Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa
File:                     2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa (raw, json)
Hash identifier:          gzODMDZ+0ElNAxBXg2TxL0LfIsNjJVFmjKbnfTESIPA=
Subject key identifier:   5B:2F:EF:3C:7D:67:CE:57:69:5B:34:00:68:52:C0:87:6D:2A:A7:1F
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584B89176E2B21AADB18DB6DE080
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     13807
IP address blocks:        64.64.144.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:6e:2b:21:aa:db:18:db:6d:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=560c7b4e-bcd6-4ef4-b7dc-9d3a2e25d83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:e9:b6:e6:29:3c:72:50:ae:f0:a8:ba:44:
                    21:53:f6:6c:47:be:36:77:05:0f:40:73:22:33:6f:
                    dd:56:d6:4f:e7:fa:fc:5e:75:b6:98:d5:66:26:40:
                    d4:9c:0e:41:cb:8f:32:a4:c2:2c:f3:85:fd:77:a7:
                    50:c3:76:2e:2e:17:2b:bc:ac:af:ff:f3:03:4c:b7:
                    3f:47:26:c9:65:bf:30:f6:9a:73:5c:2a:9b:de:46:
                    e7:18:5a:fd:1d:c9:c4:0b:be:79:c7:6e:b7:41:76:
                    49:4b:d3:f8:ea:90:24:25:ee:11:27:66:0a:f6:79:
                    8d:67:14:f4:04:cd:08:8f:61:9a:80:9b:6e:bc:f2:
                    8c:6c:f0:f6:00:0f:bc:06:9a:3c:d8:3f:3f:7b:3c:
                    e3:e8:fa:c1:45:e5:b0:82:e8:20:4b:a3:cd:c6:21:
                    5a:bf:f6:c6:f4:af:6d:81:03:1b:0b:ce:da:68:c4:
                    34:ff:76:af:5a:86:c2:5c:8c:cd:94:df:79:99:98:
                    e6:b7:db:7f:64:78:98:30:b2:70:af:26:9a:09:13:
                    5a:27:c2:f4:e3:ff:3c:75:28:63:00:c5:b8:e7:2d:
                    00:1c:17:96:1b:38:81:c0:6c:b4:b7:85:9d:b2:a8:
                    0d:a5:9d:ed:e1:d4:a4:3a:5a:cd:0e:a9:74:00:d4:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2F:EF:3C:7D:67:CE:57:69:5B:34:00:68:52:C0:87:6D:2A:A7:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9d:bc:d8:67:b5:62:65:a2:60:bc:83:83:bd:ce:9c:ea:ce:
         06:92:db:12:c9:45:67:2d:26:1a:f1:c4:e5:61:b9:5e:8f:f5:
         3b:13:13:92:65:18:5d:68:ff:36:09:e1:db:a7:d7:0e:40:80:
         7d:3e:f9:a8:61:ba:3f:ba:1f:ce:3d:ae:b9:79:3b:47:e0:21:
         88:eb:c4:4f:be:5c:7e:f7:61:e9:7e:84:85:df:b8:39:45:cc:
         a0:b0:55:74:ae:0f:54:94:46:86:1b:ea:b5:cc:7b:e3:3f:11:
         c6:68:b3:c0:f4:cf:1e:14:8b:3b:74:d3:fd:ac:21:5f:a6:34:
         c6:2e:0e:28:7b:30:9b:cd:f2:86:53:e1:29:81:0e:f3:1a:c2:
         86:97:13:ab:70:6a:d5:ed:62:80:93:43:cd:f8:28:a3:8d:49:
         68:49:7b:6e:77:a9:d3:6d:ca:ce:07:94:eb:4b:43:6f:01:5f:
         63:a7:99:98:f6:f4:a0:a4:da:bf:0d:6e:31:70:0c:50:fe:92:
         a8:43:7d:6f:4e:06:ff:98:41:ae:e4:31:0e:d2:b3:38:6c:38:
         a0:f5:41:9b:43:5f:b6:50:f9:bf:bb:73:51:45:fa:7a:a2:44:
         61:1c:f5:f3:6e:fa:00:cc:2e:ca:4d:64:2a:f1:34:e9:bb:5e:
         e8:83:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 13:48:58 2025 by rpki-client