Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/25641917-7067-3b19-8b48-e46d3b875d9c.roa
File:                     25641917-7067-3b19-8b48-e46d3b875d9c.roa (raw, json)
Hash identifier:          IfLUI2uiSzTxSmIQ9DKdGiiAqwHibYHYyIs8fzw6rGw=
Subject key identifier:   9B:65:62:AB:8B:DE:67:DF:C0:03:C1:58:68:F3:27:F5:7C:21:B3:15
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584AFC1BEFDB1BCF9529F432FA00
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/25641917-7067-3b19-8b48-e46d3b875d9c.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     399844
IP address blocks:        204.83.1.0/24 maxlen: 24
                          204.83.3.0/24 maxlen: 24
                          204.83.6.0/24 maxlen: 24
                          204.83.37.0/24 maxlen: 24
                          204.83.81.0/24 maxlen: 24
                          204.83.100.0/24 maxlen: 24
                          204.83.150.0/24 maxlen: 24
                          204.83.152.0/24 maxlen: 24
                          204.83.176.0/24 maxlen: 24
                          204.83.189.0/24 maxlen: 24
                          204.83.211.0/24 maxlen: 24
                          204.83.240.0/24 maxlen: 24
                          204.83.241.0/24 maxlen: 24
                          207.195.13.0/24 maxlen: 24
                          207.195.14.0/24 maxlen: 24
                          207.195.44.0/24 maxlen: 24
                          207.195.51.0/24 maxlen: 24
                          207.195.79.0/24 maxlen: 24
                          207.195.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:ef:db:1b:cf:95:29:f4:32:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=a82356c9-6d97-438d-8fc3-62a9f5cb3aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:10:19:14:53:e8:25:2f:94:84:d6:78:e9:
                    50:dc:1a:fc:0b:1c:61:6e:0f:23:50:6a:6e:cb:e0:
                    f6:c1:6a:f8:db:63:3a:e5:f3:91:a8:78:77:10:ba:
                    5b:bf:2b:67:17:b1:d5:f7:d9:28:95:d8:e4:27:72:
                    b4:0c:f7:f4:75:76:3b:8b:69:24:4b:71:99:0e:35:
                    3c:cb:dd:b3:93:11:c5:75:cd:04:fb:1b:c8:7e:51:
                    d0:23:0b:7c:52:6f:8f:8f:65:86:8f:fc:2f:a2:df:
                    d8:91:73:ac:02:e1:fb:96:85:ad:dd:c4:78:06:4e:
                    57:a1:82:52:35:33:76:35:8a:54:47:d1:e9:d2:06:
                    02:76:a5:64:3a:07:5d:5a:c5:b1:8c:42:df:a1:76:
                    50:26:8f:47:e7:67:3d:4f:ea:eb:c1:23:85:14:f1:
                    ba:92:ec:8f:35:f0:75:dd:d1:ed:6f:a1:48:10:89:
                    d8:a8:e3:1b:18:be:0c:9f:d5:fb:87:8c:5c:e8:48:
                    c8:4b:49:7e:31:3d:d0:bc:6b:1b:ca:d4:8b:20:e7:
                    bf:65:7c:43:b6:c1:e5:c1:b3:fd:11:65:aa:51:ac:
                    ca:e9:60:29:b0:57:ae:08:16:dc:94:b3:26:79:3d:
                    27:14:53:32:f6:91:fc:e7:41:8d:fc:c7:da:df:73:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:65:62:AB:8B:DE:67:DF:C0:03:C1:58:68:F3:27:F5:7C:21:B3:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/25641917-7067-3b19-8b48-e46d3b875d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.1.0/24
                  204.83.3.0/24
                  204.83.6.0/24
                  204.83.37.0/24
                  204.83.81.0/24
                  204.83.100.0/24
                  204.83.150.0/24
                  204.83.152.0/24
                  204.83.176.0/24
                  204.83.189.0/24
                  204.83.211.0/24
                  204.83.240.0/23
                  207.195.13.0-207.195.14.255
                  207.195.44.0/24
                  207.195.51.0/24
                  207.195.79.0-207.195.80.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:81:bb:53:54:32:12:d5:5e:16:fa:43:75:a2:91:eb:33:4b:
         25:3e:d9:28:40:b6:73:58:33:0d:39:53:da:75:76:60:f0:e4:
         8e:ea:d1:53:bf:da:92:0e:c7:29:a8:02:fc:70:97:e1:f2:b5:
         74:65:ee:e4:eb:89:bd:64:c5:1b:12:28:86:18:b0:df:dd:99:
         b6:dc:b7:d0:d0:a3:7f:e3:4e:56:0b:1c:54:4d:bf:79:66:ba:
         a5:89:6b:4d:ff:7a:86:80:95:95:ab:39:b5:6f:17:b1:af:18:
         74:7c:cd:84:32:b6:81:f6:c4:ff:4b:5d:d4:94:59:40:49:a1:
         1c:dc:bf:d6:26:3c:83:62:78:7d:f6:6e:87:ff:d3:83:15:00:
         dc:8a:10:57:1e:19:75:dc:bb:38:a8:fb:08:bb:aa:a6:0f:20:
         49:16:b6:c2:3c:5d:f3:1d:e3:5d:11:5a:ca:4c:07:bf:f5:c7:
         f0:d4:1d:73:55:6d:99:73:be:c7:3a:fa:a6:e4:77:cd:f0:56:
         17:96:22:36:1a:82:e5:9f:b9:fe:cb:c7:c2:f9:6e:05:d1:5b:
         9a:77:78:e3:8f:ef:02:b4:97:d7:59:95:2a:fd:05:2e:27:45:
         ff:64:56:24:18:af:14:91:55:c7:e9:ff:54:c0:a2:f5:d4:0a:
         49:1a:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:05:50 2025 by rpki-client