Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa
File:                     b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa (raw, json)
Hash identifier:          Vph3nGtkPAiQpRTz5R0D0HL87rx1JHVHpbvhDHhNreg=
Subject key identifier:   59:9A:A2:CB:1C:74:4C:E3:35:A7:01:60:2F:A6:B9:52:F0:39:32:23
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584AECC147E66ED278A7C8E27780
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33059
IP address blocks:        64.92.69.0/24 maxlen: 24
                          64.92.70.0/24 maxlen: 24
                          64.92.71.0/24 maxlen: 24
                          64.92.73.0/24 maxlen: 24
                          64.92.74.0/24 maxlen: 24
                          64.92.77.0/24 maxlen: 24
                          64.92.80.0/24 maxlen: 24
                          64.92.81.0/24 maxlen: 24
                          64.92.82.0/24 maxlen: 24
                          64.92.83.0/24 maxlen: 24
                          64.92.85.0/24 maxlen: 24
                          64.92.86.0/24 maxlen: 24
                          64.92.92.0/24 maxlen: 24
                          137.239.196.0/24 maxlen: 24
                          137.239.197.0/24 maxlen: 24
                          204.174.17.0/24 maxlen: 24
                          204.174.28.0/24 maxlen: 24
                          204.174.29.0/24 maxlen: 24
                          204.174.30.0/24 maxlen: 24
                          204.174.31.0/24 maxlen: 24
                          209.35.106.0/24 maxlen: 24
                          209.35.107.0/24 maxlen: 24
                          209.35.108.0/24 maxlen: 24
                          209.35.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:47:e6:6e:d2:78:a7:c8:e2:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=16a6f752-f40e-42cb-bad3-9e1f9017e544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:af:be:12:cb:ac:93:31:cc:01:72:3d:36:d4:
                    03:bd:8a:96:b5:df:02:ab:0b:aa:b3:a5:d7:7b:91:
                    29:73:2c:25:16:33:11:72:fc:fd:1f:f3:e2:9c:6f:
                    4c:2e:3f:25:f9:a2:bc:95:7a:a4:68:36:93:bb:6b:
                    c6:8b:d8:6b:c1:30:00:76:32:fe:43:c6:e9:e8:ff:
                    97:2a:b2:39:2c:a5:45:3c:41:ca:1a:1a:be:8a:50:
                    18:2d:87:bf:dd:2d:03:3f:ae:4f:85:b8:95:e8:be:
                    c0:a3:51:3d:7a:0d:f1:89:3f:c6:56:5e:6e:84:d6:
                    1a:7d:5d:14:ff:d3:f0:18:ea:8b:d0:c5:65:57:13:
                    b9:d8:b3:80:15:60:56:f3:87:5e:b3:5e:00:39:60:
                    45:e4:2d:e6:99:09:7f:d6:a2:c6:5d:6e:2c:9e:4b:
                    b6:79:a7:ff:36:66:32:d6:23:17:98:97:5f:a5:25:
                    d6:42:a0:6f:fc:f7:34:ee:61:3f:91:ca:c2:b4:69:
                    4d:67:50:05:b4:c9:00:83:f4:7d:56:f4:5d:c2:cf:
                    65:c2:ce:44:c6:d7:47:0f:43:22:a8:be:74:48:5c:
                    f6:d9:40:be:c1:0e:c6:58:03:2d:17:d9:93:f9:73:
                    30:c9:f3:ef:ef:52:42:08:14:60:74:d2:cf:ab:38:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9A:A2:CB:1C:74:4C:E3:35:A7:01:60:2F:A6:B9:52:F0:39:32:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.69.0-64.92.71.255
                  64.92.73.0-64.92.74.255
                  64.92.77.0/24
                  64.92.80.0/22
                  64.92.85.0-64.92.86.255
                  64.92.92.0/24
                  137.239.196.0/23
                  204.174.17.0/24
                  204.174.28.0/22
                  209.35.106.0-209.35.109.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:89:68:89:e2:dc:87:11:0b:ea:1b:c6:82:7f:57:92:14:
         89:72:1e:64:2b:19:4b:c4:c3:54:b3:76:46:9f:f3:03:b6:8c:
         5b:6d:67:6c:51:01:39:c4:56:72:be:c3:e5:c8:a3:e0:b2:72:
         d5:94:e1:cf:d5:02:c3:c0:81:52:d4:2f:3e:15:49:15:95:69:
         6d:20:bc:ad:e1:e4:a2:ec:d9:de:af:b5:98:ac:da:4b:5e:8d:
         f2:58:82:25:f0:ee:72:a9:6a:bd:7f:a5:28:3c:ba:47:e1:76:
         66:69:b7:be:67:15:9a:27:6e:0e:74:dd:d9:6f:41:ca:da:06:
         10:a3:96:41:d6:e0:46:34:e7:d0:b9:da:bc:b9:a0:43:a5:a4:
         5f:6f:32:96:5b:e5:2c:8f:1b:9e:8d:da:76:6b:39:1b:b0:bd:
         be:76:b5:f2:e1:6b:e7:d4:42:dc:ee:2a:fb:c2:08:7d:e8:41:
         08:c5:38:6e:2f:c7:69:84:bc:3a:f8:b0:1b:f2:d5:55:d8:92:
         6d:00:bd:e3:2a:d7:4b:87:a4:34:9c:89:0d:2b:d2:0f:ab:10:
         8e:f6:eb:1e:2e:0d:12:97:6e:a5:b0:e2:f5:ce:ea:d0:57:36:
         3f:52:c9:5a:7a:32:5a:99:3f:8d:fd:8f:59:d4:8a:87:55:79:
         e3:15:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:30:40 2025 by rpki-client