Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96b6b467-a8e1-3fd0-ad16-1f287c8257fd.roa
File:                     96b6b467-a8e1-3fd0-ad16-1f287c8257fd.roa (raw, json)
Hash identifier:          MsiOXgKGpvsS7jyKvMp1mleLP78YRKmhYRKthUUVqYg=
Subject key identifier:   82:89:9E:17:35:ED:C5:27:EE:8E:49:00:EB:B7:F8:A9:D5:54:08:8E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B0B76C9BDFF97970D6C1AD3C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96b6b467-a8e1-3fd0-ad16-1f287c8257fd.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     397242
IP address blocks:        64.6.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:c9:bd:ff:97:97:0d:6c:1a:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=e4a29c96-6e8b-4fe8-be0d-eb6d9ee1cf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:f1:0d:48:f5:27:20:69:7a:ab:70:c7:32:
                    a8:b8:d3:e5:14:f1:6f:6f:17:76:a6:35:23:3a:13:
                    ef:f3:e7:81:ab:bd:94:8a:7f:2d:a7:7b:e5:a0:34:
                    d6:cf:e8:12:95:4d:85:ab:15:ab:11:9e:0a:9b:9d:
                    c5:a7:02:d9:c8:0c:b2:75:13:b0:68:9f:07:ec:f1:
                    1d:1d:f4:e1:12:86:16:d5:07:a4:17:b8:72:90:1b:
                    ea:cd:79:3c:7e:89:c1:a4:36:61:96:4f:53:04:0e:
                    15:cf:cf:19:22:63:62:63:24:c1:d5:06:b1:93:81:
                    0c:a9:36:e8:f1:24:6d:df:dc:13:75:49:d4:18:0f:
                    e0:fd:9e:13:c1:c7:31:8e:6e:42:f9:d5:a7:e3:2f:
                    09:a5:03:a5:89:b5:f6:ac:cb:49:2f:b6:3c:c5:45:
                    c0:75:2a:b4:39:47:ee:9b:a0:8b:67:fe:fe:e9:e9:
                    77:5c:0f:18:28:a8:e5:10:5c:82:5a:18:78:4c:e8:
                    ce:98:52:5b:bc:6b:69:bd:f1:27:41:da:14:77:6b:
                    8d:77:fb:c7:70:ae:d1:40:c7:90:7b:86:85:d6:3e:
                    44:80:47:f5:b1:e2:cb:98:5c:6d:9b:40:ac:9b:e7:
                    f4:53:9e:3f:93:39:63:e6:6d:a9:f1:b5:f7:2e:4e:
                    ab:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:89:9E:17:35:ED:C5:27:EE:8E:49:00:EB:B7:F8:A9:D5:54:08:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96b6b467-a8e1-3fd0-ad16-1f287c8257fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:74:9b:03:51:42:da:a3:b8:49:cf:82:d4:01:46:c8:cc:
         3d:c3:a2:c7:6b:3f:1b:6a:00:d6:86:83:af:c6:6a:0e:b7:64:
         a8:f9:5c:1f:2c:af:9c:c3:51:d4:ea:aa:32:77:24:9d:bf:92:
         3a:6f:83:51:78:50:18:f0:5b:51:5b:6d:d0:49:ab:f0:11:4a:
         5d:9d:67:d6:24:22:ab:fc:e5:bf:b3:a5:85:09:39:57:6e:57:
         a9:19:6a:73:a0:ea:09:63:98:59:75:7d:54:08:a6:48:f6:2e:
         5d:cc:f8:44:8b:d3:3a:ed:a6:c2:70:dc:c5:a7:b4:b2:78:c0:
         38:ee:d9:41:97:b9:e5:1c:a5:f6:89:01:b3:4f:6a:2f:84:4d:
         b9:00:28:15:5f:5c:9b:ad:e8:88:d7:2a:28:24:fc:78:cc:4d:
         c5:94:ca:85:a4:fc:c4:40:9e:0b:10:5f:10:f9:78:29:d3:4e:
         60:20:f2:d7:85:06:66:d0:19:7b:62:45:20:fd:98:73:3e:8c:
         40:a2:f4:31:58:c6:1f:ca:86:62:49:f2:aa:fb:2d:03:75:30:
         b0:73:84:7b:31:4d:8d:f0:4f:a9:5b:d6:b9:eb:70:f9:22:77:
         6d:5e:34:e5:be:66:55:4c:8b:a2:97:06:65:3f:00:89:4e:55:
         31:4e:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:23:43 2025 by rpki-client