Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/30e57d7a-e0e9-349c-9c4a-56da11288de9.roa
File:                     30e57d7a-e0e9-349c-9c4a-56da11288de9.roa (raw, json)
Hash identifier:          pkRHWFifol0Lkdq9fjDMn/tXLTq+4KxA/W7SrO3qm0Q=
Subject key identifier:   59:C4:1D:10:7D:A3:0C:9B:5A:E1:B1:06:0B:A6:15:89:32:72:3B:9D
Certificate issuer:       /CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599
Certificate serial:       010D0C9F4328584B663209BCB1313470DC5448F8
Authority key identifier: BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/30e57d7a-e0e9-349c-9c4a-56da11288de9.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     14618
IP address blocks:        64.39.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:09:bc:b1:31:34:70:dc:54:48:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=1d222586-4057-4857-8033-a9f3f4ed4bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:55:78:58:01:ee:75:0a:fb:85:88:be:41:
                    28:79:34:36:28:71:8d:dd:0a:68:87:e6:69:60:49:
                    20:76:39:a9:56:c4:c0:7f:a1:0b:e9:ed:2d:c2:63:
                    63:45:54:98:77:97:61:2d:d4:6e:b0:20:16:11:43:
                    f9:25:16:30:5b:f7:20:48:03:19:7d:d1:27:87:14:
                    1b:3e:ed:22:bf:5b:a0:6e:c9:ae:4c:00:0d:d2:ff:
                    fc:60:e5:93:e8:d6:44:c5:ab:ff:04:48:a3:f5:41:
                    a1:cb:f4:bd:4e:3c:9b:18:23:49:27:62:c3:27:69:
                    63:88:d2:57:0b:89:4c:69:41:7e:5e:fe:7b:31:1c:
                    76:fc:9e:3d:81:a6:f0:25:45:d4:da:a5:35:d3:c1:
                    52:92:24:c0:cc:de:3a:73:d7:35:8f:72:90:b1:1b:
                    5a:12:46:b5:b1:7c:a0:ed:55:ff:1f:ca:dd:21:1e:
                    4b:63:3a:ef:85:29:10:e7:92:df:ac:c9:3e:c2:ff:
                    c5:92:65:92:c5:6a:6f:c6:56:eb:a2:4b:8e:a4:e5:
                    a7:e2:08:f0:06:0f:a9:11:5d:b8:2a:db:b2:84:bd:
                    b8:d6:7f:21:61:66:0b:bd:98:35:25:62:b7:3b:26:
                    8c:a8:59:00:fe:4d:8e:6c:78:72:e3:20:fa:ab:02:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:1D:10:7D:A3:0C:9B:5A:E1:B1:06:0B:A6:15:89:32:72:3B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/30e57d7a-e0e9-349c-9c4a-56da11288de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ad:a4:33:65:e4:77:a6:e4:3c:e7:a8:5a:35:18:27:61:59:
         57:56:0b:92:8b:e9:06:99:de:07:f7:69:0e:ef:b0:a8:bd:3c:
         f2:3a:db:9d:bc:4a:50:ee:f1:4e:7e:fc:d8:27:9f:75:65:22:
         d0:8b:42:63:0b:0a:aa:c8:be:79:d1:da:11:94:24:53:19:a1:
         63:7e:36:60:47:57:00:7f:1e:eb:c4:f2:72:5b:28:09:46:58:
         2f:c4:e8:9b:14:50:2c:ec:68:e7:40:36:5d:a6:69:95:fc:74:
         e5:76:6d:56:cc:ee:e6:bd:66:ef:ad:4e:29:e3:f3:8f:9b:f4:
         43:26:56:f5:ca:01:03:20:c6:7e:51:2c:fa:40:ac:6e:67:69:
         2d:71:74:c4:1e:2a:c4:7d:7b:8f:22:fd:fa:27:d8:02:05:ad:
         e5:de:29:d4:47:76:8a:fb:59:d3:20:62:99:06:73:70:4d:d1:
         14:42:40:76:82:6b:65:1f:69:79:82:7b:85:89:b1:fe:65:c3:
         7d:5b:af:76:4e:59:d4:31:35:74:10:e9:6f:1f:13:2a:2b:4a:
         ed:8a:e7:2e:c9:bf:27:7b:ee:99:f9:ca:87:26:a5:5c:bf:cf:
         1b:3c:b0:fd:89:69:80:7d:40:45:21:96:e5:08:f1:dd:db:55:
         a5:91:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:55 2025 by rpki-client