Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa
File:                     250c85a0-cf56-385d-8e3b-9175af7edb61.roa (raw, json)
Hash identifier:          Co/Is0nnkr4knYOhvZv7ry7eSVTEhtj/aIfyuoW/c50=
Subject key identifier:   1A:D9:DA:D6:EB:88:37:1F:88:B6:C0:07:76:48:12:B1:6E:DF:90:35
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584A8840AB27632413612DA4DB00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     25645
IP address blocks:        64.92.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:ab:27:63:24:13:61:2d:a4:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=1f7a6ca9-7810-4004-bc18-96c62a754d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:ee:ad:56:c7:ee:14:59:5b:08:83:52:53:
                    e1:91:7f:87:75:d3:a3:d5:0a:4f:1a:2c:b7:db:80:
                    8e:95:a6:8a:6a:7a:51:ba:d5:13:9f:d5:82:da:49:
                    c9:36:a0:8c:8f:ef:45:d2:5b:d9:63:4c:20:d1:cc:
                    99:da:ab:ef:21:f7:37:81:4b:84:8b:31:9d:52:ac:
                    42:a4:30:ec:51:e1:2d:9b:db:2e:12:4f:01:d1:d4:
                    90:51:62:c5:52:41:be:da:10:de:92:7c:04:e3:a6:
                    97:8d:0a:5f:2a:ab:7d:fd:ff:bc:a1:11:2e:05:c6:
                    a4:68:e7:0f:64:d9:99:0e:f8:a5:1a:ec:89:eb:ea:
                    de:33:6c:11:e0:25:9d:a5:3c:f2:85:5e:22:84:bb:
                    81:bf:d7:d8:d8:97:c1:49:e2:31:99:ba:96:81:ff:
                    cc:09:9b:01:a2:2b:e2:57:5f:ff:2a:79:21:a0:a9:
                    74:34:75:26:f9:41:07:af:f6:52:45:aa:dd:6d:c1:
                    74:44:6d:6b:64:e8:14:fe:e5:7e:10:0e:8b:ef:c8:
                    86:77:69:ef:17:c9:01:c2:5b:13:c7:75:fc:83:2e:
                    d6:b2:aa:a1:cc:71:95:68:2e:0e:b3:94:14:99:fd:
                    33:f7:98:92:a8:d2:91:40:a8:92:c0:c7:6f:8f:cc:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D9:DA:D6:EB:88:37:1F:88:B6:C0:07:76:48:12:B1:6E:DF:90:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:60:9c:93:0f:84:6c:ed:ae:0c:97:85:f9:58:48:78:08:
         c2:ff:11:d6:2e:9d:57:52:e1:ad:32:6e:8c:25:04:9a:58:2c:
         5b:d7:6e:62:70:23:9e:9d:f8:e4:c7:dd:2a:09:0a:16:2c:ce:
         cc:8d:8d:9d:7a:3f:aa:22:ea:78:2f:13:00:ae:05:70:55:ea:
         ec:2b:db:d9:c3:84:ae:61:09:fa:ae:63:1b:d9:4f:62:e0:f3:
         6a:d6:b5:83:32:64:3f:da:a0:ee:1a:a7:94:da:4f:ad:f3:64:
         e0:48:83:65:a8:3c:24:66:46:1b:ac:cc:dc:29:e8:46:26:04:
         ab:1a:1c:35:0a:41:8d:ea:4e:b6:ab:c9:48:c6:eb:61:67:30:
         5c:0d:86:7b:56:39:b0:a7:78:8d:81:03:7f:67:9a:aa:1d:1a:
         c2:af:fc:0c:a4:27:d5:13:55:3b:88:e4:aa:5b:d0:47:a6:71:
         56:db:75:c6:c0:db:21:28:07:65:7d:78:bb:d0:d1:bb:7e:41:
         ab:37:78:8f:1d:21:5a:fe:7b:25:73:df:46:84:f6:f2:db:99:
         f0:a8:f6:0b:67:bf:6d:b4:cd:5f:89:05:40:61:bc:06:4f:8c:
         6d:d5:8b:f4:0c:da:f9:f9:3a:4b:a3:5b:e6:31:f4:1d:4a:f4:
         76:75:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:11:16 2025 by rpki-client