Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/506a7189-eec7-38c0-94f2-e26e1c53707d.roa
File:                     506a7189-eec7-38c0-94f2-e26e1c53707d.roa (raw, json)
Hash identifier:          wv+3Rzb7WW43Dgs1A9MrsX0rbs4qoRRBUTADKy1JlUM=
Subject key identifier:   83:1D:4D:82:0B:37:CE:62:76:25:43:3F:D3:F9:8C:3A:FC:77:19:9D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B235D01AF89EAF915FCA01800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/506a7189-eec7-38c0-94f2-e26e1c53707d.roa
Signing time:             Tue 09 Sep 2025 14:28:23 +0000
ROA not before:           Tue 09 Sep 2025 14:28:23 +0000
ROA not after:            Mon 08 Dec 2025 15:28:23 +0000
asID:                     9304
IP address blocks:        64.81.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:5d:01:af:89:ea:f9:15:fc:a0:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  9 14:28:23 2025 GMT
            Not After : Dec  8 15:28:23 2025 GMT
        Subject: CN=0fc10cba-df3e-46be-8e60-083340a504b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:bc:88:3c:3b:ef:17:eb:05:92:c5:d1:24:
                    de:93:83:55:35:57:96:18:da:4e:17:70:f2:94:12:
                    b3:0c:92:70:06:a3:12:33:8f:2d:f7:d0:a5:f5:23:
                    70:a3:be:b6:6f:a0:04:e5:af:5b:52:72:64:a6:ef:
                    0e:d8:40:4a:7a:72:2a:cf:ac:2a:be:f8:1d:62:e7:
                    0e:67:fa:88:18:90:1f:fc:81:3f:2b:07:c7:20:82:
                    8a:a9:e9:6f:78:fa:03:56:b2:4e:57:f8:70:be:32:
                    ea:87:25:4f:36:2a:cf:f5:32:31:1f:55:9c:1e:5f:
                    95:0f:80:3e:b3:85:cb:e7:8c:da:36:9e:3c:c7:82:
                    42:15:a3:17:d2:f4:f8:1e:95:d9:7c:ee:0b:c6:04:
                    18:16:d1:db:d0:6c:3f:b6:2a:4c:e9:2b:37:4b:70:
                    30:b4:48:8f:50:49:3e:a5:57:b0:2e:8f:a5:81:ce:
                    1d:43:8d:52:b0:8d:e3:ec:3e:61:5c:da:d0:64:eb:
                    54:86:1b:65:d6:ac:c0:2d:a5:98:33:0c:22:f0:38:
                    fa:61:a1:c9:6d:8b:80:3d:f9:7e:b5:64:3a:da:4d:
                    95:7d:a7:b1:5c:2c:5c:9d:3d:d8:80:cb:59:03:87:
                    c3:f0:2e:a2:51:76:2a:3a:70:f6:ed:6f:35:ac:50:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1D:4D:82:0B:37:CE:62:76:25:43:3F:D3:F9:8C:3A:FC:77:19:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/506a7189-eec7-38c0-94f2-e26e1c53707d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:cd:ad:b1:0e:36:0e:25:15:72:75:99:82:e9:97:4f:48:a9:
         7e:71:e3:1a:26:f4:38:32:8c:18:7b:61:fd:c6:d5:75:e2:0d:
         cd:d6:b3:f2:4d:5e:22:e0:9b:64:55:6f:fb:b7:4b:fc:cd:9a:
         bd:4c:4b:40:aa:93:5c:8f:4a:90:e9:f6:01:f0:9b:af:40:1d:
         36:98:2e:0f:28:11:15:95:0a:03:b6:f9:89:67:9c:9a:7e:a9:
         4e:15:7b:e5:2c:ac:aa:f1:81:01:09:e6:31:73:ab:8b:ad:93:
         6d:75:db:db:a0:3f:bc:62:c8:d9:85:61:38:ca:74:3f:9a:49:
         61:2a:18:60:e9:c7:f9:ea:8d:c5:b3:a2:82:3e:bd:bc:a4:91:
         9a:c7:72:43:a6:eb:1f:1c:ce:c1:21:ed:7c:b8:27:e9:1b:54:
         63:31:29:d4:33:9c:e3:1b:16:47:6b:ab:46:96:bb:d3:fe:39:
         3c:1a:41:98:1f:1e:e2:16:e8:96:18:dd:fd:23:4c:d2:51:a4:
         0e:a0:10:08:8a:1d:4c:c9:51:00:ba:74:61:cf:b9:e5:0a:bd:
         d4:f6:63:5c:80:9c:c6:bf:01:06:03:83:b6:6d:e4:c6:4f:76:
         07:92:1e:45:b6:84:fd:fe:53:b5:f3:12:ba:57:31:99:ea:f6:
         f8:6b:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:59:55 2025 by rpki-client