Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa
File:                     c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa (raw, json)
Hash identifier:          wKkk0T6gVSJyrVb0mUGrS/N6oJUOmGwzlMJ7EFzG4zA=
Subject key identifier:   FD:96:A3:04:EC:66:11:E3:5E:79:3F:57:1D:C2:30:FF:B4:A2:FC:FC
Certificate issuer:       /CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9
Certificate serial:       010D0C9F4328584ACCA659596D22CDD081972880
Authority key identifier: 56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     394911
IP address blocks:        64.66.244.0/22 maxlen: 24
                          172.82.12.0/22 maxlen: 24
                          206.183.136.0/22 maxlen: 24
                          207.90.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:59:59:6d:22:cd:d0:81:97:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=f5f50c12-7847-4a46-b902-84fea3e3e0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:93:90:d1:86:56:da:71:16:fa:4b:1a:24:
                    3f:df:7f:1c:50:99:c0:c6:78:38:2b:8f:23:1b:fe:
                    50:fe:92:4e:42:fd:be:a7:61:d9:76:20:78:aa:3c:
                    04:66:c5:ba:15:51:47:8b:4c:6c:8b:a2:fd:81:36:
                    98:ab:9c:fc:f4:44:3c:3f:00:c2:e7:e3:b5:35:80:
                    18:1f:62:4b:e4:61:25:53:3a:df:1f:a0:9e:c1:f8:
                    97:ac:66:ef:ef:e1:7c:1a:f1:e1:f2:44:94:67:4f:
                    a8:a6:3f:3b:0a:86:45:4f:58:35:99:85:36:95:47:
                    15:5b:5e:45:09:31:b4:a8:b6:2d:17:01:98:4b:c7:
                    dd:f1:d9:2b:b0:42:b8:a3:06:3e:fc:fb:fc:60:15:
                    dc:53:5f:09:e6:45:28:8b:d6:c7:40:83:be:40:0c:
                    18:03:d6:a5:dd:da:3f:7e:d0:8d:f4:76:53:ca:5e:
                    2b:51:bb:1d:ef:fe:a9:ec:e8:5c:a5:1c:d7:ca:83:
                    52:38:4b:ef:4d:b2:ca:ff:ba:ea:02:c0:38:86:9f:
                    fb:e6:a0:ee:88:9b:c3:bb:37:03:45:b3:86:07:ac:
                    2f:50:5d:6b:9a:00:26:e2:09:ad:09:b3:bb:93:35:
                    3e:38:3f:c6:2c:33:74:04:03:c4:12:16:ab:5b:97:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:96:A3:04:EC:66:11:E3:5E:79:3F:57:1D:C2:30:FF:B4:A2:FC:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl

            X509v3 Authority Key Identifier:
                keyid:56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.244.0/22
                  172.82.12.0/22
                  206.183.136.0/22
                  207.90.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:f1:89:ed:6b:dd:c3:c9:88:f6:94:23:41:b8:aa:23:c8:
         0d:8c:f0:d8:17:1a:9f:d6:a0:f1:bb:bd:eb:b1:44:76:ae:3e:
         60:df:23:98:9a:d9:80:57:a7:ca:1a:1f:c3:67:45:e5:42:ff:
         78:5f:90:a7:42:3b:8d:da:9c:13:af:59:80:20:56:99:b4:6f:
         27:5f:3c:cc:e5:4d:65:e1:97:af:5e:a8:78:3b:14:8a:53:78:
         d8:07:99:da:67:f1:10:96:d5:53:eb:eb:af:be:2a:b4:d4:dc:
         3b:5f:f0:77:a6:ef:3e:19:b5:3c:e1:57:fe:4b:44:8c:c7:54:
         1f:b9:45:17:65:62:c3:25:25:e8:5b:fe:1d:c5:59:c2:d2:2c:
         86:15:d0:cf:b2:a3:e6:94:82:3a:e5:f1:26:ed:d5:d3:57:fe:
         9d:20:53:ae:3c:8c:cd:03:1d:92:b5:f9:93:46:b2:7d:b2:92:
         9d:17:65:8e:c4:70:0c:4a:80:3b:b4:8b:62:54:a7:51:45:9d:
         b3:a9:8e:c6:1d:e4:38:1d:1a:e8:54:d5:58:e3:b1:3d:0b:8c:
         d6:66:20:14:b5:17:5d:18:12:a3:1f:32:e7:1a:3d:d8:53:cd:
         37:e0:79:70:7a:6b:2e:aa:09:bc:ea:f0:0f:f1:db:ab:6d:12:
         cc:5a:fe:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:02:35 2025 by rpki-client