Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa
File:                     1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa (raw, json)
Hash identifier:          1LGk3L67PuAU7yquAEEhUW1fettQij8kpt9eziF2hSc=
Subject key identifier:   7B:6E:9F:08:C5:C7:12:74:40:FD:4A:AC:6C:65:D3:B5:E4:D1:96:8C
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285849DF5A68BF8CB8359BBB2D89C0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     6142
IP address blocks:        64.39.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:68:bf:8c:b8:35:9b:bb:2d:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=6db4a411-90bb-4be0-ad88-89b705a5ed8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:26:86:35:6e:76:d8:d0:6d:ff:98:63:f6:6b:
                    a0:a9:52:07:07:ff:53:5c:a0:22:b5:d4:a6:c1:ce:
                    01:c0:01:4a:08:5b:77:c0:9b:67:94:03:9d:16:de:
                    ce:aa:33:ea:a5:b9:d5:16:c6:b2:c7:01:9a:66:3c:
                    58:34:da:ed:b3:70:9b:16:6b:ec:d8:b2:b2:48:a9:
                    73:05:78:e0:08:94:d5:4e:d1:e5:8b:a2:b1:da:0b:
                    7d:7f:34:7b:24:89:e4:a9:ec:4a:84:1b:49:24:b5:
                    67:75:b0:5e:b5:ea:b8:d2:43:e9:17:4b:46:12:36:
                    08:bc:02:8f:23:ac:84:60:3d:8c:c8:9d:f2:45:f1:
                    8d:1f:4c:6b:03:d8:e3:58:66:af:41:a5:2e:a2:12:
                    a5:ea:61:8f:97:69:aa:cb:78:43:47:71:3e:5b:2c:
                    f0:d9:6d:1b:77:c3:1c:29:8a:27:86:d3:ab:b9:28:
                    6a:d1:07:0c:03:2b:27:ea:8b:5d:ac:58:de:54:9a:
                    5c:60:5a:04:e8:01:3d:96:f3:03:dc:28:e8:a5:c8:
                    6e:51:48:21:5e:2f:33:dc:c2:ac:1f:a2:a7:22:a2:
                    35:be:db:f2:cd:db:8f:2d:79:d6:5f:a4:4c:bb:54:
                    cf:6e:6f:4e:8c:88:64:a5:7e:4d:6c:2e:d1:a6:d2:
                    8e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6E:9F:08:C5:C7:12:74:40:FD:4A:AC:6C:65:D3:B5:E4:D1:96:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d3:00:0e:86:f7:fc:83:e5:17:21:c0:60:a0:47:1c:02:9d:
         16:74:07:cc:9c:2d:b4:fe:66:f3:75:cb:df:e4:57:91:55:a1:
         3c:b5:02:17:dc:35:2f:a2:f7:e1:a6:36:04:f1:18:95:7a:d9:
         21:b3:ba:86:92:12:75:4b:fc:35:8f:81:7e:9c:82:3d:cf:85:
         77:e8:e3:02:16:7e:16:73:00:6d:97:cb:c2:9c:48:d6:eb:22:
         f5:b7:0b:4e:c2:57:2c:81:ac:1b:47:e4:fe:91:e2:e9:09:47:
         f5:4b:c9:e0:94:af:f0:f8:53:6b:5d:7a:b9:6b:51:de:f0:fa:
         92:c1:a2:56:25:dc:7d:6c:86:5c:8f:35:31:1e:72:f7:80:d1:
         51:50:89:11:52:ea:80:52:5f:e8:da:ed:52:72:eb:f7:0e:2e:
         ab:64:b0:e0:5d:fd:2a:4d:93:3a:51:bf:43:ce:7d:ef:c6:d2:
         3a:f5:ac:ff:9f:c8:c5:b4:16:87:e4:1e:47:db:14:12:31:1c:
         ad:97:0a:58:20:34:a5:46:f0:2e:fd:93:ef:80:3b:23:fa:c7:
         38:c9:b4:84:ff:8f:5c:1c:6d:0b:46:a1:a1:fb:43:d8:0b:9c:
         d5:1a:e5:3e:f6:c5:3c:0b:f2:4a:9a:34:68:2d:13:25:89:df:
         95:6f:fc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:11:42 2025 by rpki-client