Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa
File:                     b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa (raw, json)
Hash identifier:          2ioag57Gz0ijRwSLEQmbJ/CIjB8dJrCSz8sACdA0zj8=
Subject key identifier:   5B:59:64:66:71:9C:A9:A4:A1:4F:C5:DE:53:A9:58:29:7D:76:01:B2
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F4328584ADA9BBE81EC2028E14A094F80
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     199925
IP address blocks:        64.72.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:be:81:ec:20:28:e1:4a:09:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=b6484293-f28b-4e26-9706-6b0585f40419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:50:37:df:55:74:84:ab:cb:03:65:f5:24:
                    93:2e:77:04:2c:d8:8d:9e:6a:15:67:44:5c:9a:39:
                    6d:79:76:3e:af:42:aa:ff:cc:02:8d:e9:59:04:de:
                    74:e6:c7:c6:70:81:2a:c4:3c:48:12:fb:18:c7:33:
                    6a:9d:59:98:dd:2e:88:a2:40:05:fd:be:be:40:c6:
                    a1:b3:ae:48:78:4d:a4:53:aa:8c:a3:43:87:8f:25:
                    b1:d4:66:01:8d:dc:c8:07:ba:e2:4a:69:a6:28:98:
                    61:44:c8:f4:cc:f5:c6:96:52:f2:6a:25:a8:37:fd:
                    cd:bf:8d:ac:8a:17:c8:b2:51:68:01:f5:a8:42:87:
                    6c:3d:63:a6:8f:6c:14:4d:06:e6:57:fe:14:91:c3:
                    c1:0d:9f:46:e6:44:a7:f7:ac:4d:a9:d5:a4:54:a5:
                    fc:85:9d:33:48:a3:64:d2:b0:38:09:67:50:56:6c:
                    08:5f:af:5f:a2:a9:58:bc:d0:22:58:46:b4:55:26:
                    b9:59:b0:1d:0d:16:5a:0d:d7:85:4a:2e:e2:72:d6:
                    e3:c1:f9:bc:87:2e:ce:6a:76:93:fa:30:12:76:c6:
                    3e:94:02:a2:5b:69:c7:cb:55:e2:cd:77:50:60:2b:
                    e6:33:3c:a2:29:56:23:09:de:38:8e:57:9d:da:65:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:64:66:71:9C:A9:A4:A1:4F:C5:DE:53:A9:58:29:7D:76:01:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ff:36:46:b3:28:2a:da:fb:1c:5b:ea:db:9f:e1:40:c7:28:
         a4:94:70:d0:71:67:10:32:c2:62:9f:33:9f:6c:9d:99:a7:10:
         56:46:89:5b:88:43:58:58:d5:a4:4a:3c:bd:f2:52:24:0c:91:
         5f:39:19:fe:49:b0:20:cb:30:4f:03:2e:b2:02:5d:39:06:56:
         9b:5e:10:9d:da:fb:13:01:e5:06:7b:64:c8:50:37:66:86:bc:
         0d:f9:13:a5:bf:17:e2:69:ea:29:0d:b3:48:dd:50:9b:cc:a0:
         2e:bd:dc:1a:ac:3e:90:69:5f:c4:3e:46:f5:5b:aa:35:8f:96:
         f3:0d:19:f5:b9:97:4f:80:0d:f3:fe:54:df:15:b3:32:5a:08:
         f4:00:02:de:b5:82:99:4e:6a:0d:2d:6b:89:79:e6:08:fc:f0:
         cc:f5:1e:ce:47:fa:c0:e6:0f:8f:ae:54:84:64:58:72:28:14:
         c4:ce:27:eb:b7:52:38:73:a1:72:bc:45:89:30:df:17:52:94:
         04:3e:e1:1e:09:64:0d:75:ab:37:fb:50:b6:60:53:82:c9:20:
         6d:3e:e9:1a:c3:b8:3b:79:61:65:b6:b0:de:97:8c:27:02:32:
         62:0d:2b:39:87:22:89:ba:99:c2:56:9c:df:63:0b:38:41:fe:
         d7:f9:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:45 2025 by rpki-client