:99:28:2e:18:69:
                    a2:85:7b:89:3c:07:ba:3f:a7:02:5a:15:30:1a:ee:
                    67:68:ff:ca:bd:ad:07:2d:6c:2b:40:64:7f:0f:c9:
                    2a:5a:c4:fa:c2:75:b9:90:16:09:5d:84:97:fb:5a:
                    37:1c:12:53:41:86:55:64:5e:a0:75:58:36:ba:f1:
                    f9:e6:ef:e7:47:06:b9:95:1a:14:49:58:33:6a:c3:
                    79:e4:18:19:a0:9f:f6:bc:81:84:f9:9a:a1:46:23:
                    52:3a:b6:99:38:0e:df:2b:a4:d5:77:90:9e:68:74:
                    24:69:1f:a1:45:f7:70:6d:fb:3b:31:4c:56:a2:66:
                    de:bf:5b:7d:c8:0f:74:25:a2:15:58:c3:f2:64:0c:
                    cd:d9:e3:c8:40:fd:fc:60:94:81:78:fd:8f:1d:eb:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FA:4E:E0:A9:E9:CC:24:B6:F8:B2:3F:6E:2B:F5:EF:57:8E:79:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ab6d06a5-967b-38cf-aa76-593dbfbb52ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:43:09:68:4a:90:c5:20:2e:e9:f3:bf:9a:16:08:85:f0:0f:
         59:9e:ed:b2:ce:30:92:ef:92:a0:3e:74:74:58:c3:07:4c:1d:
         1e:a3:ec:47:bd:97:4b:c2:d8:51:15:70:fe:26:cb:ed:98:6f:
         2e:73:ae:ec:f4:d8:12:ce:7d:a2:45:ae:e2:c1:d4:b2:6b:ce:
         59:e9:b5:a4:e1:71:79:b9:22:c3:97:c1:ab:70:0a:17:db:49:
         f0:24:49:1d:54:2d:ae:99:63:10:e6:26:e8:a6:0b:a2:08:cc:
         fc:64:d3:49:bc:bf:6d:a7:1f:62:af:8d:56:17:da:f7:84:4c:
         3a:2a:b5:4b:0c:3e:eb:09:df:0b:d2:4c:2b:72:7f:bd:0d:55:
         8f:83:94:fa:cf:87:af:4e:b5:2c:90:3e:3d:2f:7a:6d:ee:c0:
         f3:a2:6d:30:d8:0e:e2:1f:ce:c7:30:aa:f0:ce:3b:2c:15:0e:
         c0:54:f7:89:80:99:7c:40:ba:5b:c6:49:ac:01:86:7b:7a:e2:
         fd:e2:fa:69:58:58:4c:eb:08:c9:6f:09:33:13:ac:e3:8b:72:
         e1:75:e0:3e:1b:b5:b2:ea:4d:de:a7:bc:fc:d7:e6:62:ab:85:
         3c:64:7b:a2:63:61:e3:e4:da:80:8c:6f:b0:a5:47:0e:3f:1d:
         dd:94:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:35 2025 by rpki-client