Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa
File:                     e62e48d2-4883-349d-8f20-db0ec148275e.roa (raw, json)
Hash identifier:          gp5M/wSpF7pPv3qL5gxuEpqqiggoafRF3IlSkaZ6iHU=
Subject key identifier:   BE:74:ED:31:7D:10:32:C2:5B:20:7C:47:5D:64:60:3F:1B:48:77:35
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FD9B21C26CA5BC20B7038
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     394993
IP address blocks:        64.62.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:d9:b2:1c:26:ca:5b:c2:0b:70:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=cbd1aba1-4c92-4508-9843-2332a583441c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c0:5d:a6:b5:19:53:14:5c:4f:96:c3:2a:1f:
                    96:e3:be:f7:20:76:49:2e:92:30:9c:42:86:58:aa:
                    70:a6:a7:c3:9a:9a:57:4e:09:28:b2:b1:82:e1:f4:
                    a1:29:65:55:25:a5:63:63:1a:f7:4a:af:b4:c2:61:
                    f0:26:43:1f:6f:8e:cd:df:44:5d:c4:52:92:4a:21:
                    d8:41:6e:e1:92:2a:7f:38:86:d4:84:1e:ee:1b:46:
                    9b:d5:f9:22:ae:a0:c9:b6:f3:96:25:60:d8:ac:03:
                    be:ea:02:b5:ff:95:5e:03:f9:a8:3d:c7:85:5f:ba:
                    f2:a0:e4:06:ba:d3:c3:3b:49:08:b8:99:81:ec:84:
                    93:ef:a0:9e:f8:05:a7:9c:33:a3:18:fb:58:5e:42:
                    f6:67:a7:23:bc:71:d6:0f:14:ec:2a:64:a3:50:77:
                    a6:62:47:24:d9:af:fd:50:e6:eb:65:57:23:88:22:
                    49:2f:0a:0e:92:ac:2f:a4:8b:c4:2b:28:09:a7:04:
                    ea:8f:00:18:fa:b7:9a:e7:b7:ac:ce:93:0c:4c:a7:
                    3b:0d:85:0b:45:d0:6f:04:10:92:17:99:55:29:07:
                    a8:68:62:28:8d:7c:36:e7:c9:78:37:a7:11:d8:a1:
                    a7:f0:d1:25:60:ed:14:79:b8:68:a0:af:76:e2:c2:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:74:ED:31:7D:10:32:C2:5B:20:7C:47:5D:64:60:3F:1B:48:77:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f2:ae:33:dc:12:72:64:68:7a:06:4b:fc:59:a5:9b:b7:98:
         19:ff:30:86:9c:d3:e4:c7:78:dd:04:4b:54:46:23:69:e2:de:
         31:a8:72:d9:b4:c7:7b:09:a6:1c:a6:d8:0e:19:49:d6:40:01:
         b1:bf:7c:d6:19:9a:8c:02:5f:dd:43:e5:b5:6c:c2:46:7c:bd:
         6c:e6:fe:40:7f:b8:9b:b5:8f:5f:ce:39:ae:24:d2:6b:ea:39:
         fb:93:95:d4:ec:9b:f5:27:e2:38:e7:96:04:d3:7e:26:97:e6:
         4e:2d:d0:17:71:07:64:9a:89:65:73:f0:b5:b1:c6:cc:a7:e5:
         60:0d:f1:42:3b:93:5b:5a:9a:12:a2:6b:d8:12:90:56:9d:f7:
         28:c1:4a:3e:4a:b7:64:ee:bc:f8:2a:dc:2b:7c:6f:3d:2f:f5:
         c3:6d:88:8d:35:77:40:a6:13:62:16:d9:2a:ae:4c:b8:55:d2:
         67:cf:02:05:90:8e:5e:fc:12:21:42:f3:9e:e3:1a:ac:fd:ed:
         03:c5:40:bb:a4:1a:ae:68:57:85:a8:b5:2d:ef:ba:47:68:8d:
         49:c9:d3:64:18:82:fe:53:0d:9c:15:79:61:cd:d0:fc:f7:35:
         cb:45:b3:52:61:e0:32:09:4d:45:c8:69:56:ca:dc:8c:bf:53:
         0b:c1:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:47:20 2025 by rpki-client