Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb613705-3a78-389a-87a5-46a5cf41bc2a.roa
File:                     eb613705-3a78-389a-87a5-46a5cf41bc2a.roa (raw, json)
Hash identifier:          FSPcBfVpGbE9Nz+id2F6+omu2WCqIUjRnQpa9lzEqDA=
Subject key identifier:   D9:EB:D4:84:03:1F:69:EB:86:0E:59:12:1F:8E:F0:30:11:FF:DB:68
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B67979B29A5B75BCB8E6CD680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb613705-3a78-389a-87a5-46a5cf41bc2a.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     36492
IP address blocks:        64.9.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:9b:29:a5:b7:5b:cb:8e:6c:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=4f75cf78-2631-42bc-9f63-a02cbefcb5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5b:a8:b8:50:ac:3c:8a:38:f2:46:43:78:7c:
                    2b:7b:d4:8b:53:21:e5:ca:d9:52:3d:a7:50:49:d6:
                    12:b4:a1:cd:fb:34:9c:39:40:8a:77:6a:40:26:e1:
                    49:e6:67:b2:b5:87:15:38:31:49:0a:9f:34:ff:2f:
                    16:ce:2a:ed:29:61:2e:db:4a:f9:fc:f4:fd:5b:44:
                    9c:40:89:dd:32:90:5f:78:1f:30:ad:5f:7a:bd:54:
                    c1:ba:79:7f:c5:d5:89:e6:e9:22:5c:8d:fa:0f:01:
                    d1:38:39:c4:2d:73:73:47:6c:1c:f9:4e:b6:7d:5c:
                    38:da:d9:82:84:90:5b:d4:54:d5:5a:c8:33:fb:cf:
                    63:c9:bf:df:06:84:c9:e1:2f:01:ea:e0:1d:3e:00:
                    87:02:27:87:c9:c4:4a:b1:03:be:2b:ff:31:de:0b:
                    71:a4:fa:ae:74:72:80:04:e5:b4:05:c9:1f:9e:d0:
                    53:6e:26:ca:c8:57:5d:c2:6f:28:fc:6b:87:7e:8c:
                    5f:fe:3a:25:ff:4c:bc:8e:ab:d0:36:03:f9:e7:3c:
                    d4:eb:c0:ef:34:14:f4:13:3d:2a:ad:23:67:1b:c8:
                    03:49:c3:c4:36:23:a8:88:5e:16:c9:e8:94:e8:78:
                    b8:cb:92:1d:6e:02:7c:94:50:e3:ea:d5:0c:b5:76:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EB:D4:84:03:1F:69:EB:86:0E:59:12:1F:8E:F0:30:11:FF:DB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb613705-3a78-389a-87a5-46a5cf41bc2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7e:9b:94:83:b2:04:44:f9:90:1c:6c:6b:2a:a8:91:a6:03:
         49:a9:8e:15:78:a4:dc:bc:0d:56:cb:00:24:83:8e:5c:d3:a2:
         68:c7:6a:ae:e2:d2:5a:ef:86:60:c2:42:f1:ea:df:33:67:cf:
         4f:e3:7e:30:26:71:5e:29:2f:21:d3:8c:6b:5d:7b:ee:17:3c:
         0d:97:6b:07:59:9f:a3:42:dc:a0:cf:8b:4e:78:17:67:60:34:
         1f:12:6b:c6:9b:3e:7b:f7:af:b4:54:49:0d:f2:1d:77:4e:15:
         32:fb:de:20:08:9e:e4:13:c5:03:1d:09:67:2f:e2:96:fa:6c:
         94:e6:c8:d4:b5:d0:e5:3b:c5:b4:9d:4f:fc:67:05:f9:f9:0a:
         c9:e1:5c:b2:77:3a:3f:05:fb:19:67:47:50:cb:d1:a9:ee:f2:
         66:b1:b7:7d:f0:9e:f2:ff:06:d2:e6:cd:85:e8:79:43:ed:aa:
         d1:06:cd:49:07:3e:c2:14:96:d0:93:37:ea:10:67:15:77:23:
         63:f2:1d:8c:65:ff:e9:fe:2f:a7:39:8d:e5:29:12:65:11:58:
         51:97:c8:ff:e7:6c:c4:39:5b:cf:df:b9:a3:0c:bf:c9:f6:50:
         b3:cf:dc:23:c4:a1:4e:c6:30:6d:cf:ab:c2:5d:0d:70:33:64:
         c9:3c:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:33 2025 by rpki-client