Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/084939ea-136f-309f-b103-cce3eab5673f.roa
File:                     084939ea-136f-309f-b103-cce3eab5673f.roa (raw, json)
Hash identifier:          rZ5CntaHgpvNRG1SNTulUm0BBqNj00gduCmZaXEfQD0=
Subject key identifier:   90:4D:00:0B:34:FB:3F:1C:5B:BD:8B:F8:67:DA:4E:CE:9D:0D:C0:11
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ADC00FC930F32F168013C8480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/084939ea-136f-309f-b103-cce3eab5673f.roa
Signing time:             Fri 15 Aug 2025 01:00:32 +0000
ROA not before:           Fri 15 Aug 2025 01:00:32 +0000
ROA not after:            Thu 13 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        64.237.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dc:00:fc:93:0f:32:f1:68:01:3c:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 01:00:32 2025 GMT
            Not After : Nov 13 02:00:32 2025 GMT
        Subject: CN=b5424b65-5041-4b08-842b-0b3c6abe38c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:1e:ba:98:5a:5c:82:40:a9:e9:49:2f:8c:
                    0b:a9:a4:05:4e:cc:5c:78:9d:a4:10:7c:28:1d:ed:
                    79:bb:75:47:dc:bf:92:1a:01:80:7c:a6:df:19:13:
                    f4:b0:6b:70:8b:c0:c0:22:3b:e8:42:cd:c0:2e:52:
                    82:b9:1b:8d:d9:02:81:a6:09:9c:2e:55:ff:0f:92:
                    3e:a2:2b:5d:4c:76:c1:8c:bb:89:80:2f:3a:ac:cb:
                    71:1d:b7:8e:24:95:b5:e8:11:16:39:0f:1d:73:13:
                    05:fd:2b:29:d5:02:db:35:6c:04:64:e4:75:98:41:
                    75:83:6a:74:51:fd:34:9d:c2:63:2b:c4:66:83:b4:
                    ad:33:e9:0b:89:65:89:0b:8e:84:36:59:88:12:db:
                    b6:b0:0b:78:3e:b9:e9:b1:63:ad:0e:fe:17:6f:8e:
                    91:df:97:a4:85:5a:d2:a3:ad:d0:a1:3f:ce:a8:51:
                    63:99:58:e2:ca:18:09:2c:08:84:32:e9:cc:1e:96:
                    b3:f1:30:ec:e2:19:8f:f1:85:c3:db:79:04:95:26:
                    a3:db:d5:83:5d:30:77:1e:5e:04:73:d4:39:64:54:
                    0a:33:3b:16:f9:5f:1a:27:61:01:69:95:ec:9c:b7:
                    7d:c1:a9:8b:d4:a6:11:d3:9b:1d:03:60:90:5b:ec:
                    e0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4D:00:0B:34:FB:3F:1C:5B:BD:8B:F8:67:DA:4E:CE:9D:0D:C0:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/084939ea-136f-309f-b103-cce3eab5673f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e0:d0:c6:fd:42:f7:62:30:e8:dc:50:b2:10:0b:ec:96:83:
         d7:5c:6c:93:8c:d0:cb:e8:56:b5:56:b7:65:1a:76:7a:fe:f8:
         cb:34:b3:c9:b1:92:ae:52:c5:b8:a2:39:a6:95:eb:a2:15:d4:
         7a:20:f8:ee:29:d7:9c:6b:3a:3b:5e:d9:3c:cf:27:50:86:90:
         96:4f:19:15:e7:be:26:65:a1:13:57:d2:d9:79:50:db:c7:af:
         cf:38:23:ae:86:71:dc:40:10:6c:ea:31:c3:7c:0f:43:17:c4:
         2c:94:4c:33:fe:7f:c4:22:97:41:89:52:12:7d:e5:94:5c:21:
         c9:43:0d:02:1f:69:ad:d8:8e:65:d2:c0:82:52:c6:d7:b6:31:
         be:4c:e6:5d:41:ac:90:6d:50:77:c3:32:a0:2e:c6:88:fc:71:
         a1:b9:2f:fd:43:25:a8:79:dd:2d:f7:f1:66:8e:cf:be:dc:5a:
         d9:53:33:86:74:6e:b0:22:cf:7e:0e:e5:7c:9c:d9:00:ab:79:
         7c:85:7a:75:05:e8:9b:89:62:b8:06:6f:fd:9a:14:9c:ba:59:
         42:0c:cd:6a:bd:fa:bf:93:85:b6:5c:0e:48:fc:ff:47:da:50:
         98:f4:29:b3:e4:42:63:16:27:77:c2:a8:6d:cc:e7:38:4a:c0:
         84:78:a8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:52 2025 by rpki-client