Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/c986acf2-bb99-3d07-a932-f6b42ab2f85b.roa
File:                     c986acf2-bb99-3d07-a932-f6b42ab2f85b.roa (raw, json)
Hash identifier:          l8NwCgU+UukHitGzeNRKg5R4OoNBsHDl+IKSrsl49P0=
Subject key identifier:   89:D5:61:0D:64:CE:9E:02:55:A7:C7:1D:7A:89:44:21:F1:36:1A:97
Certificate issuer:       /CN=fd41a5ea-0768-429c-8541-83d829a5518c
Certificate serial:       010D0C9F4328584A46A5B0FD70295ED5E986F0C0
Authority key identifier: F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/c986acf2-bb99-3d07-a932-f6b42ab2f85b.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        64.112.56.0/22 maxlen: 22
                          158.51.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:b0:fd:70:29:5e:d5:e9:86:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd41a5ea-0768-429c-8541-83d829a5518c
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=95755701-9bad-4b85-ac8a-0421de9b48c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:e0:a9:67:04:6f:ea:88:d2:51:01:bd:ff:
                    94:07:69:4f:43:be:84:7a:00:ab:46:ff:34:a5:ab:
                    8b:cf:39:65:3c:40:d5:b4:cc:20:cf:fd:09:19:36:
                    15:2a:d4:75:0e:08:b8:21:a6:ce:0e:a7:85:37:c7:
                    06:c0:b4:0b:e8:ad:61:f8:77:30:eb:fb:ff:72:44:
                    0b:45:09:dc:0c:21:40:c8:a6:c8:0b:fc:6e:b7:40:
                    05:fb:c7:88:41:29:d8:a9:2d:41:f7:4a:cd:d4:0b:
                    e0:96:cb:88:44:8f:78:69:c1:68:4a:a1:cd:9f:eb:
                    42:e8:32:b9:c5:8d:d9:77:d4:da:9d:7a:40:dc:d6:
                    21:f7:04:6a:98:49:b0:75:ea:63:9b:a0:ae:1d:38:
                    54:06:4e:6c:4a:dc:35:8a:3d:ff:f7:fb:3d:a1:98:
                    ac:a2:00:d5:69:f5:71:48:5c:ca:f3:fa:95:3a:7a:
                    bd:3e:bb:a4:25:28:f7:e1:cd:a9:ae:a2:5e:1d:9d:
                    f6:14:b1:70:09:93:02:7a:cc:9a:1a:6b:66:a9:6b:
                    00:e9:bb:b8:de:48:2d:68:11:a5:a4:85:02:95:81:
                    e4:f7:9a:b9:d7:41:cf:e6:d4:96:f0:87:f3:ca:e0:
                    48:a5:df:6e:5f:28:1e:12:69:e6:ae:dd:e6:47:cd:
                    6f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D5:61:0D:64:CE:9E:02:55:A7:C7:1D:7A:89:44:21:F1:36:1A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/c986acf2-bb99-3d07-a932-f6b42ab2f85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl

            X509v3 Authority Key Identifier:
                keyid:F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.56.0/22
                  158.51.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:76:67:24:a7:aa:6f:d3:2d:d7:33:b6:19:e6:bf:8d:bc:c0:
         a2:1a:05:01:b0:c0:0d:a0:7f:c3:80:e4:3f:40:b7:27:4a:03:
         e8:3b:47:c7:ef:e9:a5:05:00:dc:10:cb:36:7a:dc:b2:01:6c:
         ae:38:4c:fa:28:5a:70:0a:ee:86:f1:d5:09:b9:4d:6c:62:a0:
         ea:04:7b:59:0e:35:65:08:37:49:b2:6a:e2:11:eb:8d:ed:17:
         2b:40:b6:bf:e3:c5:cf:f0:ae:7f:96:8b:7e:bd:6f:8b:fe:24:
         0b:89:50:ea:d1:69:c4:1c:ac:a2:0d:24:4a:09:63:ea:e3:14:
         1e:f6:0d:bb:a0:29:7b:73:4b:43:53:ba:41:1c:b4:6d:f7:20:
         ae:eb:25:bd:5f:4e:ae:c2:09:07:9d:24:90:ec:fa:74:83:3f:
         af:db:7d:45:a4:73:ef:15:5f:fd:01:d9:26:9f:ae:31:fa:26:
         af:9a:2b:52:1f:d8:f0:9d:fc:a4:a5:ce:c6:e7:0b:33:53:c2:
         f0:15:a9:82:ca:95:dc:cd:a5:f6:24:a1:02:13:20:b6:b7:37:
         3e:2b:b8:2d:d2:3b:01:47:92:5c:7c:60:64:c7:11:f3:c6:de:
         4d:1c:e0:50:06:ec:58:d6:24:5f:0d:12:44:d1:66:36:52:c7:
         df:a8:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:46:41 2025 by rpki-client