Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/acc8e6df-2fca-392e-9a4f-c03d516656d6.roa
File:                     acc8e6df-2fca-392e-9a4f-c03d516656d6.roa (raw, json)
Hash identifier:          hocpEUi4nfe0aVCetFFBpruBNhZ3qhAA/1CxukdQjN0=
Subject key identifier:   73:53:62:73:A0:30:77:34:96:72:75:03:A8:AB:F0:D9:51:83:6B:15
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B6797949E03E18491E569C100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/acc8e6df-2fca-392e-9a4f-c03d516656d6.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     36492
IP address blocks:        64.9.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:94:9e:03:e1:84:91:e5:69:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=51f1e4bd-cf98-4e69-b1f8-8801fdca3e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:c8:83:8e:fa:f4:f9:d4:7c:88:fb:2c:27:
                    d1:cf:ab:12:ed:dc:10:12:74:62:e9:76:92:c3:7e:
                    44:20:fd:ea:e6:7e:57:5b:db:7c:e7:4f:d7:8a:2a:
                    96:58:c2:08:86:ef:31:b4:e9:a0:5b:69:40:ed:5f:
                    bc:03:4e:0a:20:62:17:bf:1c:3c:36:b0:8a:36:4f:
                    33:67:04:7c:8e:0b:ad:58:b7:b8:0e:f8:5f:5a:65:
                    b8:39:aa:5e:5c:d8:3c:b9:8f:13:fc:6a:06:60:fb:
                    5d:91:73:01:17:25:57:d5:4d:a8:38:13:53:06:bc:
                    9a:37:97:a4:01:3b:22:0e:fc:a8:43:e0:e1:43:b6:
                    3f:f1:85:81:6f:e2:59:bd:e6:89:84:44:5e:8c:65:
                    28:7a:58:a6:6f:02:49:ca:01:2e:e4:13:07:b2:58:
                    35:6a:90:2f:36:84:dc:1c:13:00:ab:3f:e9:07:c8:
                    08:e9:63:84:59:d8:57:8a:ae:fb:3e:6a:f4:4f:18:
                    a8:90:6d:9f:41:5b:1c:12:bf:f6:d9:b6:2f:0c:b1:
                    fc:c1:3c:90:aa:89:9a:f7:fe:87:1c:5e:62:75:7f:
                    d0:7a:2f:df:2b:2d:b5:9f:52:c5:9a:38:8c:74:1f:
                    02:d8:7b:20:cb:b0:d4:02:9e:c9:bb:4e:ee:5f:f5:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:53:62:73:A0:30:77:34:96:72:75:03:A8:AB:F0:D9:51:83:6B:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/acc8e6df-2fca-392e-9a4f-c03d516656d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:59:87:8c:7f:d8:a3:db:6d:68:ab:20:c8:c7:73:1f:08:08:
         63:7d:90:63:d3:ab:aa:2d:11:c7:a9:fb:bd:a2:48:16:bf:3b:
         4e:47:1c:38:e5:14:8f:b7:e5:47:42:58:32:c0:e1:66:41:ae:
         36:d4:c0:29:61:af:d1:5b:53:5c:0c:9e:f2:d8:4d:37:06:b6:
         a8:1d:3a:eb:b4:dc:4d:d6:ef:15:1d:e2:ff:6e:52:a5:95:dc:
         19:84:ab:7f:a4:d0:e3:6b:5e:ec:af:97:91:98:c1:aa:06:a8:
         41:2a:d4:8e:23:39:c4:d3:4a:c2:94:3e:65:be:ef:f5:15:72:
         f1:12:20:59:65:3c:c1:b7:e6:2e:75:c4:02:b0:39:e9:a3:38:
         b3:96:11:94:e3:34:8b:ef:10:4d:05:82:05:75:3b:22:d2:53:
         72:45:fe:60:40:e9:f5:78:b1:c9:75:f1:9a:51:80:6a:79:bd:
         14:7c:0a:87:f5:d3:cc:9c:06:59:11:63:f3:95:57:44:55:97:
         f2:1b:f5:e7:fb:7c:b5:50:92:6c:ed:66:b3:8c:57:d3:29:72:
         57:0f:60:35:0b:1a:a4:98:54:18:1a:b4:66:35:3b:db:64:ac:
         4a:0e:d8:ec:f4:a0:4a:b2:ad:9e:51:c5:94:4f:9d:b5:97:60:
         01:c7:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:43 2025 by rpki-client