Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f0374894-7d8f-33b6-a43c-e13198a1f3fa.roa
File:                     f0374894-7d8f-33b6-a43c-e13198a1f3fa.roa (raw, json)
Hash identifier:          zMQaZgXon/RpY1CdoSNgHF3rvrY6+EblfY5Sm4ODi/U=
Subject key identifier:   4C:06:EC:32:84:E0:22:F6:E4:43:4D:72:C4:B2:AE:62:B1:99:22:DF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584A4D58D084364D83F7C3B19C40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f0374894-7d8f-33b6-a43c-e13198a1f3fa.roa
Signing time:             Tue 24 Jun 2025 22:36:57 +0000
ROA not before:           Tue 24 Jun 2025 22:36:57 +0000
ROA not after:            Mon 22 Sep 2025 22:36:57 +0000
asID:                     135845
IP address blocks:        64.4.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:58:d0:84:36:4d:83:f7:c3:b1:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 24 22:36:57 2025 GMT
            Not After : Sep 22 22:36:57 2025 GMT
        Subject: CN=f2002e65-9638-44ed-8476-09131354c933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:b3:9b:b7:35:1f:48:46:06:fb:06:9d:75:
                    5e:89:15:13:39:80:ca:ef:d0:88:b0:b6:e5:48:10:
                    8d:f8:0d:0b:01:80:f9:f4:a6:81:da:57:c3:5e:5a:
                    ca:ef:93:ef:55:05:42:78:34:0b:da:2d:de:8e:7d:
                    37:07:f2:83:d7:96:23:85:54:13:19:63:fa:8b:b8:
                    8a:9d:a0:5e:fa:24:13:53:76:51:de:e5:a7:8b:5a:
                    4a:66:89:61:de:62:f5:45:00:a9:a8:04:98:8d:95:
                    47:93:c3:c2:77:4b:8b:3d:fc:4a:4e:c6:ad:9a:81:
                    01:db:13:34:f7:45:58:10:49:6f:5e:c2:a6:45:79:
                    a6:93:ec:86:62:fc:cf:49:30:76:c3:d0:07:09:92:
                    5a:a5:90:4f:40:29:9f:ee:3e:85:67:21:5b:f4:7b:
                    cb:15:58:98:f0:ca:36:88:be:21:cf:f8:34:db:fb:
                    b1:62:78:47:c3:5d:1a:fb:0b:74:fc:48:91:13:db:
                    aa:84:b1:1e:bc:70:f0:f1:b7:80:ea:34:a3:2a:0d:
                    3c:62:17:1f:63:93:67:60:87:fb:cf:1c:23:63:13:
                    3d:1c:fe:cb:11:1f:82:83:74:a5:ac:02:99:27:ac:
                    55:78:49:fe:f1:14:84:64:6c:66:6e:35:e4:a3:2e:
                    db:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:06:EC:32:84:E0:22:F6:E4:43:4D:72:C4:B2:AE:62:B1:99:22:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f0374894-7d8f-33b6-a43c-e13198a1f3fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:80:3b:5d:12:9a:41:89:ac:24:c2:c8:47:4b:6a:2a:b2:e0:
         01:c0:85:0b:90:b0:76:0a:22:46:52:c8:40:a2:29:c4:87:e6:
         d8:f9:0e:a3:0b:39:f8:5c:1d:7b:af:9c:fe:54:fa:d9:da:8d:
         3a:0b:d3:91:30:79:cb:39:c9:c4:bc:9c:d6:45:da:4f:ff:8d:
         8b:24:5a:6b:1b:24:a7:b0:f3:be:2a:1a:5d:c9:a2:cb:af:c6:
         df:2a:b7:79:df:fa:9b:ee:6d:be:aa:b3:67:8e:ed:76:85:84:
         08:17:f1:e9:3f:3f:4b:dd:78:3f:84:56:93:9e:98:3d:4f:74:
         07:72:f2:c1:9e:02:14:33:2d:ec:22:75:2e:15:b2:aa:0c:27:
         9d:78:8c:c2:bb:0d:de:5c:98:62:ad:48:96:b1:a3:58:29:09:
         96:27:50:6f:89:43:48:49:9e:a2:14:1a:3d:81:68:f2:6c:9a:
         a2:d7:de:3b:82:b4:66:af:29:6f:39:c1:f0:e9:1f:d7:ee:33:
         e0:6f:e8:63:7d:65:a0:b4:9a:42:51:94:2b:fb:22:0e:3b:08:
         1c:1d:16:d8:aa:7a:76:21:06:f9:f5:e9:40:0a:59:c4:3c:27:
         f2:8d:7e:11:07:a7:5b:b4:5e:6c:ea:cf:18:f3:4c:71:01:21:
         e9:35:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:03:51 2025 by rpki-client