Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9997b274-b375-3427-9687-59875f1e519f.roa
File:                     9997b274-b375-3427-9687-59875f1e519f.roa (raw, json)
Hash identifier:          Uou4cQF56GI1Ribbn7cXjtJIU9gtvpPLjT5zKOucWfM=
Subject key identifier:   CA:D6:2B:03:0B:BD:97:5E:03:EA:C5:2A:2A:FB:40:7D:6F:F6:7E:7C
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584AE9F66F2425E28815059F08C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9997b274-b375-3427-9687-59875f1e519f.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     20340
IP address blocks:        64.34.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:6f:24:25:e2:88:15:05:9f:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=0bcc0919-8241-43d0-97cd-4149226d05c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:7e:4a:8d:21:cf:62:d8:01:c1:e8:86:b5:
                    6f:af:0d:2c:a8:d9:c7:e0:5d:c6:83:49:1c:85:69:
                    fe:8f:3b:31:75:88:92:bd:c7:25:67:24:49:ae:8b:
                    cb:d3:5c:ab:4c:29:75:8c:81:69:3d:01:f2:a8:50:
                    65:70:f5:ef:cb:08:31:39:2d:ec:0f:50:ce:bf:3a:
                    ed:9b:7a:25:18:c0:b7:89:e5:21:ee:26:57:30:5f:
                    c0:6d:16:d2:a4:e2:8c:6c:47:62:f8:eb:31:3f:b9:
                    99:2e:98:3f:61:c4:d7:7e:a2:05:81:54:fd:f0:e3:
                    af:bb:20:58:e0:3a:f5:66:95:56:54:5c:f1:f9:14:
                    a1:4c:5f:05:9c:9c:27:e9:d2:59:63:07:54:10:70:
                    62:78:3b:87:ae:31:39:ff:41:ef:f9:89:8a:4c:8d:
                    fe:a4:5f:a8:28:cd:40:ed:7f:0d:1c:59:7f:8a:2f:
                    38:d4:2d:48:f5:02:23:91:12:bf:6f:9e:13:48:90:
                    7f:43:76:1d:03:22:8b:e6:4a:6c:55:50:2d:23:3d:
                    b6:55:b2:3e:1b:db:60:46:47:b5:ef:12:ad:e4:6d:
                    ff:3d:15:e5:d1:03:7a:fe:48:6c:9d:93:d9:95:03:
                    5b:1f:f7:61:71:38:36:20:f9:f7:54:41:5f:3d:b7:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D6:2B:03:0B:BD:97:5E:03:EA:C5:2A:2A:FB:40:7D:6F:F6:7E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9997b274-b375-3427-9687-59875f1e519f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:46:2f:7d:87:3f:d7:f5:3c:08:f9:9e:97:07:b1:02:54:3b:
         d1:18:85:ae:6a:76:b0:22:3b:54:db:a8:63:f7:cd:5b:a4:0d:
         fb:32:b8:0d:aa:69:9a:3d:1b:ed:89:d9:9d:d6:c2:9b:fb:d8:
         f0:91:11:77:3f:cc:b5:5e:21:bd:9e:e8:58:3b:b2:4c:31:ac:
         59:46:2b:af:81:cd:95:d7:00:ce:b9:15:1e:c2:c7:e1:22:da:
         67:51:8f:4e:3b:41:92:03:1f:a1:6d:28:24:f2:03:59:79:03:
         c3:d5:04:79:93:82:41:ca:a5:8a:ce:d3:12:60:18:1d:11:bf:
         36:35:6e:96:5f:3e:52:87:bf:f5:89:41:55:87:75:da:33:38:
         7a:0b:32:48:d2:d1:61:31:cf:2c:82:92:1e:43:28:e0:d4:fd:
         22:15:7c:b3:83:fc:89:04:d1:c4:bb:40:0d:11:ac:ad:6b:0f:
         92:2a:46:94:75:08:23:e4:87:43:fc:e7:97:26:10:6c:b3:96:
         35:ba:e3:d4:f6:a5:59:e2:1e:38:b1:02:cd:51:02:6a:0f:bf:
         a0:c4:f2:41:c9:6f:a3:a4:fb:5b:43:22:02:53:ad:a2:48:bc:
         17:48:b1:05:df:5e:65:0d:01:9c:b4:13:85:c1:1c:a3:08:7f:
         15:07:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:36:38 2025 by rpki-client