Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ebde9cce-b7f1-35a3-8378-b1b3704d0b0d.roa
File:                     ebde9cce-b7f1-35a3-8378-b1b3704d0b0d.roa (raw, json)
Hash identifier:          zbcV2tEGY5ySSKa3aG1r7fWwnnc5jBM4hUUjR9E5syY=
Subject key identifier:   BF:A3:81:0C:1A:8F:2B:99:1B:4D:22:68:61:B8:C3:41:9F:B5:E0:FA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A86DBE240313612658FF9AF40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ebde9cce-b7f1-35a3-8378-b1b3704d0b0d.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        64.9.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:e2:40:31:36:12:65:8f:f9:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=1adeaa1d-29d0-4387-9998-50ab1b079d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1a:2c:af:8c:0e:53:eb:14:69:aa:20:fd:de:
                    31:a2:11:3b:0b:aa:76:41:0e:23:dc:4f:4e:31:28:
                    9f:1f:78:29:94:d1:62:4c:d7:13:22:73:63:b9:0d:
                    56:db:ed:2c:8e:e5:95:49:45:76:b2:eb:f2:74:95:
                    cd:fb:ac:e5:d2:80:b4:c3:6c:54:ed:59:3e:cb:c6:
                    84:2a:cb:0d:c7:39:f5:5e:fd:63:8f:35:08:4a:50:
                    11:d0:36:5d:c4:2e:21:5a:27:8e:33:63:ea:fe:ba:
                    1c:9b:ec:13:f0:da:f9:7c:3d:df:fb:4e:8e:53:93:
                    75:b6:7b:e7:77:35:b0:38:1b:12:3e:3f:ae:62:ab:
                    a5:11:4c:98:d8:4a:cb:d3:b6:2c:e9:81:e9:91:04:
                    7d:c8:dd:0f:43:a6:4f:ba:14:fc:6f:07:c3:68:c0:
                    c8:b9:de:a0:2f:62:2b:fb:84:36:61:84:54:88:d2:
                    8f:ec:be:55:2d:1b:ad:96:4d:fb:8d:85:81:2d:5a:
                    d2:42:24:b3:0b:e9:37:96:69:7c:93:50:a7:5e:6b:
                    00:7b:2b:52:0f:c1:d4:2c:0f:43:01:6c:17:68:12:
                    0c:37:d3:45:b1:bf:8c:14:27:22:b8:86:e2:01:68:
                    5e:4b:e3:26:7f:69:8f:06:16:17:84:c9:8d:06:4b:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A3:81:0C:1A:8F:2B:99:1B:4D:22:68:61:B8:C3:41:9F:B5:E0:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ebde9cce-b7f1-35a3-8378-b1b3704d0b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a2:55:e9:c6:1c:67:b4:a1:22:d0:5b:30:5c:c6:83:33:5e:
         e0:09:fc:09:63:ca:9d:0c:45:2d:85:88:76:c9:7a:6e:ed:1d:
         fd:12:26:25:ca:df:da:7f:7d:1c:07:d8:4c:cc:94:56:11:0b:
         17:74:9e:9e:c0:7a:e9:31:80:79:b8:8a:c2:14:a5:c6:d8:6e:
         74:98:91:2b:2a:a3:26:6e:71:f2:0b:5b:d1:61:fc:5f:69:47:
         cd:50:13:e7:28:6a:60:0a:62:62:8e:f8:be:8a:b9:04:76:9e:
         0c:72:ce:b1:a7:8f:96:d1:42:29:72:b5:61:af:c4:63:3e:69:
         ee:88:ae:7e:6b:7b:5c:9a:1b:2f:5d:bd:1c:a4:27:ef:19:cb:
         f2:51:e8:00:66:59:1d:e5:b0:d3:5c:d5:86:27:26:65:7e:c0:
         2f:82:f6:e4:5e:b1:5f:fa:cf:ee:74:bb:52:30:31:87:16:04:
         d6:cf:95:64:f8:db:11:76:ca:da:99:c4:c4:25:f9:77:7a:14:
         c1:fe:73:41:e2:00:ae:83:41:13:a1:a9:b7:8f:c2:18:4f:51:
         cf:8e:2a:a1:29:4c:11:ee:89:6d:df:f1:d4:48:60:10:0c:c3:
         22:06:47:42:eb:2e:43:33:36:15:07:05:ef:11:98:ef:fb:08:
         5f:de:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:31 2025 by rpki-client