Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45387154-5e3f-334b-9217-bffbcdab101b.roa
File:                     45387154-5e3f-334b-9217-bffbcdab101b.roa (raw, json)
Hash identifier:          xc4AdmbxmeX0wUuhUmp9GA9QAtqy1BJhBTrSeatTJsE=
Subject key identifier:   09:A5:27:1A:A8:74:DB:7C:41:87:14:14:D8:00:31:C2:05:1C:20:D3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5571D978DA9D0BA9B831FF40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45387154-5e3f-334b-9217-bffbcdab101b.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        64.114.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:d9:78:da:9d:0b:a9:b8:31:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=28b0c8ce-2caa-45c2-bdb0-a9fb9acd5cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:b7:b4:da:dd:28:eb:38:86:73:b2:28:13:
                    60:f8:55:49:ab:ac:0f:6d:6f:3e:87:62:62:0f:74:
                    b7:32:9f:df:73:a4:d9:64:45:1a:e6:2e:f1:66:6a:
                    6a:a6:39:cf:e7:bb:38:b5:f8:03:b0:da:95:a4:ff:
                    1c:59:08:e7:9c:3d:10:3d:9e:09:cf:af:c3:5f:2c:
                    65:7a:92:e8:8f:ba:8c:ac:21:04:d5:4d:a7:69:6a:
                    0d:56:a1:21:59:66:13:f3:09:f6:df:6b:f1:fc:27:
                    d9:d9:14:7f:bd:96:84:7a:83:d8:d1:17:6c:96:e5:
                    ab:50:04:5b:d7:5c:39:b1:20:46:8e:fe:a2:ec:74:
                    8b:61:9e:25:72:d9:d2:34:b9:b3:46:c9:9a:ba:7d:
                    ca:ba:bb:d7:ae:71:e5:37:dd:3d:2a:f5:fe:70:96:
                    67:dd:95:2e:5f:45:13:9b:f5:15:55:89:65:f0:fd:
                    b0:26:51:ea:1f:4a:fd:00:cc:5e:56:df:88:d8:60:
                    b0:03:e1:04:ef:69:c2:36:c2:a8:fb:b9:ee:c9:4b:
                    84:25:c2:0e:44:76:f1:a3:2c:dc:4e:54:13:39:0f:
                    42:8a:45:8a:71:4e:14:f6:39:92:1a:5b:db:de:25:
                    8f:f7:78:1e:ea:ab:68:a3:f1:d8:b7:10:e0:ca:7c:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A5:27:1A:A8:74:DB:7C:41:87:14:14:D8:00:31:C2:05:1C:20:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45387154-5e3f-334b-9217-bffbcdab101b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:01:ab:df:ca:e6:56:21:bc:ac:95:94:2f:3c:2d:a4:62:7d:
         72:8a:b0:ab:2a:aa:e9:61:20:fb:8d:7f:d5:f2:ee:89:db:e6:
         67:39:b3:d2:12:e5:10:43:7f:a4:f3:7f:21:af:fb:8d:00:c0:
         e5:48:55:e3:f2:35:cd:ae:53:71:b5:d5:2f:e1:17:01:f8:76:
         5b:4a:fb:c2:53:cb:41:ce:6e:4d:53:d7:8b:cf:7c:5c:c2:e7:
         54:40:6f:4f:71:08:59:c2:e7:c6:a0:94:f3:5e:dc:4f:4c:03:
         63:12:3f:ef:9c:b1:be:a1:4a:25:a1:d0:b1:b0:86:b3:58:af:
         89:6b:67:0d:85:7b:58:6c:d5:16:30:7b:0a:df:28:bd:77:c9:
         c7:68:a6:e8:31:d3:e0:1b:ad:e3:83:94:3d:26:8a:55:06:57:
         11:d6:10:11:74:0e:b4:3d:1e:b3:8f:16:51:d8:94:8e:de:15:
         d3:1c:2d:22:71:eb:08:fb:77:02:ee:b8:0e:c8:a0:8d:9c:f2:
         25:49:17:aa:d6:eb:e5:75:5a:eb:4b:96:96:e9:0a:a4:49:b2:
         25:8a:7d:52:bc:37:1e:1b:9e:c1:25:a7:d3:2e:da:1b:e6:78:
         45:58:22:f4:a5:35:8c:a2:56:1a:a0:c5:8f:e2:78:1b:aa:b8:
         b9:80:a8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:16:24 2025 by rpki-client