Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/1787c673-003d-3a23-b4b6-9acd9e9f16e4.roa
File:                     1787c673-003d-3a23-b4b6-9acd9e9f16e4.roa (raw, json)
Hash identifier:          GWeS24OOb7xPfu1G1RyZ7GyRe5cKHbNSTu6PKMxkYDw=
Subject key identifier:   A7:15:D5:67:AF:D8:52:D5:54:8B:6C:0E:E6:11:B4:40:FB:F4:18:0C
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584B03169B6795724EC885D7FF40
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/1787c673-003d-3a23-b4b6-9acd9e9f16e4.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     5065
IP address blocks:        64.113.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:9b:67:95:72:4e:c8:85:d7:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=fa37a2c4-3803-4fb2-88a9-6c25fb184394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:86:90:53:2c:4e:8c:26:bb:35:dd:ca:76:19:
                    5b:ce:d3:d4:71:a7:26:02:7a:60:d6:0d:98:35:8d:
                    54:ca:b9:93:55:e3:29:6d:ed:a8:47:e9:13:77:9d:
                    82:5a:0e:f2:f0:62:5b:2b:99:55:14:12:3a:bd:6b:
                    7c:4f:5a:66:77:41:73:3b:78:7c:63:06:57:fb:7d:
                    1c:88:f4:bb:fe:ec:6e:d6:19:69:40:43:3b:03:8c:
                    9f:c2:fa:c8:b0:99:ff:71:02:84:a1:a6:6e:fd:99:
                    2e:ba:35:66:15:26:01:9c:9b:0b:c6:d6:1c:59:3f:
                    4e:5c:0c:bf:78:15:11:1d:0c:a7:70:7e:60:fc:ff:
                    7d:f8:de:77:a9:7b:49:6c:81:5a:e1:33:0a:c7:a8:
                    3c:1b:86:d8:c5:41:c1:2f:68:fb:8f:72:97:1d:04:
                    17:6f:1a:36:1b:73:1b:ea:fa:b8:8c:5b:a6:ca:b1:
                    f5:a3:5a:92:ec:71:28:ea:20:32:8a:72:e8:d1:ff:
                    1f:a9:48:53:62:f1:85:36:b6:ca:46:96:da:80:98:
                    39:e9:b0:ed:63:63:0b:27:41:0f:c8:d7:11:a1:09:
                    76:2b:04:77:3f:a7:d4:41:f3:9f:aa:78:a8:1c:dc:
                    be:7b:b3:3f:f0:2c:92:f3:10:1a:6c:fb:f9:5b:30:
                    f3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:15:D5:67:AF:D8:52:D5:54:8B:6C:0E:E6:11:B4:40:FB:F4:18:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/1787c673-003d-3a23-b4b6-9acd9e9f16e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:95:41:72:85:d4:a1:76:9d:b6:97:e3:88:fa:65:47:3d:e4:
         5e:69:85:11:c1:48:8a:06:0d:40:c1:14:6a:a9:9f:7f:d3:b0:
         15:8d:92:16:74:0b:1d:23:4f:55:c9:b8:c3:ce:63:ce:ae:26:
         34:95:62:67:79:48:7d:70:55:2e:b8:83:22:ed:bb:ab:60:87:
         83:5c:72:02:18:93:e9:dc:83:8e:5b:fa:97:c8:d1:8c:3b:0f:
         a3:bc:d8:f7:7d:f3:c2:aa:7d:22:c3:6f:aa:e2:ef:f9:26:a6:
         ac:4a:b5:49:c8:77:0e:30:1d:96:3f:24:b7:68:55:ed:65:9d:
         58:dc:2f:1a:7b:d3:55:63:5b:02:94:78:45:39:3c:ac:a6:be:
         36:c0:c0:75:1b:6c:b5:d1:0e:0c:67:b8:c2:47:5e:ad:ad:e2:
         5c:f4:38:51:77:5f:3d:71:f2:25:5a:0b:29:1a:c5:bc:be:ef:
         fd:aa:da:6b:a3:fa:ac:58:52:25:d9:52:43:af:86:77:e2:0f:
         34:08:d2:29:a5:b3:87:e6:d1:54:82:8c:3d:7c:61:d4:db:32:
         fc:5a:9a:f5:1a:00:04:3b:0e:33:8f:e8:3b:f5:74:5b:31:d7:
         93:bd:a9:79:0b:e8:b0:84:a9:fb:0c:30:ef:43:8d:ff:13:57:
         9f:dd:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:56:17 2025 by rpki-client