Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/ed635746-9787-3a53-83f8-5774e73170ab.roa
File:                     ed635746-9787-3a53-83f8-5774e73170ab.roa (raw, json)
Hash identifier:          m4EkpuEQbDxcHLVCn4blLkiU+gcrOFvu3jwj1gzAr/w=
Subject key identifier:   71:DB:0B:4A:4F:6D:69:86:47:25:56:BF:95:DC:EE:97:A7:27:E0:FE
Certificate issuer:       /CN=12de60db-ef00-4011-ac2b-057362ea0602
Certificate serial:       010D0C9F43285849FFE4379EF25459607C5BD060
Authority key identifier: 34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/ed635746-9787-3a53-83f8-5774e73170ab.roa
Signing time:             Wed 28 May 2025 04:44:47 +0000
ROA not before:           Wed 28 May 2025 04:44:47 +0000
ROA not after:            Tue 26 Aug 2025 04:44:47 +0000
asID:                     36849
IP address blocks:        64.65.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:e4:37:9e:f2:54:59:60:7c:5b:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12de60db-ef00-4011-ac2b-057362ea0602
        Validity
            Not Before: May 28 04:44:47 2025 GMT
            Not After : Aug 26 04:44:47 2025 GMT
        Subject: CN=83f53d76-53ee-474b-b1b6-2f2b0912b70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:ab:28:7c:d0:f9:cc:3c:a7:3a:48:2f:f5:
                    49:48:03:7a:0d:3c:57:79:75:96:b3:bf:ad:bc:2b:
                    6a:c9:6f:f9:93:f0:d7:ab:f4:37:9b:3c:2d:39:c2:
                    a6:f7:d5:bb:07:b9:81:f4:ae:82:cb:ea:e1:76:ab:
                    c0:80:14:38:14:57:52:ff:8a:e9:31:ae:57:f5:a3:
                    d7:c7:d0:54:16:8d:f2:97:11:71:30:72:01:9a:cd:
                    5a:4f:c9:06:36:a3:c6:05:98:83:1d:da:f7:ad:a0:
                    ef:86:e8:bd:ac:ca:25:fc:0d:b8:e1:9e:48:d5:0b:
                    33:a5:2e:23:a2:be:74:d3:b2:00:e6:0d:46:b1:7c:
                    d6:e1:41:f8:c6:3d:cc:f9:69:05:c7:21:14:e3:16:
                    f1:2e:51:7a:0c:38:57:9b:51:1b:56:f0:aa:1f:36:
                    c5:49:ba:95:61:fc:24:84:0e:30:ac:5a:a8:65:bf:
                    65:2b:37:58:d1:51:04:31:26:09:8b:da:e6:fb:78:
                    97:5c:de:5b:55:6d:02:de:27:34:6b:c3:ce:e1:59:
                    1e:c0:e1:ae:9c:62:15:ee:8e:f6:13:b2:66:36:db:
                    7d:8d:50:4d:01:4a:99:05:81:d7:e9:1b:90:8d:05:
                    75:6e:83:fb:98:68:14:46:03:47:4e:43:68:10:de:
                    5e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DB:0B:4A:4F:6D:69:86:47:25:56:BF:95:DC:EE:97:A7:27:E0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/ed635746-9787-3a53-83f8-5774e73170ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl

            X509v3 Authority Key Identifier:
                keyid:34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.65.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:8b:66:ee:6c:2d:3c:bd:b0:1e:09:4d:0b:95:c8:46:b1:
         e7:84:8d:e0:df:d0:02:03:ce:e8:29:82:c1:19:28:15:49:cf:
         c9:9e:5b:52:5a:53:8b:4d:5d:ea:ec:fe:a6:31:f0:1c:ed:1f:
         57:11:24:08:c3:58:77:30:73:f1:31:a7:e4:2f:7b:3a:19:de:
         bc:7e:c5:cd:92:22:25:a7:1d:c8:2d:72:c6:94:50:74:63:10:
         74:4b:93:af:17:bd:49:27:92:ad:42:36:55:c5:6e:cd:ee:86:
         50:4b:a9:c3:3f:b4:e5:b8:61:c7:2f:98:75:78:06:de:1d:08:
         41:61:17:35:c2:a1:32:ba:45:7c:52:e2:76:e5:e5:7a:8a:2d:
         ae:f5:f3:cf:b0:c7:30:25:c3:e4:20:bd:50:16:cc:8f:9a:82:
         27:1b:7d:0e:f6:e3:5a:43:e6:de:99:39:fe:b1:d5:0b:57:5e:
         fa:ee:a0:70:87:b2:08:95:8c:cd:e2:90:43:4d:c1:bf:21:8a:
         24:e5:75:eb:a5:80:56:32:67:8e:29:0f:be:f9:cf:d2:04:25:
         d8:02:38:b6:cc:77:01:f6:45:59:f3:ae:26:b9:5d:43:1b:ed:
         e5:7a:65:b6:9f:2f:13:37:7d:f6:cf:73:46:08:5a:56:18:2a:
         00:e8:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:39:46 2025 by rpki-client