Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d682f096-58fc-3672-b277-594d7971ec15.roa
File:                     d682f096-58fc-3672-b277-594d7971ec15.roa (raw, json)
Hash identifier:          0zj01H5MvEGh/v2a7dXwFI/wB6kcUEFGRrYcwXobpAU=
Subject key identifier:   55:C3:11:80:AF:F9:A5:80:E3:AF:58:AA:1A:0A:FD:28:D6:D6:17:8D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D1650A02B01EC1D730B73B80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d682f096-58fc-3672-b277-594d7971ec15.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     394872
IP address blocks:        64.125.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0a:02:b0:1e:c1:d7:30:b7:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=a4c1b54b-42c8-431c-93ea-b2745f8fe108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:ec:18:59:8e:37:ec:47:c9:01:8e:f3:cb:
                    23:c3:06:5e:fd:c6:d8:0b:37:c6:56:a4:c5:14:5e:
                    02:61:cf:02:eb:2e:d0:e4:72:79:f5:60:78:3e:d7:
                    2b:c7:e6:32:2b:af:a9:61:8b:22:99:49:c0:2a:c9:
                    f2:3f:4c:3f:a8:b2:f5:c6:81:c8:5f:87:0c:43:a7:
                    18:ff:6b:ce:08:d0:d1:05:56:7d:72:40:32:d2:7c:
                    cd:d9:75:23:4f:f1:d6:aa:74:b5:c2:bb:74:f0:4e:
                    ef:8a:75:75:dd:65:0f:44:18:23:77:57:f7:30:96:
                    7b:bf:c9:9d:87:98:9d:79:90:83:de:55:8b:0f:e7:
                    dd:9b:09:68:44:a6:02:50:1d:28:1a:d1:cd:f9:75:
                    ec:3b:9f:07:74:d2:ed:bc:13:55:16:cb:89:8a:19:
                    aa:5a:d6:26:8c:47:61:ef:1f:ac:1c:fb:5d:80:28:
                    0a:87:45:27:ed:a0:13:5b:21:ed:8b:73:26:1c:98:
                    82:47:64:ca:d6:27:97:20:d8:97:d9:69:0a:87:bb:
                    9e:84:de:00:11:e3:bf:c9:d7:14:0e:01:24:56:df:
                    aa:2d:dc:83:e7:a9:67:bb:6f:6a:24:10:04:c7:64:
                    9f:9b:78:67:1b:a7:c6:35:f1:d1:7a:e1:2f:37:68:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C3:11:80:AF:F9:A5:80:E3:AF:58:AA:1A:0A:FD:28:D6:D6:17:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d682f096-58fc-3672-b277-594d7971ec15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ab:37:2c:8c:4f:a4:ba:10:0c:86:0c:46:4f:75:2a:9f:4c:
         90:04:14:f8:85:b9:df:41:1d:9f:ec:96:56:61:6f:95:a1:f3:
         a6:33:55:ff:51:73:01:a4:db:27:57:ba:f4:7a:35:6c:c5:25:
         1b:3c:f5:53:a8:0b:d1:bf:73:88:46:d4:13:7d:68:09:a2:24:
         cc:4b:bd:5c:19:d7:f3:4e:c7:5d:bd:5c:26:bb:c5:21:c9:20:
         da:14:c1:8e:65:d0:c8:ff:5d:1f:15:da:d9:24:ae:14:5d:9b:
         68:1c:ac:32:35:aa:da:7b:d4:64:9c:2a:82:fd:d0:4d:cc:58:
         2e:4a:ba:06:d7:94:0c:bd:ea:06:0c:db:3c:c2:3e:8b:88:6f:
         b0:7e:5b:23:d7:b0:7e:7c:27:39:7f:81:08:22:1b:bf:30:4a:
         5f:57:09:16:ab:b3:b6:11:76:27:60:c8:29:b8:27:95:90:dc:
         1c:46:b8:87:3f:85:f7:67:af:ec:58:b5:1d:8c:d2:d3:b5:3a:
         4c:af:05:77:6e:47:7a:d0:51:7c:d5:47:a0:26:02:18:15:0e:
         a3:24:a4:19:ec:da:a3:e5:c9:6a:0f:93:85:31:26:2f:60:45:
         3a:d8:c6:2a:4f:ae:bf:9b:a3:91:6b:62:57:08:d0:b0:81:77:
         76:61:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:47:23 2025 by rpki-client