Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/0dbd3604-5d38-3a2e-aaa1-1a83362c9c9b.roa
File:                     0dbd3604-5d38-3a2e-aaa1-1a83362c9c9b.roa (raw, json)
Hash identifier:          HuXnjYlV0ovkdzYEs+3YFmjX/muDvHn+TOnmkL4ComA=
Subject key identifier:   3B:72:49:69:7E:7B:F7:D1:5B:AD:D0:E0:91:4C:96:49:36:08:81:7D
Certificate issuer:       /CN=5bfdb746-47de-4f0f-9534-ecf378b217e4
Certificate serial:       010D0C9F4328584AF7EBDFDF40F5BD7A50679DC0
Authority key identifier: 80:C4:75:C3:F7:E4:55:62:89:B2:19:B2:F6:C0:E8:1E:30:08:AA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/0dbd3604-5d38-3a2e-aaa1-1a83362c9c9b.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     8075
IP address blocks:        64.13.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:df:df:40:f5:bd:7a:50:67:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bfdb746-47de-4f0f-9534-ecf378b217e4
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=e921129f-1c00-4e20-ab83-9b9df1b9a3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:fd:21:70:e9:d9:dc:0e:f8:07:d2:9e:50:
                    23:b6:6d:0d:e3:96:e4:7e:b3:ef:12:d8:38:29:ed:
                    5b:eb:20:08:95:b0:48:1b:d8:0b:7f:f6:6d:3f:e8:
                    85:09:2c:c8:13:12:7b:a7:63:db:36:e7:ca:ca:c1:
                    cb:d3:2f:8d:d7:f5:e9:07:88:ab:94:af:7c:3e:69:
                    eb:1d:c6:34:18:8e:c7:4f:d9:c1:ac:e4:0f:b9:d9:
                    ac:6e:59:2e:90:44:c1:92:88:30:aa:7f:9d:54:42:
                    33:f7:41:d1:7f:8a:f1:10:1a:92:a4:61:73:3a:0a:
                    8e:b1:dd:af:6d:35:97:68:02:a9:05:2e:dc:49:cb:
                    c1:90:95:af:20:4c:3b:8a:b0:81:db:ef:36:6d:ee:
                    c0:ca:ea:7a:9f:ba:7e:ed:12:a8:27:be:1d:de:d2:
                    a1:1e:42:d4:2c:33:9e:82:9f:cc:47:7d:bb:53:be:
                    7a:25:cc:a8:db:f7:69:8c:45:3a:56:61:35:c4:92:
                    eb:a8:ad:0b:5f:ce:2d:08:01:b2:e6:74:f9:95:9f:
                    79:a3:52:13:6f:d2:63:8f:13:72:28:2a:f4:35:b3:
                    6f:dd:52:b4:cf:ac:94:07:ef:c6:45:c4:46:73:7e:
                    25:c5:9f:ec:68:8c:4f:64:1d:eb:f8:11:1a:ae:0b:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:72:49:69:7E:7B:F7:D1:5B:AD:D0:E0:91:4C:96:49:36:08:81:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/0dbd3604-5d38-3a2e-aaa1-1a83362c9c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.crl

            X509v3 Authority Key Identifier:
                keyid:80:C4:75:C3:F7:E4:55:62:89:B2:19:B2:F6:C0:E8:1E:30:08:AA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:ae:c0:87:af:f6:72:cb:19:3b:cb:c0:74:c2:05:e4:4c:
         af:fc:e4:24:26:61:0a:63:02:1a:36:ac:5e:5b:96:cb:57:c4:
         4e:80:52:96:9f:14:06:d8:d7:55:ff:72:2d:a7:a2:9b:67:2e:
         d8:86:be:5e:81:7e:90:1e:26:ef:75:e9:08:35:83:b9:c7:61:
         be:c5:7b:70:20:b4:5c:12:ba:7d:e3:94:16:28:d8:06:01:40:
         29:d4:6e:68:fb:49:6d:e4:47:28:7e:13:d0:b5:49:6f:50:6f:
         c9:e9:2f:d5:d5:fb:27:71:78:a7:b3:cb:5c:92:01:6d:85:c0:
         c8:27:1c:b8:91:66:83:82:94:f5:3c:55:dd:a9:9f:3e:0d:e1:
         a0:57:db:cc:3f:0f:13:49:d8:11:25:a9:9a:a4:3d:ff:40:a4:
         80:e0:b6:05:d7:11:f1:d2:de:e8:58:3f:13:f4:b0:3e:af:3c:
         20:84:d9:03:0f:f7:19:67:0d:41:1f:f9:ce:08:5d:94:09:fe:
         44:33:d7:38:8c:c2:92:ce:4a:a1:06:79:46:c5:12:1e:02:47:
         30:3f:63:b4:d0:a1:36:32:48:4e:c4:c6:5c:f2:d5:37:3c:d7:
         ee:82:d9:c4:65:c1:0b:42:ae:33:a8:07:4c:24:cd:21:75:07:
         31:ee:ed:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 23:50:41 2025 by rpki-client