Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa
File:                     f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa (raw, json)
Hash identifier:          FMShZPlDWAaLJUz1F+2fzfWIuxS+ZghmisDXb2Y61/I=
Subject key identifier:   6C:D9:38:9B:24:78:5E:7E:42:42:2E:5B:F9:58:7A:56:B0:49:22:C8
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584B0746AE639BD79C1A01B53BC0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     13414
IP address blocks:        64.63.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:ae:63:9b:d7:9c:1a:01:b5:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=2d5d248b-a8ba-4079-beb6-3efba310ecd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:43:f2:06:18:f0:55:42:93:1c:f1:57:35:
                    84:af:30:36:1b:af:1e:f2:a4:01:73:97:48:40:3c:
                    c4:7c:16:a3:f6:2a:d1:54:79:ae:9c:92:06:5d:dd:
                    e3:c6:4d:74:1c:8c:11:b0:22:ae:c6:92:36:e6:49:
                    3c:fc:bb:a4:f2:80:7a:12:50:9b:d0:a1:b6:2c:bf:
                    5f:b0:a2:78:ab:27:ab:c7:4f:8e:4f:1b:cf:f4:c1:
                    a8:65:5d:da:61:a1:82:b4:75:13:2e:84:4c:8c:7a:
                    d2:a2:7a:7d:06:7f:d6:a1:36:3d:15:b8:79:5c:15:
                    2e:7e:ba:ed:ea:44:46:b8:0f:3d:9a:42:ff:65:84:
                    8e:f5:a2:3c:69:39:6f:95:b8:5e:5f:8b:23:ab:37:
                    d6:c8:39:67:78:3f:17:7d:1f:df:a2:20:97:db:83:
                    50:fc:a5:3f:79:c9:c7:55:e8:fa:65:cd:21:1e:57:
                    1a:a9:73:3d:50:7d:6b:6e:54:45:0e:c8:be:31:48:
                    e5:6a:9a:2c:be:2d:53:de:ba:bd:fb:c4:23:21:0d:
                    e6:7c:68:32:04:69:bc:a5:cb:f2:d1:ee:c7:1d:af:
                    5e:9e:e6:5f:dc:0e:46:d9:64:3f:97:09:a8:f5:cc:
                    d1:cc:a5:2c:7c:a9:88:e4:67:8f:bf:83:f0:1c:b7:
                    4f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D9:38:9B:24:78:5E:7E:42:42:2E:5B:F9:58:7A:56:B0:49:22:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:bd:e1:e3:f6:b0:3e:f5:c1:21:92:b2:a8:8b:5a:93:3a:dc:
         6b:3b:21:a2:18:cf:ca:1b:c1:08:2c:2a:7c:50:d5:b0:4e:66:
         f5:75:72:cd:dd:25:92:11:93:52:0a:40:e1:80:2f:73:cc:80:
         23:ca:5f:e7:e6:24:9a:68:2c:06:61:3c:1e:9d:a8:df:a0:f0:
         64:b6:14:fe:e5:42:5d:ee:ac:65:55:10:71:08:b8:16:3b:40:
         37:7a:f8:88:cd:69:f9:9d:d5:90:0a:14:b5:a6:0b:81:16:a2:
         61:c7:f5:72:c0:bf:3a:3b:57:ca:64:e0:60:e7:1a:9e:09:39:
         a6:41:b2:d7:9e:8e:e7:81:cb:80:f8:d7:08:06:05:5a:a3:19:
         82:56:4f:ea:c9:21:df:49:72:21:8a:70:b3:b4:29:2c:61:35:
         9f:30:b8:95:6c:d4:0b:e3:f9:df:3e:b6:77:0d:10:27:de:3c:
         06:f3:fe:12:27:24:88:f9:3b:99:db:83:58:9b:50:b0:7a:7f:
         47:a6:7b:4a:96:cf:45:70:00:18:d0:33:51:1d:ce:eb:30:a7:
         0e:26:70:e4:41:7a:6c:f8:18:44:d3:64:94:ac:d3:05:fd:76:
         64:cf:ff:95:f3:dd:95:ce:71:3b:d4:4e:c4:3a:cb:db:c9:25:
         88:bb:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 21:34:36 2025 by rpki-client