Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/0722d94d-e9f6-3f75-a0b8-7a21e4031baf.roa
File:                     0722d94d-e9f6-3f75-a0b8-7a21e4031baf.roa (raw, json)
Hash identifier:          6d7kpbA+K0xH6UN9tqzLnJTwg5Ryvp5JB7TPS/iCu2s=
Subject key identifier:   84:9C:E6:31:1E:56:13:72:D1:C1:65:29:D3:DC:97:F2:3A:BF:F0:B5
Certificate issuer:       /CN=d5db0a6c-feea-4d41-89dc-89538e2083f2
Certificate serial:       010D0C9F4328584A43DB047949475D0DB33267E0
Authority key identifier: 43:1E:8E:50:0B:7A:A4:5B:78:B1:B0:59:B5:A8:D1:7D:F8:E7:49:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/0722d94d-e9f6-3f75-a0b8-7a21e4031baf.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        64.39.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/d5db0a6c-feea-4d41-89dc-89538e2083f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/d5db0a6c-feea-4d41-89dc-89538e2083f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:04:79:49:47:5d:0d:b3:32:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5db0a6c-feea-4d41-89dc-89538e2083f2
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=db311738-534a-4fa4-b141-90845fd8eef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:97:3e:ae:80:f4:b7:01:e8:51:3b:38:c4:
                    d3:a4:f2:be:38:a7:ee:1d:a8:14:25:e9:30:46:ff:
                    82:7e:02:65:96:f3:e7:a5:a7:a7:13:ba:f1:8c:18:
                    5a:49:49:75:92:6e:48:5e:ae:7d:25:e1:75:3b:b6:
                    a8:e8:4e:56:f6:2b:10:5a:ef:60:af:de:af:44:fb:
                    ca:6c:fa:b7:a0:e2:cb:34:c7:14:79:eb:92:2f:bc:
                    96:de:12:e8:a7:fe:48:48:31:ec:16:86:30:55:0b:
                    2f:af:a7:5a:1d:65:fd:7a:87:26:72:cd:e4:e3:52:
                    83:6c:75:b1:02:71:c5:af:d3:5a:dd:30:ce:22:aa:
                    de:05:c8:e6:4a:6e:4f:e3:09:c7:7a:1c:44:9c:4d:
                    8a:2a:e9:0d:d0:1c:c0:51:36:2e:8d:91:0e:5f:27:
                    88:ec:c6:5a:0f:de:52:53:f9:94:61:fb:47:fd:bc:
                    31:29:ca:37:da:34:e8:10:6f:2a:50:49:a7:7b:c7:
                    99:4a:ca:e1:9c:75:11:13:51:26:1e:f0:d1:b5:fa:
                    e0:b3:d5:b8:9b:50:b9:25:d8:b8:ff:77:c4:b5:cd:
                    5d:bf:38:27:6d:a3:93:d4:8e:fd:89:90:21:d9:f6:
                    c2:ea:13:a7:1a:7e:c2:0c:b4:10:38:d4:bc:d1:dd:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9C:E6:31:1E:56:13:72:D1:C1:65:29:D3:DC:97:F2:3A:BF:F0:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/0722d94d-e9f6-3f75-a0b8-7a21e4031baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/d5db0a6c-feea-4d41-89dc-89538e2083f2.crl

            X509v3 Authority Key Identifier:
                keyid:43:1E:8E:50:0B:7A:A4:5B:78:B1:B0:59:B5:A8:D1:7D:F8:E7:49:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:f4:bc:f6:2a:bf:af:5a:67:a8:0f:ac:e8:85:ae:5b:ae:
         31:35:95:ac:c7:67:05:45:e2:90:5b:c8:88:6c:9b:83:63:eb:
         02:40:2e:d7:8b:15:73:15:ea:50:15:33:87:c1:61:54:68:a9:
         8a:67:32:67:90:30:2b:80:1c:0f:54:de:ef:3d:79:49:f8:0a:
         c6:94:e8:72:8a:18:07:32:85:99:90:7b:ac:3f:17:53:2c:bf:
         fa:12:70:ea:83:45:9b:e0:68:d3:bb:d5:4e:76:18:c9:fa:04:
         90:27:86:43:a9:39:34:ea:3e:5c:3d:f9:b9:1f:35:aa:4e:fa:
         8a:2c:ee:77:9a:1e:81:02:08:e0:e9:5a:1d:f7:be:0c:ae:c3:
         e5:a2:1e:6d:71:31:3b:c5:04:d2:4a:dc:3b:58:ea:f8:9e:f2:
         2c:3f:d9:2f:32:e3:28:4e:3f:e0:e3:dc:a7:ce:92:eb:5c:66:
         b5:d6:47:8c:40:5e:60:eb:16:45:4f:41:7e:d6:46:91:0f:ca:
         b0:81:c8:32:92:50:82:44:10:f6:ae:b6:6f:c5:21:bb:e3:99:
         a3:00:f4:9b:28:f9:39:be:b9:63:07:20:59:ad:90:f0:8d:3b:
         a3:d1:ce:69:bb:f6:e5:64:54:52:6c:1c:3f:a1:13:46:5e:6a:
         44:62:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:20 2025 by rpki-client