Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/8501162b-5976-3f78-a723-759699eb71bc.roa
File:                     8501162b-5976-3f78-a723-759699eb71bc.roa (raw, json)
Hash identifier:          8Fr40tnxowUcv1Rg/xH3P4/Cs95RMDjy8No0rVTAfiA=
Subject key identifier:   48:EE:8A:E0:0E:01:04:BC:43:9D:30:19:3D:2E:03:68:23:ED:24:D2
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584B4D11BF9133E7325681201380
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/8501162b-5976-3f78-a723-759699eb71bc.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     27539
IP address blocks:        64.68.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:bf:91:33:e7:32:56:81:20:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=6c0a0a7f-b756-4861-854e-0fa59a49ae6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a5:bb:3b:5f:e3:e3:de:74:d1:0a:65:0e:bc:
                    38:0d:16:3c:ca:6b:8a:aa:cb:7d:ff:1d:9d:ee:0b:
                    2c:89:3a:1e:c5:8b:9d:2c:31:a1:03:1c:e4:73:91:
                    f0:1a:1f:8a:81:c2:09:93:4e:88:40:69:48:e9:80:
                    40:95:cf:21:6d:87:66:2a:3f:e6:aa:a8:7b:bd:d3:
                    a6:eb:5a:c5:c2:72:dd:6e:7a:d2:9e:cf:8e:e2:3b:
                    5c:52:a7:d0:92:7b:37:d1:b8:1a:69:63:d9:21:c6:
                    69:38:4b:0f:02:76:38:9b:65:26:b9:54:bd:61:9a:
                    df:28:ad:a4:95:1a:bf:25:bf:db:fc:8c:29:b6:00:
                    cd:89:28:24:c2:21:a6:d9:72:0b:7f:99:5c:22:12:
                    db:75:7a:32:8f:93:fe:1b:05:dc:0c:39:91:f1:85:
                    37:60:78:96:a9:56:6f:6b:a8:06:56:a2:ed:04:49:
                    99:6b:b5:2c:85:8e:bf:73:0f:fd:2e:2d:b7:b0:1f:
                    1d:41:de:93:f5:e5:9e:06:40:1b:64:8f:2c:34:9b:
                    54:56:3f:00:d2:d1:e5:5e:83:b6:97:0f:d0:d5:36:
                    ef:ac:6a:69:bf:e1:e0:c9:03:16:33:2e:96:5e:8f:
                    d9:9f:e6:3c:5d:cd:4b:70:4e:66:ab:77:2e:5e:26:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:8A:E0:0E:01:04:BC:43:9D:30:19:3D:2E:03:68:23:ED:24:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/8501162b-5976-3f78-a723-759699eb71bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b7:bf:c1:d2:eb:3f:3b:ac:70:9b:b4:63:7c:de:73:d2:4a:
         b5:5f:8e:d3:9b:6e:3f:71:bf:d5:8a:73:a0:de:dd:9d:7d:e8:
         38:b9:48:bb:f6:56:57:71:dd:51:78:f3:fc:68:52:84:74:84:
         fc:06:b4:92:96:21:93:b7:80:8e:e9:e4:9b:d7:05:44:03:30:
         af:f7:85:ad:fd:26:88:17:4d:c8:ef:7c:5f:da:84:d8:c9:c1:
         67:71:c4:86:5a:49:cd:97:84:28:4d:7c:85:96:6b:3a:51:d3:
         bc:d3:d7:cb:36:81:eb:c7:23:95:2b:9f:3e:8c:34:01:f4:b3:
         28:90:33:6b:71:0f:fa:ac:7e:4b:d4:d2:8d:2d:af:0b:ff:86:
         34:52:dd:e5:f0:37:26:ea:04:fc:22:b8:6b:2e:4c:a4:1e:89:
         61:cc:29:4b:0c:50:d5:73:f9:4b:1e:e3:3e:47:f1:09:36:94:
         fa:f1:7f:cf:33:ea:85:23:39:14:bb:36:83:c2:dd:ef:3b:c9:
         19:4c:76:35:a1:f2:a1:07:ac:69:5b:68:12:99:71:cf:51:7c:
         c8:44:4c:7e:57:0b:f2:cc:76:78:1e:cb:3b:f6:7c:28:e5:03:
         8f:d7:a6:2b:37:fd:16:b7:33:aa:f9:bb:c0:40:9c:51:78:c1:
         d3:54:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:15:06 2025 by rpki-client