Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa
File:                     b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa (raw, json)
Hash identifier:          W+x5P9Ut16Lg4DFxYp7dmVbJldwNN/fZj2OZgXboyoo=
Subject key identifier:   77:62:A1:59:2D:26:51:C4:41:DD:89:58:EB:5B:86:91:28:A7:D0:B6
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584A374AC27F5EFDC4C7CA941480
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     22351
IP address blocks:        64.88.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c2:7f:5e:fd:c4:c7:ca:94:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=899385ad-9b0c-44f1-950e-8862da9fe3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:2e:63:c2:01:be:79:1f:1b:7d:12:e6:99:
                    06:19:e9:bb:d6:8a:e2:cd:1e:eb:70:02:43:2a:a9:
                    23:5e:5d:0d:69:e1:cd:b0:51:6e:93:aa:60:ab:55:
                    9e:d9:5d:96:b2:a9:cd:44:70:01:6c:c4:12:44:8b:
                    61:da:75:50:9f:a1:e5:18:c2:71:99:4f:3a:a7:c2:
                    8d:c6:5f:01:a9:b7:1b:0f:f7:d7:c4:16:52:a1:77:
                    ae:4b:cc:fd:df:e2:0f:a8:af:81:56:6b:fd:b2:63:
                    a7:12:e8:c4:c9:23:3c:cf:94:60:84:80:d7:a6:c1:
                    ab:9c:83:ae:22:6d:db:af:7c:28:e1:8e:0c:35:8d:
                    67:d0:96:58:c4:ad:c0:e0:3e:6b:ac:e8:2d:a0:ae:
                    70:9f:33:81:a9:31:22:9a:d3:35:d9:1e:62:60:a0:
                    4b:a1:d0:e5:dc:7e:e5:d9:37:06:ca:e9:5a:8e:32:
                    33:ed:07:76:fe:80:cf:18:71:24:34:fd:8b:fc:cb:
                    83:46:ae:2a:61:ee:62:2a:79:30:6c:93:ad:7f:7d:
                    47:fd:9d:d0:e5:8a:da:8b:28:da:de:00:3f:da:a1:
                    bc:93:d0:3c:81:dc:6d:65:77:6b:7f:37:f5:f2:0b:
                    8d:ed:00:2d:b5:5d:91:56:0f:8a:02:ad:fc:b6:e7:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:62:A1:59:2D:26:51:C4:41:DD:89:58:EB:5B:86:91:28:A7:D0:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c8:c2:28:fa:4c:86:4b:7d:3f:90:a1:fb:0f:9d:1d:44:40:
         38:7a:26:d9:5d:cb:df:28:9a:4f:e1:9d:d4:31:e2:3b:55:03:
         78:ac:07:d5:7f:48:35:bc:9e:5a:b9:5b:db:b0:e5:0f:d2:a8:
         18:b1:af:aa:3e:32:e1:9f:02:0e:f4:e0:9a:ed:11:0c:8f:ab:
         20:e1:6a:60:1b:a7:14:7e:26:33:d5:fc:01:c0:2d:a9:dc:1e:
         89:ea:14:99:d3:a9:97:0e:1a:3f:56:c7:b8:3e:e9:25:27:75:
         04:82:d9:8a:88:76:36:49:01:74:4a:ad:78:a8:53:23:f0:dc:
         24:39:df:3f:eb:4d:ba:ce:0a:22:01:30:34:8f:32:ba:c8:1d:
         cd:20:54:18:af:e4:1c:34:5d:d7:ac:fe:72:c5:fd:9c:69:f7:
         56:fa:14:cc:97:68:e7:b1:4c:5c:82:e5:07:07:be:e4:24:a7:
         f0:33:af:6a:67:35:28:f3:75:bd:23:0a:46:5e:c6:44:a6:27:
         e3:f2:c9:72:de:2a:2f:fd:25:d1:b1:cb:ea:27:d5:26:96:33:
         7c:d1:e0:23:52:34:62:c9:7c:a2:bc:3b:a7:25:04:5a:80:ec:
         e2:03:e0:9c:80:27:db:d6:a8:38:e9:9e:a2:b1:f7:5b:0a:f4:
         22:be:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:45:50 2025 by rpki-client