Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5e069b74-d9b9-31e5-ad43-820cd170bd0e.roa
File:                     5e069b74-d9b9-31e5-ad43-820cd170bd0e.roa (raw, json)
Hash identifier:          EuxuY0zgtyypB4kg/GnUutgIGHhaL80Nu+aLbZBHO6g=
Subject key identifier:   25:EC:B5:73:D6:A3:1A:D0:DE:BB:CE:95:AC:CF:BC:4E:61:39:3C:86
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A78513E69F2E716A7BF37900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5e069b74-d9b9-31e5-ad43-820cd170bd0e.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        64.9.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:13:e6:9f:2e:71:6a:7b:f3:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=8bc785f1-3010-4b9b-b02e-30578d628e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:1a:12:ca:bf:3d:09:4a:e0:b8:4b:3c:3c:
                    87:f9:73:71:e1:c9:a0:32:df:11:36:71:a9:95:c6:
                    56:04:fe:85:44:93:00:35:95:e8:47:3a:bf:9e:cb:
                    71:63:63:f5:cb:dd:9f:35:c7:e2:57:3b:c2:2a:cc:
                    04:9b:7c:00:d7:e3:16:51:a2:53:59:89:54:d7:00:
                    ce:52:82:8f:a5:22:35:c5:f5:69:51:2a:38:88:9b:
                    4c:79:08:42:84:0b:75:d0:5c:e5:87:76:77:66:ff:
                    04:c9:10:7d:f5:63:b1:ed:d1:a3:1c:9f:b7:5b:13:
                    5c:fa:6b:dd:fe:59:4b:2a:1e:45:14:e8:7f:0b:ad:
                    31:a5:64:7e:77:ae:1a:46:37:a4:7d:d5:28:15:30:
                    e2:a5:41:11:10:04:1b:9f:6d:06:9d:01:29:d9:15:
                    76:63:48:55:89:39:3b:e2:2c:45:45:0d:24:d6:a5:
                    e4:33:75:57:c9:0e:dd:76:f0:d5:63:d2:b3:83:ec:
                    b8:1f:fb:3a:83:3a:78:ba:59:eb:d9:f8:f6:46:ff:
                    15:42:e9:8e:25:79:1a:ed:25:56:3d:3b:b0:ee:9a:
                    12:b1:5c:c0:40:1f:7c:3f:47:0d:b6:73:18:2c:27:
                    39:3a:b4:d9:9c:03:c5:39:bc:60:54:33:81:0c:67:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EC:B5:73:D6:A3:1A:D0:DE:BB:CE:95:AC:CF:BC:4E:61:39:3C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5e069b74-d9b9-31e5-ad43-820cd170bd0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:19:b0:fa:55:a7:3e:40:1d:b2:b5:a8:d7:39:47:90:e0:78:
         be:38:20:c5:a4:f3:b3:8a:f7:8a:fe:9e:b6:ad:c7:c3:17:2d:
         d4:f6:fe:ca:d8:c9:d6:98:50:3a:fd:19:cd:8c:68:71:ae:ec:
         7c:d6:f7:71:83:62:fa:f6:a0:8b:a0:40:3b:c8:fd:e3:55:9c:
         b3:10:40:a1:61:b2:61:37:55:df:f5:de:3b:fa:c2:d8:3d:b1:
         50:6d:bb:a9:24:21:1c:ab:e8:e1:2f:dc:9a:18:c4:0c:68:e1:
         ee:b3:52:48:bf:17:65:0c:99:12:7e:d4:c6:f6:11:94:5b:6f:
         4a:fa:f8:86:a8:1d:cf:fe:62:d9:61:21:18:d0:7a:e5:9d:43:
         7d:af:98:48:bf:a2:50:69:3e:0e:64:58:da:0d:ab:f7:b3:21:
         2d:5b:24:d4:f9:4b:93:ee:d5:b9:52:84:c9:cd:ad:cd:78:b1:
         57:ab:13:48:70:b1:fc:52:05:07:fd:54:b2:cb:d7:d4:5e:c8:
         cb:4f:93:a7:d4:1a:00:93:26:b7:ec:be:d1:f7:ca:2a:17:9c:
         96:8f:05:c6:0f:98:43:2a:87:85:78:9f:ac:0b:f4:c1:3d:a3:
         89:75:80:2d:fa:39:f4:52:39:44:08:aa:57:ee:0f:f6:8e:4d:
         ea:5d:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:54:28 2025 by rpki-client