Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/430f7c0b-f9b6-3358-be0f-4d3ee7c1cc46.roa
File:                     430f7c0b-f9b6-3358-be0f-4d3ee7c1cc46.roa (raw, json)
Hash identifier:          z8UwO/XfZVEIqNefwAzgwU2fpQ1HO350ECfXIBfl3dA=
Subject key identifier:   7E:6A:9A:B7:28:70:64:EB:54:72:E5:3D:A9:77:5B:5E:3D:10:37:92
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B2FC1B9AD13F5D532A2002780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/430f7c0b-f9b6-3358-be0f-4d3ee7c1cc46.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     54103
IP address blocks:        64.6.176.0/22 maxlen: 24
                          64.6.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b9:ad:13:f5:d5:32:a2:00:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=52782ed9-d49c-4ccd-ad1b-7989c98ac5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:8e:fc:7f:78:6a:33:26:ee:1a:1c:8c:28:
                    59:2d:03:d3:a5:ab:85:8f:79:f8:a8:cc:e9:0c:e1:
                    d8:76:c5:34:0d:2a:fb:eb:14:cd:cf:b0:62:93:10:
                    b3:05:bd:01:8c:97:c9:8c:c6:91:b3:da:a4:96:a4:
                    65:a2:98:47:8b:d5:79:50:99:1f:1b:ca:5b:ba:d8:
                    6b:74:67:0d:00:c7:7b:8f:7c:98:a4:b6:b7:e4:7c:
                    82:00:44:f7:42:4a:13:1c:fc:e8:f4:38:36:50:8f:
                    1e:b3:0d:d1:1c:1a:b8:22:48:39:cd:e2:ca:fa:51:
                    a7:a2:49:9b:00:c8:a7:58:05:ef:82:f4:5f:0a:b3:
                    1e:db:9e:e3:c8:d4:54:15:6d:33:b7:18:25:89:9c:
                    2b:5c:e5:c9:dc:83:81:8a:3e:04:a8:92:40:4d:ff:
                    a0:2a:40:77:9b:9e:08:af:a8:1a:71:47:de:cd:a5:
                    98:04:65:fc:8e:cb:1d:42:58:7b:3b:c5:a0:82:fb:
                    c5:7c:3c:f2:49:0a:20:d3:90:3b:38:24:d0:85:7a:
                    ee:29:78:4d:e0:43:d9:a6:e5:43:27:01:a1:79:71:
                    ac:a7:b1:f2:1b:fa:a2:d8:7c:bd:b8:c0:9c:26:76:
                    7a:36:65:a0:89:77:88:ed:ac:aa:d0:2f:68:e6:50:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:9A:B7:28:70:64:EB:54:72:E5:3D:A9:77:5B:5E:3D:10:37:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/430f7c0b-f9b6-3358-be0f-4d3ee7c1cc46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:3c:54:f6:e9:12:97:88:be:dd:ad:9e:d0:da:e3:a8:c3:cd:
         4b:cd:b2:23:35:e7:7b:0e:b5:17:f0:02:fe:20:66:29:46:21:
         43:fc:b8:35:17:04:af:8a:ae:5e:26:61:f1:91:3f:25:f6:08:
         e1:6f:b3:47:1b:0a:9b:7a:f4:f3:42:67:80:f3:cc:74:dc:f4:
         39:b1:ce:d0:e6:4d:0a:66:19:49:cc:7b:5d:bc:2f:6e:d6:47:
         e2:78:37:ce:5b:1d:fc:81:69:15:1e:04:6a:3a:0d:8f:0e:9e:
         5d:e9:cb:9b:70:64:7a:5f:e7:c4:f7:cb:ba:9d:c1:36:70:64:
         a7:5b:0d:40:26:31:f9:f2:d5:c3:2c:40:f8:94:7a:7f:59:e1:
         90:c9:8a:e5:52:e9:57:da:99:d6:5e:f1:bc:b7:9e:72:9d:f9:
         6a:41:ac:8f:95:69:83:59:26:bb:b2:75:67:58:8b:03:3e:89:
         13:5c:ba:e0:41:70:f9:07:75:ab:46:d6:43:b2:6f:f8:8a:98:
         10:54:b2:94:e6:a4:dd:16:48:74:c8:2e:7f:31:6f:6b:c2:a9:
         26:c7:c0:fa:89:45:d9:c5:c6:0e:c2:bb:80:b7:c5:e1:84:47:
         b9:fc:93:13:64:9f:4c:73:78:26:0f:f4:84:6a:da:20:95:50:
         e0:eb:37:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:54:12 2025 by rpki-client