Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/dd98ffee-596d-3a16-b208-1c5e7235f7ff.roa
File:                     dd98ffee-596d-3a16-b208-1c5e7235f7ff.roa (raw, json)
Hash identifier:          ySsRKLv9EiWESUoY0GjbFO4XnfuEx9f6RR5SIGh/zUg=
Subject key identifier:   63:B9:2F:8D:61:88:22:DD:BD:EF:5B:54:24:48:0D:8B:BC:35:83:10
Certificate issuer:       /CN=5bfdb746-47de-4f0f-9534-ecf378b217e4
Certificate serial:       010D0C9F4328584B52A75217898E9EB7E1CA3F80
Authority key identifier: 80:C4:75:C3:F7:E4:55:62:89:B2:19:B2:F6:C0:E8:1E:30:08:AA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/dd98ffee-596d-3a16-b208-1c5e7235f7ff.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     8075
IP address blocks:        64.13.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:52:17:89:8e:9e:b7:e1:ca:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bfdb746-47de-4f0f-9534-ecf378b217e4
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=43bc6dff-cfe0-4f0a-a384-6a74e0a7a190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:23:25:1e:40:93:2b:e0:2b:bf:8e:4e:df:
                    7b:63:37:bf:be:b1:aa:99:b9:27:9d:66:6c:57:a9:
                    c4:2e:35:9b:6c:cc:46:44:16:30:8d:05:0e:b7:ae:
                    ce:8b:f7:1b:9c:35:d5:9f:9c:0d:fe:b7:e6:bd:71:
                    e3:73:41:58:b0:5e:a9:43:6a:c0:b2:5c:5e:5f:13:
                    3a:cc:cc:d5:84:e4:44:99:ee:ed:4c:26:0e:c6:1f:
                    8c:8a:24:db:ac:91:e9:58:82:8a:e4:53:81:df:4b:
                    a9:48:60:d8:ab:15:0e:ef:35:28:f0:94:98:11:f0:
                    1c:7d:14:c9:b0:69:9f:52:6a:df:fd:7b:40:0f:09:
                    fd:2a:d3:1d:dc:80:3d:c2:ce:23:21:2f:e4:9d:dc:
                    c7:31:49:a3:2a:59:2a:b7:03:d5:d5:49:49:14:4e:
                    82:c3:c2:82:f8:fc:41:ed:da:2a:8c:a9:ff:bd:b5:
                    8c:34:5a:13:0f:1b:f8:30:da:b1:75:30:bf:83:60:
                    5b:ea:ec:dd:2f:81:d3:a6:08:b5:ba:8a:9d:c5:2f:
                    aa:f0:02:f9:a8:1e:ed:9a:a1:2d:fc:58:f4:ec:ef:
                    95:25:39:81:6f:44:e9:45:a2:f8:4e:d1:7c:b1:f4:
                    30:82:22:13:9b:23:84:07:5b:cc:6c:37:62:23:88:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B9:2F:8D:61:88:22:DD:BD:EF:5B:54:24:48:0D:8B:BC:35:83:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/dd98ffee-596d-3a16-b208-1c5e7235f7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.crl

            X509v3 Authority Key Identifier:
                keyid:80:C4:75:C3:F7:E4:55:62:89:B2:19:B2:F6:C0:E8:1E:30:08:AA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d4:3d:5c:ed:69:61:48:11:6c:f6:e3:16:66:d8:a1:03:c9:
         c1:b1:61:55:4b:46:2f:96:e6:24:85:ca:9a:ba:be:16:95:bb:
         71:01:ab:a9:25:13:5f:01:00:c9:cf:6c:a4:54:41:bc:a2:30:
         0d:d7:4e:a2:49:73:63:56:3d:ea:e3:f7:f9:cc:d7:d5:7c:df:
         59:e6:30:3c:80:c4:e2:8f:10:fa:c7:7c:d4:4e:ea:73:c9:ff:
         59:e1:e4:0d:60:65:81:15:a9:3a:59:c7:41:63:57:f3:89:b6:
         18:e4:15:2e:e9:b1:32:e0:31:2f:1e:ca:da:98:59:65:05:7a:
         de:30:92:ad:92:5b:da:0c:4c:98:ef:0b:c4:c1:b1:d8:eb:42:
         a9:67:17:ae:3e:30:f2:bf:46:f5:17:30:bf:03:68:ba:29:1f:
         67:96:60:01:2f:72:10:b7:07:9e:be:bb:c7:aa:52:c2:7b:83:
         e8:15:65:ad:ad:85:8a:94:da:30:01:42:85:dc:56:1c:12:ad:
         21:30:19:ec:70:79:82:c1:7b:01:8b:3d:7f:9d:fc:3e:7c:ee:
         e0:91:7b:c6:a4:98:bc:de:50:37:eb:88:13:3d:b1:e8:f4:fc:
         f3:d9:a3:16:15:a5:a5:09:5d:d8:bf:ca:89:e1:bd:bc:fd:fb:
         8f:50:b1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:22:55 2025 by rpki-client