Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
File:                     60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa (raw, json)
Hash identifier:          E81m9Y193ujS7dxtm9GaM1f88xEIZKm/4u9Zbo4a88Q=
Subject key identifier:   97:0F:94:11:66:6D:9B:27:DB:45:68:2D:7F:A1:AD:B2:4B:DF:4C:15
Certificate issuer:       /CN=31663e0d-961a-43ac-8a01-d43efc01bea0
Certificate serial:       010D0C9F4328584ADD667707CAD927BBBD5AD880
Authority key identifier: 7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     395555
IP address blocks:        170.10.64.0/22 maxlen: 24
                          170.10.72.0/24 maxlen: 24
                          170.10.84.0/22 maxlen: 24
                          209.206.64.0/19 maxlen: 24
                          2604:4c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:77:07:ca:d9:27:bb:bd:5a:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31663e0d-961a-43ac-8a01-d43efc01bea0
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=752f5a37-00e9-4372-aa12-0e3ee7b234ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:5b:e8:02:82:4d:c4:c7:ce:23:96:6d:c3:
                    cf:16:cf:10:0d:40:dc:fc:b7:0c:73:0f:b6:70:a3:
                    a8:17:f0:0f:25:51:56:ea:7f:54:19:02:7a:a7:13:
                    c4:ad:3d:0a:e5:78:df:cc:18:46:39:4b:3d:64:eb:
                    53:5c:5e:06:03:1e:d8:bf:7f:01:73:65:a6:7c:47:
                    b3:94:10:0d:4e:cd:37:88:5e:cc:7c:13:6a:5d:ad:
                    26:16:7f:27:90:f9:96:6d:45:2d:90:60:46:17:e4:
                    07:b1:1f:48:ce:d6:f1:ce:a5:f3:04:20:db:fc:a0:
                    07:c2:20:66:ca:e2:dd:b0:1b:d2:57:a1:fd:9a:b5:
                    d7:f7:d4:23:43:4a:f0:3c:e3:d6:6f:0d:1b:e8:a3:
                    fe:4d:f2:28:22:bb:ec:95:21:be:47:c1:fa:94:56:
                    e9:d6:1e:bb:3a:f4:70:6d:87:08:74:0c:18:68:68:
                    14:04:9a:96:59:63:cd:d9:07:d4:3a:05:4e:72:92:
                    4d:53:59:0a:13:81:78:83:57:58:2d:57:a6:ba:c5:
                    be:8e:0b:23:98:e1:d5:0a:bb:87:71:25:13:42:19:
                    05:99:7f:43:5f:78:a2:98:57:29:41:da:73:be:94:
                    6e:2e:b9:6b:97:a7:21:09:3d:aa:66:2f:72:c2:88:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0F:94:11:66:6D:9B:27:DB:45:68:2D:7F:A1:AD:B2:4B:DF:4C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl

            X509v3 Authority Key Identifier:
                keyid:7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.64.0/22
                  170.10.72.0/24
                  170.10.84.0/22
                  209.206.64.0/19
                IPv6:
                  2604:4c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:6a:e6:a8:72:4c:a5:a0:4f:5e:70:25:b0:a3:8d:f7:7e:
         48:54:f3:f2:22:37:95:89:5d:d1:43:37:ca:0c:5a:12:a0:d8:
         95:89:19:95:a3:33:8a:51:a4:ea:b3:d4:eb:b9:7e:45:6c:62:
         2b:a2:4f:03:19:d4:a7:6f:09:f2:bc:49:39:89:bf:bd:ce:cd:
         5f:f7:47:51:fb:ea:9a:54:b7:17:00:df:f6:92:df:c0:53:53:
         5c:12:87:54:b1:d7:5d:7c:39:08:03:1b:38:85:14:dd:ef:82:
         6b:d9:47:7e:86:47:03:ee:ef:0f:32:47:a8:62:88:3d:92:a8:
         e9:22:e0:43:c5:ba:20:82:93:bf:fe:ab:83:91:63:20:37:48:
         62:5b:f8:9e:4e:5a:57:5c:4a:19:f6:c1:65:d4:3d:a1:96:f0:
         11:4a:6c:82:81:d2:7a:64:29:ee:cd:b2:fc:46:5c:dc:a4:64:
         d1:3d:c9:01:cd:57:d4:fc:c0:46:e5:11:8e:13:45:e0:fc:4e:
         86:e4:64:1b:46:bd:a7:8b:e6:36:52:35:05:f5:89:7d:8d:42:
         bd:40:e7:8a:1d:30:13:ee:a1:39:89:4d:41:e3:51:c9:d3:10:
         bf:bb:41:0d:10:40:ad:9b:b3:2a:f1:63:b0:03:b6:3d:4b:dd:
         70:77:70:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:51:17 2025 by rpki-client