Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fdb157a8-cc0a-3de6-9c08-b7d4a03808c7.roa
File:                     fdb157a8-cc0a-3de6-9c08-b7d4a03808c7.roa (raw, json)
Hash identifier:          lRA6dlN6X/wPefLasI+Wco5nWQxOIOz0UqQFN2ofE6s=
Subject key identifier:   E5:E5:1F:1F:38:4E:EE:5A:5C:AE:92:A7:36:FF:6D:B4:45:EE:F7:42
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A86DBE4F4748A5354DB3C0700
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fdb157a8-cc0a-3de6-9c08-b7d4a03808c7.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        64.9.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:e4:f4:74:8a:53:54:db:3c:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=fc1a8b58-84e8-4115-801d-d08ce09628c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:c4:c6:18:6b:fa:bb:a7:6c:ab:8f:de:b9:
                    80:3f:8f:c7:b4:08:49:da:13:ff:e8:10:19:82:d4:
                    3f:51:7c:cf:5d:94:a6:7d:21:3a:21:71:b6:fe:a0:
                    fe:88:df:bf:6b:97:f8:04:2a:83:b3:06:54:d5:f4:
                    7e:dc:77:05:91:50:68:2a:b0:ef:1e:c2:b2:f3:1f:
                    2b:f0:69:aa:d7:b5:4c:7b:66:61:91:f4:79:98:24:
                    b2:8f:81:b2:bd:f1:02:93:32:47:38:1d:bd:07:14:
                    0e:d9:1e:13:0c:e7:d2:9a:aa:a5:38:90:c5:1f:3e:
                    68:cc:fb:47:1f:84:08:c1:b0:68:80:04:e0:f7:2f:
                    2d:94:a1:75:b0:dd:d4:ba:06:05:88:37:5c:c1:08:
                    a4:88:3b:1d:81:d5:2c:78:3e:09:a4:90:85:d3:6c:
                    cd:4c:e6:a2:c4:f5:99:ca:d2:74:f6:71:41:73:87:
                    a8:3a:3e:fd:97:62:7f:41:d6:09:b9:fb:dd:9f:be:
                    65:4b:40:e7:ec:96:20:33:da:10:c1:5b:42:bd:2b:
                    57:32:29:0c:a2:30:95:77:8f:c6:97:a8:d4:4d:ac:
                    d1:b4:70:96:d4:dd:b5:ea:95:aa:78:b1:30:2f:39:
                    1c:22:94:c5:40:ce:6d:43:66:75:59:09:13:f9:60:
                    c9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E5:1F:1F:38:4E:EE:5A:5C:AE:92:A7:36:FF:6D:B4:45:EE:F7:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fdb157a8-cc0a-3de6-9c08-b7d4a03808c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:09:8d:c5:1b:34:b9:cc:82:74:0d:03:4e:83:b9:59:c2:73:
         b1:4e:52:e1:8d:e5:f0:01:ef:30:21:c8:34:b2:cd:93:e2:3d:
         8f:b1:0c:f0:8d:14:75:53:13:62:ac:3e:a4:c7:cd:32:09:d6:
         a6:ef:b6:e3:2b:73:a2:8a:5a:8a:7c:6f:db:72:f2:44:de:1d:
         91:53:7d:af:40:f9:35:1e:8e:6b:8f:ba:98:40:70:97:37:3a:
         56:53:06:0b:57:e5:a7:c7:5c:9e:0a:47:45:27:a8:1f:e7:fa:
         c5:de:f5:7d:b1:36:6d:46:62:67:4e:7f:4f:99:b9:83:e3:fc:
         dd:6b:8c:09:a4:fc:9f:57:f9:cf:67:b9:5e:1f:f0:39:b6:22:
         c0:44:4b:ce:bd:c9:f5:a7:d5:1b:7c:2a:bd:b8:28:a2:74:60:
         42:cf:db:51:13:4d:2b:98:8f:25:3c:98:a4:4a:a2:97:f0:f2:
         d8:85:f5:21:de:8c:ae:64:28:99:8c:88:55:8a:73:15:92:9a:
         52:e7:f0:71:8a:b2:91:82:d2:df:51:8d:9c:a7:ef:10:ec:9f:
         e5:80:3e:28:98:29:23:e7:f2:8b:a2:12:2b:a2:a8:b8:50:43:
         e5:bb:2d:dc:04:b3:f4:7c:d6:d8:ba:e0:be:ba:28:82:aa:8b:
         db:8d:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:12 2025 by rpki-client