Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa
File:                     42218378-fc67-3b7b-af80-93064b4e7d2a.roa (raw, json)
Hash identifier:          S22gskTCDP7oct2HOcIziry9kSnWYXRUCIRiuc+WiBI=
Subject key identifier:   C9:DC:D3:F4:CE:0D:72:B5:8F:FB:82:26:E9:03:69:58:03:5F:07:3E
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584AB220BE59BDC08DD7BEBFB980
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7131
IP address blocks:        64.86.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:be:59:bd:c0:8d:d7:be:bf:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=ddf11c9d-f5a2-4b6f-a347-dd79d79074bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:61:d8:00:5d:26:75:00:74:6a:07:75:60:
                    27:93:3b:2f:fc:0e:23:41:39:22:e3:e5:31:d7:cc:
                    3a:bc:26:b1:45:7a:63:03:72:07:bd:36:96:07:b4:
                    0b:6b:b6:ae:c0:88:21:1c:7d:77:47:68:9f:9d:6b:
                    eb:17:ec:33:58:a3:22:5f:03:d7:8f:51:f7:e3:ad:
                    3c:03:41:9a:fa:16:76:32:25:71:bd:29:f8:d3:73:
                    bb:2f:18:ce:ac:5e:6b:be:c6:00:8b:19:73:8d:8e:
                    74:8b:41:20:3f:c2:11:35:b6:5b:a7:81:c5:f0:a9:
                    9b:0e:d4:f5:9f:01:ef:d5:93:de:c4:c0:8e:0f:da:
                    c0:2c:3e:8c:01:54:4d:93:12:44:7a:fa:02:28:fd:
                    1c:12:08:db:dd:0c:18:bb:e4:66:57:66:f6:8d:14:
                    46:a2:dd:46:07:fc:27:d0:75:f3:ba:83:53:3d:51:
                    b3:77:05:bc:a8:1d:05:10:d6:ca:3b:1f:82:87:1d:
                    78:af:81:e3:ae:64:f0:6b:06:31:63:8d:5d:0a:90:
                    e6:41:d8:e9:27:ad:be:0f:f9:1a:99:ee:db:41:8d:
                    2c:2f:52:4e:c6:d0:d4:d1:fa:3d:3c:47:75:46:62:
                    25:9a:4e:0b:3b:d8:ee:1e:5d:dd:f9:40:1d:f9:69:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DC:D3:F4:CE:0D:72:B5:8F:FB:82:26:E9:03:69:58:03:5F:07:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7e:9b:77:52:53:7e:ad:ca:29:89:88:b7:74:6b:1a:38:ce:
         7f:4c:5a:aa:21:07:74:3c:45:d0:bc:05:9e:d7:ea:d3:02:a5:
         86:2e:7a:09:f3:00:82:95:ef:fe:6e:69:86:69:4b:6b:c4:b2:
         8e:f2:e0:7d:e4:03:aa:5d:13:d3:e5:34:12:91:98:f7:0f:33:
         d8:f1:92:1b:14:c6:aa:b9:57:93:12:fb:03:a8:f8:1e:49:24:
         8c:50:c8:e9:a6:01:a7:bb:c3:68:ae:76:0e:ca:e7:9e:4e:20:
         74:b0:1c:7e:c0:7f:02:64:32:3c:c0:45:32:e2:14:9b:39:d7:
         1c:1f:d7:ce:ca:05:e9:35:32:78:96:e6:15:28:a4:da:d6:d3:
         d6:3f:60:15:e8:bb:03:bb:f1:76:01:6f:a1:3e:a9:ce:76:11:
         fb:05:8b:8d:0b:d1:cb:cb:04:fb:96:c4:89:86:8e:ef:81:88:
         0e:95:3c:78:ed:10:be:c4:58:50:5e:d8:b3:1b:9e:c6:9a:4b:
         ed:2f:a9:bf:8b:13:b1:62:7e:26:e5:23:a3:dc:b5:46:21:a9:
         8f:e2:a1:96:50:a7:dc:1d:56:b7:63:1d:5a:76:e4:cb:2b:52:
         92:f8:56:1a:f4:ac:c1:85:46:df:a5:b2:39:c1:b1:39:cf:68:
         25:bd:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:11 2025 by rpki-client