Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/9b746b63-41d7-3052-85a1-ec9694651544.roa
File:                     9b746b63-41d7-3052-85a1-ec9694651544.roa (raw, json)
Hash identifier:          I2dd4+8BRIgqURHmkgZEqUAgEiiaMfCaMjHuXWCLb9g=
Subject key identifier:   D3:2D:C1:7A:DE:04:4A:31:A8:06:C0:B1:92:D8:B7:45:FF:94:6E:BF
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F43285849511EEB12DCDC60F11C517680
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/9b746b63-41d7-3052-85a1-ec9694651544.roa
Signing time:             Wed 26 Mar 2025 14:16:36 +0000
ROA not before:           Wed 26 Mar 2025 14:16:36 +0000
ROA not after:            Tue 24 Jun 2025 14:16:36 +0000
asID:                     40080
IP address blocks:        65.87.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:51:1e:eb:12:dc:dc:60:f1:1c:51:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Mar 26 14:16:36 2025 GMT
            Not After : Jun 24 14:16:36 2025 GMT
        Subject: CN=82dc53e1-f89e-4d96-9d83-33427d9a4731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:60:5d:e9:17:df:15:61:d6:90:fa:2b:ac:ee:
                    ac:44:45:c8:39:be:b5:60:6d:7b:9c:c2:28:2b:4e:
                    f4:ce:1d:72:3d:ab:20:7b:43:43:0f:02:20:0e:91:
                    b6:ef:01:45:a5:8b:f7:b1:78:f8:ba:50:58:c5:51:
                    1f:8b:84:d7:ed:a5:39:d7:c1:6f:c3:6f:75:9b:bb:
                    38:7b:c9:d5:4c:1b:7e:fa:f4:31:0c:a9:f4:51:86:
                    10:6d:7f:9e:ec:4f:bd:91:ca:bd:dc:eb:4c:72:6d:
                    fa:2b:bf:b8:51:84:ea:65:a0:b9:b5:47:6b:8c:9f:
                    82:9d:8c:be:cb:56:bb:f4:7c:86:c7:3b:b4:dd:88:
                    5c:13:6a:36:a4:c6:19:a0:c9:09:99:02:9b:0c:21:
                    ce:6b:94:12:0b:2d:35:6a:aa:98:2a:6c:12:01:ec:
                    3f:2e:c2:bf:f1:79:16:f5:4d:88:f1:fc:ce:4a:1c:
                    a9:7a:f1:32:97:5a:65:2f:3d:61:fb:24:6a:59:94:
                    ea:d6:b3:b8:14:df:a9:33:03:e0:ca:f3:03:8d:46:
                    0e:f0:4f:13:07:13:0a:65:64:63:4f:74:bd:1b:63:
                    82:82:0a:af:96:c5:e6:dc:90:b5:07:bc:bc:d6:45:
                    2f:0d:13:b8:f5:90:c9:35:58:16:22:5c:97:9c:04:
                    0a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2D:C1:7A:DE:04:4A:31:A8:06:C0:B1:92:D8:B7:45:FF:94:6E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/9b746b63-41d7-3052-85a1-ec9694651544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:60:3b:ee:f8:0f:3b:45:dd:ea:25:9e:28:6a:8f:af:90:f4:
         93:54:f0:ab:4f:04:a9:fa:aa:74:2b:95:9e:98:c9:08:b2:6d:
         67:4d:1c:9d:11:4f:d1:48:b6:92:62:52:7f:b0:0c:bf:aa:04:
         a3:cb:e8:76:91:c3:b7:62:17:1c:ad:52:b0:65:8d:54:1e:82:
         7d:dc:0b:f5:76:61:37:17:15:3f:54:53:07:18:8a:91:0a:18:
         6b:08:8a:f6:90:25:0a:75:3b:2f:47:db:06:4d:09:4d:4e:fc:
         d8:fe:65:86:f1:a8:56:7c:c9:40:ba:0c:52:1b:0e:6c:4a:af:
         64:50:92:de:8d:38:c0:01:36:71:31:84:c8:0a:d6:14:3f:83:
         b4:d3:2e:03:13:c5:c9:17:94:c4:76:ca:5a:5f:1b:da:95:05:
         f5:9e:39:09:9e:22:a1:68:1b:ec:66:32:33:57:f8:37:a0:82:
         9a:cb:57:ab:b8:a9:ed:3e:99:c6:a8:b9:64:e9:7e:53:d0:ec:
         c8:85:1b:f4:c6:e9:90:ff:d2:47:ea:f8:94:f4:a9:bc:d7:b0:
         d3:86:29:9d:73:73:37:59:3e:e7:9f:a5:44:86:f3:03:42:df:
         a2:89:13:ff:9f:fc:4d:4d:d7:60:1e:2d:ad:b1:bf:e9:2a:f7:
         48:25:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:33 2025 by rpki-client