Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/e30a3058-e90a-3007-8755-87cf5d7490e9.roa
File:                     e30a3058-e90a-3007-8755-87cf5d7490e9.roa (raw, json)
Hash identifier:          x46VOJJoQmwibdBluxjd8yq7fIr4Vt8pjIs5Xz/ubh8=
Subject key identifier:   69:AA:B1:0D:B6:47:61:CC:EB:15:AE:F4:8C:C2:FE:39:D3:25:2C:39
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584B75F67B09F4393B4CF1BF3F80
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/e30a3058-e90a-3007-8755-87cf5d7490e9.roa
Signing time:             Thu 09 Oct 2025 04:33:54 +0000
ROA not before:           Thu 09 Oct 2025 04:33:54 +0000
ROA not after:            Wed 07 Jan 2026 05:33:54 +0000
asID:                     22079
IP address blocks:        64.136.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:f6:7b:09:f4:39:3b:4c:f1:bf:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Oct  9 04:33:54 2025 GMT
            Not After : Jan  7 05:33:54 2026 GMT
        Subject: CN=d9e9139e-11b8-43dd-96ff-9ad14342a619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:c1:9d:23:f5:11:50:da:c9:84:d8:1a:50:
                    a3:c8:46:52:a5:69:24:ec:32:45:a0:9d:a1:6f:80:
                    14:93:d0:88:55:cb:e6:70:9b:3d:6b:e6:03:0e:cc:
                    4f:72:ce:bf:3b:5b:f6:f0:55:e0:98:81:00:a7:d5:
                    dd:b4:e3:6f:4e:69:27:f1:4c:b4:86:96:9e:28:3d:
                    b7:3c:68:73:b8:ed:13:55:18:27:26:a5:bc:aa:23:
                    45:1a:d7:f9:ac:16:89:65:0c:20:3d:e8:42:4c:63:
                    65:d3:06:fc:3f:80:8a:f9:2b:35:3f:f4:ac:4d:fe:
                    3d:37:e4:b2:a1:df:04:3e:01:f3:ea:36:98:f8:46:
                    84:0b:18:e4:91:6f:39:aa:a2:83:df:ff:a0:7d:23:
                    9f:fa:a4:d3:64:f7:ee:27:d1:b4:f7:d3:55:3d:75:
                    c8:29:c6:9c:d0:26:97:15:10:6b:88:f4:70:2b:3b:
                    8a:4b:62:01:d7:3e:f6:f7:a4:fc:ca:83:84:56:9b:
                    76:8e:fb:61:02:9c:76:a6:56:31:09:de:25:2a:1b:
                    5f:67:c0:6e:d2:f5:57:18:a5:86:c1:50:fd:b1:d5:
                    03:16:f4:b3:01:7b:fd:e8:cd:c8:30:40:b6:b1:fc:
                    95:3e:eb:30:11:74:41:9b:f6:85:fa:da:2e:5f:b7:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AA:B1:0D:B6:47:61:CC:EB:15:AE:F4:8C:C2:FE:39:D3:25:2C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/e30a3058-e90a-3007-8755-87cf5d7490e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:11:c3:bd:df:64:d8:69:ec:1f:a0:66:3b:00:54:b1:f4:0a:
         a8:71:47:70:97:38:49:b3:e5:c1:92:7a:10:c3:0f:2b:5c:71:
         2f:7c:fb:5a:b2:95:05:54:1a:46:33:38:33:f6:df:88:74:c9:
         fb:fa:f2:9c:75:3b:ed:b6:55:53:10:b6:c1:2e:57:51:ff:0b:
         d8:b4:db:43:3e:1e:90:12:28:ee:f8:dc:2e:b3:0f:c9:f0:19:
         ed:7b:7f:02:87:90:3a:c0:bf:51:27:6c:fa:4d:69:9e:ee:93:
         e2:67:cf:cf:a3:ee:cd:13:d2:1e:25:fb:5b:82:53:91:06:da:
         2e:8a:f8:6f:b7:50:db:8c:3b:fb:65:90:db:2e:ce:37:63:00:
         e3:45:61:7b:fe:3c:e7:61:04:17:0e:1f:43:e8:83:6b:ae:b2:
         88:55:bd:30:cb:48:37:d9:d2:d5:f9:8a:24:5a:43:a7:90:62:
         7f:32:53:f3:8c:4d:76:e6:38:23:11:96:a1:d8:72:ae:bf:ec:
         5b:de:1a:cd:5e:a5:2a:24:c1:f8:98:f3:49:1b:c5:6f:fe:b2:
         e8:81:53:db:e7:5f:b4:d6:ce:cf:16:2e:e9:4f:eb:7d:74:4c:
         b8:7b:cb:5b:24:f3:27:8f:27:9b:21:da:fc:5a:bc:cc:c2:06:
         87:94:b9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:37:38 2025 by rpki-client