Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa
File:                     bcbb36b3-d8e7-31a4-a360-085363e54218.roa (raw, json)
Hash identifier:          chacGAjP0/U7BimP1GqD46rFhIW2UFpqKxMxEGsVPiA=
Subject key identifier:   51:BE:2B:B1:D0:C0:49:7D:26:0D:18:D6:BD:05:F4:91:FA:54:F2:FB
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285848FD569E865B3BD1C8A82A15E0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     6453
IP address blocks:        64.86.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:9e:86:5b:3b:d1:c8:a8:2a:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=4865561b-ef50-4378-954e-7309a0fdaeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7b:b3:ee:6d:21:c3:60:2c:a6:c5:00:c2:32:
                    98:0b:57:d9:b1:03:74:b5:20:5f:7a:dd:2d:e2:07:
                    f7:9c:85:e8:d2:1f:20:b2:3f:89:f8:ba:4e:b8:4f:
                    06:cc:94:5c:9c:e3:42:56:0b:3d:ac:e1:e4:11:a5:
                    27:39:4a:7b:7e:d6:b9:d1:4a:5d:d1:9a:51:ae:f5:
                    df:2c:3d:dd:a6:04:76:97:99:7d:93:12:4a:72:c9:
                    61:a2:01:da:4b:57:21:84:e3:ed:6f:fe:bb:33:c9:
                    7a:75:44:f0:4f:b9:94:97:d5:01:01:c6:c7:1d:83:
                    e4:96:31:a4:a9:a3:00:41:ff:45:a4:4a:ea:c5:c9:
                    0b:e6:ac:a2:f9:a0:1c:06:2b:c5:65:f2:8d:be:91:
                    6c:f0:11:8b:b7:ca:c0:98:1e:6f:b2:4b:d0:f7:cc:
                    2a:ca:2b:93:d5:74:60:e4:26:6a:3c:cf:31:60:15:
                    e6:36:92:9d:d1:fe:a1:cd:ec:3f:78:fa:25:74:28:
                    63:3c:e2:9b:ff:eb:ba:7d:f9:c3:4b:fd:51:f6:47:
                    07:de:fe:bf:bb:54:2d:23:d7:cf:56:09:fd:dd:02:
                    71:86:0e:89:39:f3:54:14:db:4b:dd:07:69:70:2f:
                    b4:fe:90:14:7d:8e:88:f0:eb:19:07:48:ea:9a:88:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BE:2B:B1:D0:C0:49:7D:26:0D:18:D6:BD:05:F4:91:FA:54:F2:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:af:9d:f9:1d:0a:dc:c6:2e:49:1e:f3:ab:07:d9:de:a8:15:
         c3:c0:ec:33:0f:dd:a4:a3:31:ab:26:6e:ae:0c:c8:6a:8a:5c:
         8f:f2:56:f2:5c:70:2d:73:2d:ca:b6:01:87:e2:c3:75:48:63:
         a9:87:a0:57:59:cb:53:69:d3:9b:5d:c7:03:b5:c7:1b:56:bd:
         56:36:5f:f8:1e:56:2c:c6:3e:20:a4:bc:c5:05:af:d6:a5:ae:
         85:ca:3e:59:cb:28:fe:87:f7:47:32:4d:53:82:db:65:fb:69:
         27:f9:ce:6e:ea:b7:5f:9a:50:6d:2b:1e:0c:46:40:ed:2a:0b:
         97:a0:e1:da:92:2f:3f:6a:45:38:51:f9:ae:ce:d6:bc:c7:e8:
         97:70:77:d4:db:ae:1b:59:b8:e3:43:6f:fe:f2:5b:66:20:44:
         04:85:fe:09:90:29:6e:37:55:8b:27:7a:ca:3f:6a:5e:52:9d:
         0b:ac:c9:ce:ab:ac:4b:eb:a0:c5:41:60:d3:10:6c:35:50:b7:
         52:a5:39:1f:42:e4:f2:c8:7a:9e:cf:e2:5e:37:9c:ed:12:d5:
         b1:83:db:ac:68:e6:85:74:53:41:0d:03:ee:a9:7c:74:2a:3e:
         e7:86:97:33:97:f9:4a:64:3b:3c:bc:87:88:bf:70:25:bf:45:
         81:b4:eb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:01 2025 by rpki-client