Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/65c3785e-e618-372d-b9cd-1000c2cffb66.roa
File:                     65c3785e-e618-372d-b9cd-1000c2cffb66.roa (raw, json)
Hash identifier:          4nsmn7URDU3vTJHAkcKMTAK7D1yVj6+Z/ywjw6eoTPo=
Subject key identifier:   85:A0:05:4B:9F:EC:D4:2A:AB:50:2C:17:9D:15:90:EA:BE:8E:1A:F2
Certificate issuer:       /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial:       010D0C9F4328584A8B0B58E9BC96824C908B4898
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/65c3785e-e618-372d-b9cd-1000c2cffb66.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     29909
IP address blocks:        64.21.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:58:e9:bc:96:82:4c:90:8b:48:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=329a52c7-ed94-4f9e-9763-7e8b32d9c112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:27:e5:cc:75:01:1b:ad:eb:3c:83:51:8b:e9:
                    88:fe:4b:96:0e:f8:5c:8f:b3:6e:cc:4c:f0:b2:29:
                    c1:27:c7:2f:4b:15:54:c3:8d:eb:c5:18:8d:24:97:
                    d5:ff:de:46:66:b7:3d:f4:87:f2:09:5e:8d:c7:19:
                    1f:cb:35:a4:d4:1a:5d:b0:48:f3:e5:21:c9:b0:08:
                    97:01:5e:68:51:7d:a7:8f:d6:18:e6:e6:ed:ee:f5:
                    cc:65:f3:0b:2e:59:b3:93:a8:eb:08:18:36:63:3e:
                    58:23:27:29:74:e7:03:7e:3a:e6:0c:f4:f0:e5:c8:
                    d7:82:71:29:69:33:2c:cf:63:a1:c4:55:46:88:5c:
                    44:f1:5a:00:76:1d:f0:4a:16:10:fc:a0:20:99:7a:
                    55:bb:d5:3a:39:57:65:46:1e:c5:92:2e:cc:a9:c5:
                    7f:bb:87:0a:40:6d:39:ab:fb:eb:52:28:e9:de:04:
                    70:f3:35:b1:52:0a:3f:97:86:c9:14:08:14:b4:bc:
                    44:9c:bb:55:5e:cf:77:85:13:a3:0c:2d:8d:b9:d5:
                    6b:c3:a9:f9:0e:81:fd:ff:e7:03:61:e3:b7:d4:fe:
                    43:50:0e:8e:8f:0e:fb:ac:55:f1:3e:12:83:8b:6a:
                    ef:e2:44:c0:f0:9d:e4:6c:c0:b7:3d:88:57:39:0d:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A0:05:4B:9F:EC:D4:2A:AB:50:2C:17:9D:15:90:EA:BE:8E:1A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/65c3785e-e618-372d-b9cd-1000c2cffb66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl

            X509v3 Authority Key Identifier:
                keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.21.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:60:a0:8e:43:4a:62:28:73:75:df:93:87:16:57:57:2c:cb:
         e1:12:07:07:38:44:f1:ff:de:f8:d8:0a:fc:73:61:09:ed:fe:
         1a:ae:a0:02:2c:d9:d2:fd:be:eb:7b:fe:5c:6e:6b:eb:e1:e5:
         92:0d:78:b1:d6:1c:f6:ba:d3:fa:7c:39:6f:f1:79:1c:cd:a0:
         52:57:8a:47:af:2d:61:ef:5c:a7:3f:cd:dd:14:f1:b6:04:04:
         44:56:3e:74:28:55:ef:30:31:41:e3:d2:f4:c7:92:34:e1:bb:
         93:a4:f1:12:75:c7:73:b4:4c:81:a4:a0:e1:4d:18:f1:70:64:
         ed:34:de:eb:1f:8b:3b:11:a4:29:ae:f2:22:81:69:41:a9:82:
         fb:df:68:19:fa:96:b6:4f:c4:a7:f2:89:4e:88:c8:d9:39:d7:
         ac:42:9c:2f:d1:0e:3c:9d:2e:41:9d:25:1c:71:3f:17:e4:5c:
         c1:19:51:9d:2a:8b:da:84:d0:f7:14:17:f3:74:09:b3:73:75:
         94:95:a0:b8:3f:b8:97:43:44:73:e4:5e:9f:ec:49:f4:cc:bb:
         20:de:8e:31:62:62:b6:bf:6a:87:3f:fa:09:4b:23:d8:da:87:
         54:6c:76:3e:f2:40:68:ab:d6:09:c7:85:c4:32:ee:1c:ee:7f:
         b4:d3:44:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:04:22 2025 by rpki-client