Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/07081d6a-8230-32a8-8cbf-27d50b47b476.roa
File:                     07081d6a-8230-32a8-8cbf-27d50b47b476.roa (raw, json)
Hash identifier:          PMGwxg9rDzeicKQW41EmXgiHlBROobL9LGu6v+I74PA=
Subject key identifier:   F6:51:18:5C:63:57:3E:51:F0:B6:08:60:97:9E:F7:9A:C1:CA:F8:0A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849E38A3C2E94213F4CF3FCE640
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/07081d6a-8230-32a8-8cbf-27d50b47b476.roa
Signing time:             Sun 18 May 2025 01:00:47 +0000
ROA not before:           Sun 18 May 2025 01:00:47 +0000
ROA not after:            Sat 16 Aug 2025 01:00:47 +0000
asID:                     400385
IP address blocks:        64.184.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e3:8a:3c:2e:94:21:3f:4c:f3:fc:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 18 01:00:47 2025 GMT
            Not After : Aug 16 01:00:47 2025 GMT
        Subject: CN=d75fdacd-e952-47b7-b720-0881f72ea0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:67:a8:2a:38:78:07:3f:45:fd:53:2d:87:9c:
                    14:c4:25:53:2e:56:e0:c4:07:ff:42:1b:52:5d:3e:
                    e7:57:65:87:36:0b:e3:61:72:08:bb:ef:51:52:37:
                    27:f1:2f:73:5f:d3:1b:93:87:a9:26:bd:51:62:9b:
                    de:19:ec:99:4f:a4:b1:6a:64:65:fc:aa:ad:e0:c4:
                    ce:91:29:1d:fd:78:c7:2d:34:f9:57:04:84:c9:c7:
                    1f:86:c6:19:a2:77:fe:c4:ca:06:25:33:9a:a4:b0:
                    96:8c:25:27:ff:9d:fc:10:18:c7:03:91:98:3e:38:
                    a5:ab:50:e5:b7:72:82:ef:cd:d6:25:89:cf:be:02:
                    99:23:1e:f0:fb:09:62:94:88:ab:0a:88:80:ba:17:
                    f2:32:bf:ca:fb:07:f9:ae:dc:38:3a:70:c4:56:56:
                    52:fa:8e:10:2e:2c:1f:99:07:02:2c:95:47:cd:48:
                    eb:7d:3b:cb:22:11:1e:d9:28:e5:78:bb:b4:78:5f:
                    c5:b9:f6:9a:87:46:ce:cf:83:47:7e:87:9d:2d:56:
                    2c:c5:d4:96:06:43:85:09:ee:05:9e:44:19:af:70:
                    20:26:b9:ff:f2:05:f9:fd:8f:c8:cd:f1:b1:99:94:
                    5a:a9:7f:31:40:8d:d0:be:20:f5:e8:94:6f:4a:3c:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:51:18:5C:63:57:3E:51:F0:B6:08:60:97:9E:F7:9A:C1:CA:F8:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/07081d6a-8230-32a8-8cbf-27d50b47b476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:f9:06:73:77:78:2a:d7:64:73:cf:a7:52:9a:1a:ed:e5:97:
         84:e6:dc:7a:81:d4:a7:46:89:7e:e7:28:0d:5e:1f:8a:c3:b4:
         27:33:30:e3:cb:b3:f3:ed:f2:2d:f7:39:b1:4b:3d:20:cf:28:
         90:d0:86:63:0c:1c:14:14:19:64:bc:8d:85:45:cd:2c:cc:ff:
         0c:d0:73:4c:dc:01:9e:de:cf:e8:39:81:bf:74:c6:a2:06:0f:
         b8:19:58:fe:f6:d2:b6:47:72:58:7f:b6:85:ed:cd:ef:36:3a:
         ac:59:91:e6:8e:15:92:e6:8e:46:d5:e4:b5:fd:e8:9d:d7:aa:
         85:db:93:7d:17:8f:45:a4:58:9f:92:0d:1d:75:47:90:b9:50:
         2a:39:a3:ae:7a:36:ba:07:36:ee:4d:0c:cf:31:37:a1:8b:74:
         ad:b7:c4:f3:db:ef:cc:1a:78:3b:77:58:20:3b:c0:73:ac:a3:
         b8:a7:b4:40:a6:be:7a:80:96:10:d3:1e:20:34:88:95:47:3c:
         9e:9c:ff:1e:df:02:ea:71:03:12:f5:0b:f7:a9:58:6f:dc:c5:
         e2:29:df:4a:4b:56:84:08:15:fb:4f:05:89:34:97:aa:06:1c:
         a0:0e:c3:c4:fb:7a:26:d1:6d:be:19:d5:49:45:6e:b5:26:ae:
         80:a9:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:25:34 2025 by rpki-client