Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/65d33bb8-4d43-307a-93be-33a8d82b1405.roa
File:                     65d33bb8-4d43-307a-93be-33a8d82b1405.roa (raw, json)
Hash identifier:          r/xCTRohrK5sv0d5sT+9vuPYGX0Ry2pFQ2tcNoO5dMI=
Subject key identifier:   AF:7A:BB:D2:F7:F1:F9:0F:AF:41:9C:0E:24:AC:E2:60:23:FD:B3:AC
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F43285849FB452784858C3EE8F2A32D40
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/65d33bb8-4d43-307a-93be-33a8d82b1405.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     26935
IP address blocks:        64.52.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:27:84:85:8c:3e:e8:f2:a3:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=c9fa10af-72cc-4310-a806-054589fe3f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:2f:52:14:c1:f8:92:7b:16:94:8d:4f:5b:
                    74:96:93:88:21:28:3f:92:56:1f:7c:10:74:79:2f:
                    aa:2c:e0:17:79:76:9e:10:a5:f2:f1:2d:5e:09:d3:
                    7c:57:43:5c:5f:d5:e2:b7:7b:30:c4:58:aa:62:d7:
                    78:5f:29:a7:f3:cc:cd:b3:8c:cf:bc:05:f1:b3:4c:
                    34:a5:b1:04:b7:e5:33:47:30:94:0a:f3:c1:96:b7:
                    8c:78:14:58:70:4e:c8:34:ca:4e:b6:2b:56:85:06:
                    c1:65:7c:76:96:31:74:97:83:4e:a1:91:50:c5:c4:
                    59:15:2f:93:a9:f7:c9:fd:9a:5c:7d:e0:bf:15:3e:
                    16:e1:44:a7:c9:92:94:96:77:53:49:9c:95:51:42:
                    31:5e:95:6c:e6:02:6f:06:69:4a:1a:09:2b:29:ef:
                    68:73:cd:fe:99:fc:02:66:65:28:16:56:6b:18:61:
                    8c:1c:94:13:84:7b:09:d4:81:a6:f5:89:4e:d9:bb:
                    a6:6d:14:2d:74:70:12:a7:f9:3f:4d:3d:32:24:d3:
                    7a:19:59:6b:cf:83:03:75:4a:b1:0a:e4:3e:6c:ae:
                    30:c6:67:06:03:af:22:68:84:fd:60:b9:4f:33:99:
                    70:cd:fd:3e:61:9d:ff:d1:1c:41:7b:65:4d:cd:a2:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7A:BB:D2:F7:F1:F9:0F:AF:41:9C:0E:24:AC:E2:60:23:FD:B3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/65d33bb8-4d43-307a-93be-33a8d82b1405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:cc:e1:a6:a3:f7:5d:27:75:b3:23:e5:6b:c0:b5:5d:18:01:
         ee:b1:2e:cf:a4:43:ed:bb:ae:cc:70:67:2f:79:29:e4:9d:5c:
         3b:51:06:88:f2:39:a6:7d:00:9f:77:2d:b9:73:d3:11:87:51:
         fd:44:49:f6:d0:bf:6b:f0:9c:f2:6d:6c:3c:a6:35:0e:78:b2:
         0e:38:32:95:07:ee:a1:a1:cf:38:b9:d8:77:02:79:c4:a8:34:
         7f:7a:c4:63:ce:15:f7:d5:16:18:77:2e:b2:cb:5d:a4:2c:a4:
         2a:ee:dc:3c:f7:a4:50:92:18:8b:72:f4:eb:df:92:ff:31:90:
         a2:fd:95:f1:cd:62:ff:0c:36:37:1e:9f:fc:6d:63:e1:b2:47:
         0d:b8:f3:49:2a:7b:4f:9f:61:17:0c:38:98:81:ca:80:3e:63:
         2b:68:10:91:ce:be:fe:93:8c:51:14:5f:af:a2:56:8c:58:62:
         83:b0:88:33:b4:01:e8:ed:a4:c3:f5:a6:32:6e:9f:9d:4f:a8:
         a5:73:0a:4e:21:65:f0:cf:7d:c7:21:97:4b:6b:4b:d2:6a:9f:
         13:dc:af:3d:34:c7:5b:4c:1d:09:1e:97:4c:f8:03:68:9d:a2:
         6d:1e:50:21:13:92:b9:b6:db:34:db:6a:32:cf:b4:b3:0e:a7:
         97:5f:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:44:13 2025 by rpki-client