Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7c1e42a-3c5f-3dd7-b279-710ab6b693d5.roa
File:                     d7c1e42a-3c5f-3dd7-b279-710ab6b693d5.roa (raw, json)
Hash identifier:          Ujivqfyeu2YLMOuQZCepLAiQX4+t0UX+0aJfBDpAfo8=
Subject key identifier:   6B:B8:7C:61:02:CF:0F:50:F4:B0:A6:3C:D6:0F:D7:D0:D7:71:51:8E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7E685307B400AA7102E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7c1e42a-3c5f-3dd7-b279-710ab6b693d5.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     47066
IP address blocks:        64.62.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:e6:85:30:7b:40:0a:a7:10:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=36e9c60b-1174-4c6a-b0ab-70d45f76b849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:a7:88:ea:aa:1f:67:2c:1e:f1:79:53:cc:
                    11:7b:0c:9e:56:a0:33:f5:34:55:16:ad:9f:a2:4d:
                    82:51:1f:61:dc:5e:d6:70:b7:1e:91:e6:3f:32:e9:
                    ea:c0:6c:32:ff:60:ab:40:eb:d6:1c:b7:ac:cd:b5:
                    a2:7e:4c:5a:23:28:5d:ac:58:cf:27:08:69:97:eb:
                    c3:d3:79:55:92:28:4c:43:40:36:c7:06:22:7b:bc:
                    ae:1f:c4:56:f6:39:25:99:e5:65:74:06:c7:37:68:
                    1c:bf:4d:06:24:62:ad:a8:46:99:33:df:76:0c:6a:
                    ee:96:80:be:58:2a:13:c0:bb:82:7d:6b:89:d7:fe:
                    2e:09:d2:df:30:e2:e9:b8:0b:01:c2:4f:67:f5:75:
                    3b:8b:b1:6d:c0:60:a9:c1:78:cf:9b:74:fd:2b:0c:
                    f3:bb:2f:9f:83:34:f4:8f:62:b8:72:77:85:ac:5a:
                    34:36:e0:88:ab:2d:bc:f7:4a:24:94:7b:68:d6:19:
                    a7:6d:e4:e6:c1:9e:53:18:06:f6:7a:60:9b:3d:5a:
                    c6:27:23:a3:9e:31:ff:22:1f:60:5e:5f:38:c8:8d:
                    7a:19:08:80:d6:5b:1e:44:e9:69:6c:38:bc:50:ec:
                    1b:5e:3a:cc:67:0a:67:bd:e4:2b:b6:6b:88:8b:46:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B8:7C:61:02:CF:0F:50:F4:B0:A6:3C:D6:0F:D7:D0:D7:71:51:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7c1e42a-3c5f-3dd7-b279-710ab6b693d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ac:05:ae:6d:56:c7:d6:58:44:39:58:22:a8:6b:87:04:da:
         e8:ac:e1:b8:97:f1:04:05:31:d1:da:58:d8:1f:77:76:a6:e8:
         e0:2a:15:f1:e3:15:ab:51:24:d1:86:e7:de:ff:f5:fd:d9:da:
         3b:06:04:59:2c:d1:b9:fb:bb:b9:21:1e:de:2d:7d:13:4b:80:
         b5:77:83:15:01:05:03:32:55:81:89:e3:77:bf:92:19:ad:83:
         bd:6e:9d:78:e2:43:ce:a7:24:42:d4:1f:36:44:01:07:82:37:
         a4:87:58:e7:fc:28:90:40:c9:0e:ad:fa:1b:7b:b7:75:8d:43:
         91:56:85:8a:ae:0c:9f:19:d6:c5:ae:78:4a:9a:b9:81:a7:af:
         72:fc:62:1f:39:f9:74:22:b3:ca:c5:1f:74:97:ae:d4:e1:6c:
         41:65:27:45:e2:54:53:64:68:45:24:29:65:e8:ed:0c:ee:0b:
         a6:08:33:15:e3:87:eb:0d:a1:21:8c:ec:95:bc:0e:58:04:5a:
         16:b9:b1:34:5c:aa:3c:70:06:98:3a:6b:43:be:7b:3f:31:55:
         2d:57:c5:7d:4b:7d:c7:85:2b:d9:a4:c4:47:80:52:7f:39:a2:
         74:f1:72:a4:76:12:45:a8:54:dd:0f:af:27:aa:0d:9c:27:9b:
         b3:2c:6e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 18:11:16 2025 by rpki-client