Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa
File:                     2bd126b7-2be7-355a-ad57-44a85047e0cf.roa (raw, json)
Hash identifier:          2nkwzdJJT4gxfd90Xx7tXGuKiIWLbqbBtbzgVdm4ISY=
Subject key identifier:   6B:3E:2C:09:3A:29:13:00:2D:C1:9D:30:5C:B3:1D:3C:73:F4:00:7B
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F4328584B047C124F3C511A2A3B03B680
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     27553
IP address blocks:        64.27.192.0/19 maxlen: 24
                          64.255.64.0/20 maxlen: 24
                          66.79.192.0/19 maxlen: 24
                          69.54.192.0/19 maxlen: 24
                          209.142.192.0/18 maxlen: 24
                          216.144.200.0/21 maxlen: 24
                          216.144.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:12:4f:3c:51:1a:2a:3b:03:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=d9326409-512f-49f0-b979-39717db69be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:04:12:59:52:ea:da:1b:34:2e:a5:84:2a:f7:
                    ad:2d:5e:1a:46:02:a4:0b:8c:22:33:7f:1d:9e:71:
                    50:f6:14:61:01:b3:a0:76:1e:f6:a9:ba:12:71:a9:
                    ab:f6:1b:b4:6f:58:40:74:dd:a2:04:9d:4f:fa:6e:
                    b6:e1:94:96:d8:19:46:35:27:f2:1e:6a:2c:c1:9f:
                    23:00:46:b1:d9:5d:4d:9b:f2:77:97:c2:87:2e:ac:
                    a0:5e:04:95:8e:bb:47:e0:85:54:8c:ae:c2:23:36:
                    54:6f:b2:c4:60:50:0c:0a:38:13:c5:0e:b8:11:f2:
                    43:50:d2:9c:e8:38:fb:d8:a5:60:4a:b4:78:f5:32:
                    77:08:c0:84:3c:89:bb:5f:fd:6f:60:08:fe:c2:58:
                    d0:26:fc:ce:7c:8b:91:45:1a:01:8f:9e:e6:f7:be:
                    2d:4a:39:8b:d3:5c:cb:a7:ec:a2:68:15:75:04:36:
                    27:b1:c1:1d:f9:75:19:91:6a:56:72:08:88:55:e4:
                    57:01:f8:58:cc:d5:3d:00:ab:d2:fd:93:00:e8:45:
                    b2:b7:29:8c:64:93:24:ff:14:f6:05:bf:e3:48:af:
                    dd:c8:29:16:5a:46:e7:b8:38:8e:84:39:85:c4:22:
                    15:e1:17:91:c4:52:a0:26:e1:65:0f:97:f2:32:69:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3E:2C:09:3A:29:13:00:2D:C1:9D:30:5C:B3:1D:3C:73:F4:00:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.27.192.0/19
                  64.255.64.0/20
                  66.79.192.0/19
                  69.54.192.0/19
                  209.142.192.0/18
                  216.144.200.0-216.144.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a8:63:09:06:58:ba:7d:bb:ce:a6:b8:f7:e6:47:b3:d3:e5:
         73:c4:e7:d0:01:07:49:e8:d6:53:58:00:d1:19:ca:41:3a:92:
         f0:99:5b:10:0b:3c:ef:d6:c6:c2:0d:74:f7:20:39:46:c6:9c:
         3b:0a:c6:c1:cf:31:41:8a:d1:e3:c7:c6:34:27:19:3f:4d:5f:
         86:6f:97:f4:7f:00:54:4b:9c:d0:38:b4:52:32:f8:9a:07:f0:
         3e:c4:21:d0:86:7d:1c:d8:90:66:22:9c:f0:3c:b2:ce:55:d9:
         52:66:84:68:64:10:2e:f0:c0:b0:11:67:d6:56:d4:88:e8:bd:
         c7:1e:2b:8e:82:e7:55:7d:d3:02:3b:52:2f:89:d6:10:e3:16:
         f8:3c:e0:d6:0e:24:2d:67:d8:0d:34:9d:14:d5:8f:1e:0f:41:
         2c:d6:20:90:46:92:83:27:b5:86:4c:76:b5:89:59:46:bb:8a:
         52:e2:86:c8:2e:67:37:16:3a:43:c1:9c:a1:d0:e0:e7:d0:0a:
         13:88:c0:ab:a4:88:78:49:26:b1:14:b0:69:f5:94:70:58:75:
         4f:99:d2:5c:1c:85:73:46:e9:95:42:e7:f5:ca:d2:64:7c:7f:
         11:a3:ab:05:6b:bf:bb:97:77:7d:63:71:f5:35:b0:2d:a7:86:
         38:02:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:58:27 2025 by rpki-client