Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/b3f3356b-5927-3263-8f8d-b62359f29a1c.roa
File:                     b3f3356b-5927-3263-8f8d-b62359f29a1c.roa (raw, json)
Hash identifier:          lf9e4rtfpew+0UvCretr6B0OsNLAn0NkdwiUIV5gnr0=
Subject key identifier:   78:D6:1B:D1:D4:80:46:4B:0E:3D:3B:3E:0B:28:95:C6:FB:EC:A5:47
Certificate issuer:       /CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
Certificate serial:       010D0C9F4328584AFAB6815C2196F7DE2AFEFBE0
Authority key identifier: 08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/b3f3356b-5927-3263-8f8d-b62359f29a1c.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     2698
IP address blocks:        64.113.64.0/24 maxlen: 24
                          64.113.65.0/24 maxlen: 24
                          64.113.66.0/24 maxlen: 24
                          64.113.67.0/24 maxlen: 24
                          64.113.68.0/24 maxlen: 24
                          64.113.69.0/24 maxlen: 24
                          64.113.70.0/24 maxlen: 24
                          64.113.71.0/24 maxlen: 24
                          64.113.72.0/24 maxlen: 24
                          64.113.73.0/24 maxlen: 24
                          64.113.74.0/24 maxlen: 24
                          64.113.75.0/24 maxlen: 24
                          64.113.76.0/24 maxlen: 24
                          64.113.77.0/24 maxlen: 24
                          64.113.78.0/24 maxlen: 24
                          64.113.79.0/24 maxlen: 24
                          64.113.80.0/24 maxlen: 24
                          64.113.81.0/24 maxlen: 24
                          64.113.82.0/24 maxlen: 24
                          64.113.83.0/24 maxlen: 24
                          64.113.84.0/24 maxlen: 24
                          64.113.85.0/24 maxlen: 24
                          64.113.86.0/24 maxlen: 24
                          64.113.87.0/24 maxlen: 24
                          64.113.88.0/24 maxlen: 24
                          64.113.89.0/24 maxlen: 24
                          64.113.90.0/24 maxlen: 24
                          64.113.91.0/24 maxlen: 24
                          64.113.92.0/24 maxlen: 24
                          64.113.93.0/24 maxlen: 24
                          64.113.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:81:5c:21:96:f7:de:2a:fe:fb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=77306626-3bb5-4ae2-a9dd-d3821b206fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:4f:d2:c9:68:a4:44:68:4f:38:13:73:a4:
                    27:cf:d9:27:c6:62:15:71:21:08:a4:de:81:a3:0a:
                    8c:46:0a:c4:e2:76:a1:64:0d:ce:ae:86:83:93:54:
                    aa:38:2c:42:36:d2:d3:b4:b0:ae:6b:a2:b2:46:7b:
                    49:60:bf:ee:18:a6:26:67:4d:e0:81:17:b0:e2:3d:
                    9c:f4:f6:df:a5:6f:01:fc:a4:b1:ba:76:6a:4a:d7:
                    ef:75:af:4d:29:8f:d6:b7:39:55:af:51:76:89:c9:
                    b9:ff:2e:2a:44:87:4d:f2:64:0b:d7:b1:f5:05:51:
                    e9:e4:b4:f0:b0:07:e1:8b:14:96:ec:66:0c:ab:88:
                    6d:55:67:0b:de:57:04:a0:19:aa:09:80:c0:eb:38:
                    37:2e:55:16:a0:5f:5a:4e:b3:3d:94:f8:d4:13:10:
                    a0:d8:fd:f8:6d:98:b3:1b:4a:3b:2f:79:dd:5f:30:
                    bf:99:5e:20:cc:aa:50:6e:d5:53:7a:70:20:55:1e:
                    06:a4:b6:7d:bf:b6:8c:50:54:94:be:f6:1b:7d:6a:
                    54:d0:26:f0:77:c4:65:ec:97:b7:e8:07:b0:59:05:
                    b4:d5:d4:2b:26:77:f1:11:40:1d:dd:ba:e9:ba:2b:
                    e6:d0:2f:b8:d9:89:d7:d4:74:8a:67:9f:a9:2a:86:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D6:1B:D1:D4:80:46:4B:0E:3D:3B:3E:0B:28:95:C6:FB:EC:A5:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/b3f3356b-5927-3263-8f8d-b62359f29a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl

            X509v3 Authority Key Identifier:
                keyid:08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.64.0-64.113.94.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:93:b9:0a:6f:d9:d9:b5:26:45:05:0e:c7:2d:b2:cc:3d:
         71:9f:58:1c:a1:92:eb:84:25:cd:68:22:7d:b9:7c:f2:67:76:
         ca:e0:f4:ef:60:e1:85:b2:ff:83:33:cb:a4:20:a0:78:4e:b9:
         2a:b2:08:c4:ba:3a:0b:0d:c7:ce:26:6f:65:61:c0:eb:38:23:
         ab:06:e1:61:00:e6:46:4e:61:69:ff:30:88:01:88:9c:31:4c:
         07:c0:d4:4e:2e:88:35:07:7c:18:94:86:03:0a:06:9e:fc:c1:
         a9:05:4f:fd:98:2d:fc:d2:65:95:8c:e4:be:b4:6e:27:98:03:
         19:f7:e5:c6:a0:2c:55:d2:b7:8d:0e:ef:4f:47:e2:17:5f:82:
         d8:46:bb:a9:77:00:f5:f0:ae:4c:bc:2d:72:41:4d:bb:20:f7:
         cf:9b:2b:25:f1:b0:26:93:a3:a0:b4:a8:19:6e:a6:af:f2:93:
         84:16:18:32:17:7b:86:c3:d1:37:22:40:4e:5e:49:2f:2e:f9:
         f7:9d:52:85:d3:57:c8:57:6a:00:33:d8:98:fd:4f:38:f4:6b:
         50:e2:06:95:69:ca:91:87:73:3b:a6:11:3f:07:f1:ec:76:31:
         f8:ae:2c:5e:61:df:49:bf:eb:6a:79:bb:77:af:54:42:a7:85:
         8a:02:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 03:16:02 2025 by rpki-client