Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/d64d8a87-4817-352c-937d-5edb690187fd.roa
File:                     d64d8a87-4817-352c-937d-5edb690187fd.roa (raw, json)
Hash identifier:          ja28o8vCKNVtaSqhjo4R3vwgiANrl7ur/b3wWEyDT9g=
Subject key identifier:   4B:D6:60:F8:ED:18:B9:B5:41:1C:02:43:7A:97:43:03:5D:5B:F2:40
Certificate issuer:       /CN=b676c353-1e86-47cb-b6c0-e0f33199eecd
Certificate serial:       010D0C9F4328584B1AD188A34271D0BFFDB03800
Authority key identifier: 3C:EC:8E:E8:0F:4F:67:74:C4:50:8D:33:29:F0:3F:88:D4:E8:2F:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/d64d8a87-4817-352c-937d-5edb690187fd.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     401564
IP address blocks:        63.247.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:88:a3:42:71:d0:bf:fd:b0:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b676c353-1e86-47cb-b6c0-e0f33199eecd
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=dc8efb5b-0055-44be-ae13-fdf9eb723fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:58:95:88:0c:3d:9e:19:e9:84:f8:b7:65:
                    09:86:63:0b:d8:2b:50:52:57:92:73:a4:ce:1c:d3:
                    10:3c:db:20:a6:f7:0c:c3:17:96:0f:4f:38:b3:4e:
                    63:b4:af:07:b4:8f:10:9d:fc:e7:69:cf:f9:06:eb:
                    a7:58:32:85:e7:d5:2e:28:cd:e2:46:a1:10:2b:20:
                    1c:fb:3b:be:30:b2:4f:0e:fe:40:97:5e:bb:0a:33:
                    9e:da:e9:3d:a7:dc:49:0b:22:e3:78:bc:2e:bf:f6:
                    38:0b:3b:90:d7:c9:1d:4a:4d:17:a4:14:31:df:8f:
                    2d:cc:59:fb:a1:26:4b:6c:d2:f0:aa:00:9c:fe:2a:
                    98:6b:0c:ea:c7:4f:65:2b:84:87:44:92:c5:b2:50:
                    43:51:59:f5:cc:49:a3:69:b4:8e:67:ec:95:ad:ab:
                    70:c7:da:2a:80:7a:32:7b:30:e5:ae:d6:af:1e:37:
                    ff:f5:a1:99:79:82:a3:64:f4:8f:52:37:22:57:2c:
                    b6:f3:37:00:04:a8:d8:f0:53:4b:ca:2a:e2:0e:a3:
                    ba:ea:2b:5b:36:7e:b8:2d:33:87:19:a9:ad:f1:43:
                    10:00:ae:c4:3f:23:a0:b4:38:a4:f2:23:4e:5d:4b:
                    4a:30:b0:35:53:2b:27:1b:ca:fd:42:85:8d:80:f4:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D6:60:F8:ED:18:B9:B5:41:1C:02:43:7A:97:43:03:5D:5B:F2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/d64d8a87-4817-352c-937d-5edb690187fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.crl

            X509v3 Authority Key Identifier:
                keyid:3C:EC:8E:E8:0F:4F:67:74:C4:50:8D:33:29:F0:3F:88:D4:E8:2F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.247.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:46:5e:29:37:5e:f0:6b:11:af:e4:61:72:ce:02:e1:9b:cf:
         18:3b:98:9a:dc:2e:5a:32:8a:0a:e7:d0:99:24:49:74:c7:27:
         47:50:a7:0d:24:0d:5a:cb:f1:19:1c:12:b6:2a:0b:6f:25:f6:
         ff:6b:38:7a:af:c9:34:a3:dd:4a:f5:68:35:a4:8c:e0:bb:6c:
         67:1f:ca:3f:39:3f:4d:cf:c4:0a:7e:7b:8a:30:4b:bf:0c:42:
         5f:8b:88:d2:82:3a:b0:ed:95:c7:a9:35:5d:33:ff:9a:36:a2:
         a0:53:3f:74:ad:f1:92:a1:b2:db:ca:06:79:f5:69:41:05:ec:
         af:d7:56:f6:e2:1a:70:39:99:8e:e5:c9:31:05:f5:6d:d1:ef:
         65:47:a8:91:1a:e1:4b:39:52:7b:52:1c:4f:89:12:7c:8b:fd:
         4d:fe:dd:12:cb:f8:b3:48:74:6c:f4:f2:48:df:9d:b6:e1:0a:
         ec:cd:27:06:6c:47:df:51:71:7f:1b:ad:17:4c:94:74:8d:03:
         0a:a3:a6:c2:81:bc:16:22:bd:08:f3:cf:1f:74:31:e7:7f:b1:
         d6:44:66:c8:d6:b6:3b:f9:17:24:f2:12:b4:56:c7:17:5a:ee:
         22:9f:2f:f8:c5:b5:fd:1c:93:cf:a2:0c:eb:6c:65:65:21:84:
         eb:6a:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:04:42 2025 by rpki-client