Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/e7a44fd7-9165-31b2-b8af-1442f42f19d2.roa
File:                     e7a44fd7-9165-31b2-b8af-1442f42f19d2.roa (raw, json)
Hash identifier:          86+x2k6HDKf8D04/aniPjD6Mxr3Hm2ZkLIMdfMOs25A=
Subject key identifier:   45:4C:57:68:8D:34:B7:67:DF:4B:27:2A:01:74:3D:09:FD:5E:BA:5D
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584A37288D412EDF615DA6AC75AD
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/e7a44fd7-9165-31b2-b8af-1442f42f19d2.roa
Signing time:             Mon 16 Jun 2025 23:51:56 +0000
ROA not before:           Mon 16 Jun 2025 23:51:56 +0000
ROA not after:            Sun 14 Sep 2025 23:51:56 +0000
asID:                     8070
IP address blocks:        64.40.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:28:8d:41:2e:df:61:5d:a6:ac:75:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Jun 16 23:51:56 2025 GMT
            Not After : Sep 14 23:51:56 2025 GMT
        Subject: CN=0b688e3a-90b9-47db-bc5c-e6d72daefd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:d7:fc:2b:03:1b:66:5c:ae:7e:cf:b3:e4:
                    1f:9a:fe:69:90:42:30:4f:3b:8f:31:15:53:4c:03:
                    01:10:97:ce:c7:b6:61:06:e1:50:4b:de:1b:1e:28:
                    fa:95:71:49:93:ac:23:3d:ab:1d:f6:fc:05:1d:e8:
                    80:a9:ff:90:60:5e:74:15:c1:15:d3:29:34:ef:a2:
                    4e:a0:8b:ba:63:f8:4a:aa:c0:15:63:77:78:48:6f:
                    8e:7b:36:c5:da:ad:2e:6a:53:5e:c1:8f:c7:2d:63:
                    3f:ab:39:5b:fc:67:3c:76:4d:f2:55:1e:94:89:35:
                    46:df:06:52:3b:79:a7:a1:16:da:01:36:30:a5:08:
                    5c:9e:66:40:3f:df:b1:1d:20:0e:ea:f8:61:38:58:
                    39:9e:e5:f5:18:85:b3:df:ab:4d:27:94:d3:27:49:
                    fe:a0:ed:d6:cc:07:6c:9e:3d:4e:ec:e7:af:bf:82:
                    7b:f6:33:26:fc:5a:6a:af:c9:f6:20:4c:cb:4c:fe:
                    5b:b7:83:84:2b:7f:70:14:57:8d:5c:51:13:a3:21:
                    1e:ec:bf:50:ec:90:ea:62:f5:d5:71:89:0e:ca:f7:
                    6e:5d:2d:dc:3c:63:56:5f:71:91:6c:98:2f:97:44:
                    a1:af:d7:4b:97:e4:87:08:f6:a3:13:53:c0:d9:33:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4C:57:68:8D:34:B7:67:DF:4B:27:2A:01:74:3D:09:FD:5E:BA:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/e7a44fd7-9165-31b2-b8af-1442f42f19d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ac:8c:d0:a7:8e:12:7e:55:04:b9:83:8c:d2:1b:d2:87:3a:
         88:70:ef:b3:c3:0a:18:02:90:78:ed:98:d4:ee:53:96:d5:bb:
         5f:15:d6:4f:5c:5e:29:71:7b:04:30:e3:69:ea:5f:76:2e:7c:
         d6:d1:69:2c:96:28:f2:8b:44:d2:c0:03:f6:0d:f6:cf:c5:36:
         d9:de:5d:ff:fb:6a:85:42:ea:09:17:71:c9:53:e5:3d:80:1e:
         04:41:c5:86:33:5c:c0:f0:5f:ae:dc:37:27:0d:c9:b7:33:b7:
         79:05:2a:be:e5:17:dd:b1:c8:10:f5:ec:20:5e:3b:86:99:36:
         99:8f:eb:8c:5b:37:66:1c:1c:80:15:7d:dd:31:2a:a6:93:22:
         92:76:f5:98:77:cc:12:dc:4d:0c:b9:62:b8:10:b5:48:97:d1:
         88:73:36:26:c9:0d:2e:67:50:d1:84:40:e8:1a:36:bb:20:34:
         73:f6:77:df:9e:e3:8c:bd:84:9b:a8:7b:b3:59:74:f0:3f:81:
         72:27:10:29:53:9f:d3:3e:a0:95:4c:ef:46:6c:1d:22:26:44:
         4e:3d:d5:45:ad:17:21:73:13:50:1b:31:97:7e:27:c8:7c:d6:
         4e:81:c2:e5:22:01:ed:a8:3b:ce:4a:fc:0d:35:30:c0:c8:8a:
         c2:d9:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:25:30 2025 by rpki-client