Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/82bc106a-fab1-38b4-8c8e-c816eab0101c.roa
File:                     82bc106a-fab1-38b4-8c8e-c816eab0101c.roa (raw, json)
Hash identifier:          u8HEHFAsV5N5vCl51thtBuYzS4cVHtgpNfgmaXfT8x0=
Subject key identifier:   5C:4D:CE:F5:E4:F2:C2:EB:D4:D8:0A:4C:C1:E5:21:6C:5F:53:AD:C6
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584B4D11D18C2B65EB5E4D6D4B80
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/82bc106a-fab1-38b4-8c8e-c816eab0101c.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     27539
IP address blocks:        64.68.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d1:8c:2b:65:eb:5e:4d:6d:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=91fce20d-6882-46bd-8693-4aa4ce1f3d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:76:cc:43:08:56:f1:b6:ad:65:08:04:ed:
                    73:0c:8d:42:7c:44:33:a3:86:88:c2:9d:6b:ae:d9:
                    87:22:10:ec:28:36:de:7d:9c:9c:3c:88:55:65:8c:
                    41:47:ee:3c:a8:97:98:b4:1a:28:d1:5f:c1:2d:39:
                    4a:95:5e:1b:d9:5a:31:3d:47:f1:84:04:b0:b8:a4:
                    5d:a6:3a:02:b9:37:42:58:f7:33:27:46:19:f2:32:
                    11:c6:23:26:c2:d2:76:d2:da:45:ad:34:29:fc:a9:
                    a4:39:2b:0a:88:62:2e:5c:2e:f6:08:90:87:b9:ba:
                    69:3a:ce:4f:a0:60:b6:80:bd:d5:c0:cd:0d:f9:fe:
                    47:0e:ec:cd:8c:b9:16:bc:68:b8:94:e9:77:6e:76:
                    e1:03:cf:ae:97:eb:47:df:38:cf:ed:08:5a:21:96:
                    96:f0:12:64:17:f8:94:99:16:ad:ca:36:b2:d9:b7:
                    b9:fa:c5:23:eb:40:5f:db:30:4c:bd:0c:1a:88:16:
                    97:13:b1:39:d6:65:23:7d:90:fc:90:ff:01:f0:67:
                    76:48:6f:d9:78:b4:19:dc:18:cd:59:ac:23:a9:dc:
                    66:09:9f:08:be:dd:07:91:fd:81:61:bc:c5:99:44:
                    64:ae:e3:cb:a7:88:49:24:4a:8d:dc:cd:fc:fd:80:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4D:CE:F5:E4:F2:C2:EB:D4:D8:0A:4C:C1:E5:21:6C:5F:53:AD:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/82bc106a-fab1-38b4-8c8e-c816eab0101c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5b:67:72:6a:21:2c:f5:55:dc:e9:1c:51:94:d6:2e:d7:98:
         b5:d6:40:fa:8b:24:dd:e6:de:4c:ba:0e:45:c3:61:6e:ef:1e:
         d5:2e:7b:79:c3:06:ce:87:23:f0:91:c0:c2:ae:7f:50:a4:59:
         ea:0c:5c:7c:2b:27:96:49:fd:6a:dc:8a:c3:54:9d:4d:44:b0:
         18:dc:c5:66:1d:bb:17:bb:9e:77:26:c7:3f:b1:b7:b6:a5:56:
         70:c1:1c:ef:2b:d9:5f:c1:cc:05:62:3b:c5:52:04:35:46:2d:
         ae:17:4f:7a:97:0a:6e:05:15:a2:c7:94:9c:a0:e7:95:2a:8b:
         fc:4d:be:f5:99:53:97:82:f4:78:1b:06:e1:cb:e2:5b:43:b5:
         28:1a:e2:70:31:c5:c8:25:ff:ad:a9:2d:e1:e5:54:c7:c7:e2:
         c4:13:b6:96:8d:31:6a:1a:89:f3:c9:66:16:4c:9a:43:af:34:
         71:23:5c:72:37:77:3a:49:89:10:d9:6e:b4:cf:e6:7d:bf:d4:
         90:e1:b1:64:75:bc:50:ee:17:29:64:c3:8a:61:dd:7b:55:3b:
         52:24:86:ca:84:e8:8c:a8:33:da:b1:12:d4:2e:a2:8b:9a:0e:
         0a:9a:88:c9:80:51:19:0c:54:2b:4c:1a:4c:e8:84:16:a1:cc:
         8a:bb:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:44:13 2025 by rpki-client