Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/22462045-0f49-3605-a54f-c563d7c70b53.roa
File:                     22462045-0f49-3605-a54f-c563d7c70b53.roa (raw, json)
Hash identifier:          28iKmR5pjutDVMdcKg44CamwmK2B6qcZC0q8q4ueVag=
Subject key identifier:   69:D6:A4:9D:45:E4:12:AE:58:DB:2C:09:BE:E6:2D:23:AE:46:2E:DA
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F43285849E7BA77F4001C39A87F0490C0
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/22462045-0f49-3605-a54f-c563d7c70b53.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     11572
IP address blocks:        64.38.250.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:77:f4:00:1c:39:a8:7f:04:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=9a25764d-c96c-44e3-88b1-79880c9e22e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:f3:e4:9f:f6:5d:c6:80:4f:5e:5c:7a:3f:
                    8e:0c:b7:12:80:f8:f1:b5:f3:95:75:95:47:b4:f3:
                    c5:06:ff:19:b7:0c:2e:3d:c0:1c:7e:03:34:d5:87:
                    3d:21:dd:84:24:9f:53:76:cc:5d:a2:a7:46:5b:4e:
                    d5:24:89:51:b0:f8:0e:2a:87:c3:5e:a4:ac:d7:aa:
                    f5:ac:f2:cd:6c:9f:c4:91:69:0c:ce:32:96:16:9f:
                    5f:c8:19:5c:6a:c6:5c:ae:1f:14:a3:89:c5:c9:5b:
                    07:18:62:e7:ea:b6:b9:c6:aa:bb:4f:b4:2f:17:f1:
                    9e:0b:61:a9:c6:63:a8:d1:6d:7f:05:28:88:34:a7:
                    0b:b9:26:b1:bf:9d:7e:65:a9:31:99:00:6e:53:ab:
                    c9:c8:6c:a6:ce:e5:e4:5b:e5:0c:ed:45:f6:06:68:
                    47:e1:00:42:b7:2e:37:3a:34:b9:9b:b3:29:e5:b2:
                    07:ce:1c:01:b8:5c:33:9e:70:db:04:82:8b:5a:a6:
                    75:92:a0:4a:0f:9b:bc:0a:8f:d4:f8:23:51:5c:f5:
                    f5:19:2a:01:7a:bc:25:20:47:5d:39:d5:37:5d:65:
                    98:12:1a:85:b3:5b:38:ff:b3:3f:d8:d6:68:34:7c:
                    f8:45:24:5d:22:1d:96:4c:52:b5:30:50:3d:5e:41:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:A4:9D:45:E4:12:AE:58:DB:2C:09:BE:E6:2D:23:AE:46:2E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/22462045-0f49-3605-a54f-c563d7c70b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:08:cc:8f:1c:5b:79:b9:52:b2:2b:0c:d9:4b:ff:a7:55:c1:
         8b:68:ca:c6:c1:83:58:fa:e5:de:3f:20:49:9c:2f:3f:12:e4:
         d5:de:26:f1:24:42:32:16:e0:8b:f6:17:35:7f:3d:61:01:22:
         6b:9c:0f:ce:9f:42:f7:c6:47:0d:1a:ce:c8:ee:b5:17:6c:b9:
         1c:8a:ed:b8:51:02:fb:46:bd:f2:2f:1a:f1:56:02:e9:fa:81:
         cb:82:b3:d6:63:9e:e6:57:8f:42:42:45:44:c7:8f:7f:d7:c0:
         b2:38:ab:0f:d4:73:4b:99:55:ac:84:7b:8b:45:11:4d:7f:9b:
         56:cb:33:65:91:78:ae:c9:a4:39:75:05:60:b6:a0:15:e2:44:
         63:e0:de:99:01:dc:8f:6e:0a:5d:c6:38:67:7e:3b:95:a4:71:
         1b:a9:a4:28:12:77:91:d2:49:5e:13:0a:df:b8:7c:ce:93:27:
         4d:66:5e:06:59:31:c8:e6:ef:57:2c:2d:83:9e:40:55:a9:a7:
         1f:0f:e9:f2:4d:7c:a6:fe:51:67:09:3c:7f:ef:97:b2:e1:ac:
         42:db:d8:d3:bb:57:d3:16:c5:2e:85:6d:d9:b3:b3:ff:74:cb:
         e1:be:24:ca:88:1d:f5:d0:3b:3e:7f:1b:88:28:f2:da:f8:82:
         72:75:45:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:31:10 2025 by rpki-client