Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c0cb337b-414f-3564-8295-d4fdcb393471.roa
File:                     c0cb337b-414f-3564-8295-d4fdcb393471.roa (raw, json)
Hash identifier:          q5Kbk3JikIEhsT92ZDm8VBv52/2ODFfuQHnnmamVgxY=
Subject key identifier:   F6:03:F9:3D:C3:09:E2:BA:36:84:D2:F5:F0:8C:E8:81:96:C9:24:BA
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584A4F6E0CCDBCA98F78B15A94C0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c0cb337b-414f-3564-8295-d4fdcb393471.roa
Signing time:             Wed 25 Jun 2025 16:31:22 +0000
ROA not before:           Wed 25 Jun 2025 16:31:22 +0000
ROA not after:            Tue 23 Sep 2025 16:31:22 +0000
asID:                     58212
IP address blocks:        64.22.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:6e:0c:cd:bc:a9:8f:78:b1:5a:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jun 25 16:31:22 2025 GMT
            Not After : Sep 23 16:31:22 2025 GMT
        Subject: CN=d90b0734-e6c4-49c2-ba6d-8076da1b50a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4c:51:c3:2e:28:6f:97:28:08:99:f0:eb:cb:
                    70:54:20:18:af:5a:7a:25:c8:2c:18:9c:dc:a3:86:
                    c5:aa:88:31:78:2c:86:90:70:9a:d2:24:a8:67:10:
                    8f:21:7c:44:63:00:98:e1:a9:0f:96:ba:be:86:08:
                    cb:ba:ab:1b:f7:cd:35:67:a0:5e:90:66:4f:1a:1c:
                    b9:8e:fd:86:c2:a0:49:83:01:21:9b:ae:ff:88:48:
                    b8:ae:b2:46:06:02:6d:18:f7:98:2a:f8:a7:b3:ab:
                    91:fb:c5:e2:82:82:89:52:1f:b6:85:4d:b7:65:39:
                    47:8b:a2:57:e6:d5:05:0d:a3:c5:44:f1:f2:9e:97:
                    5d:7a:0e:b4:8f:46:71:a2:78:25:57:d4:ba:33:fe:
                    ea:12:3f:c1:03:0b:7f:70:57:e6:c5:f4:8d:3e:c3:
                    2e:59:a2:fd:d5:d0:b2:24:45:77:dc:8d:45:dd:10:
                    7d:5c:f6:46:d7:59:8e:3a:8f:51:5c:a4:7d:9a:ec:
                    38:84:f7:0b:1f:c9:90:57:34:93:e8:c2:2d:96:a5:
                    50:72:d2:33:9f:80:0e:ae:c8:26:20:d7:fb:56:9a:
                    da:44:3e:9f:fe:c5:67:75:29:4b:50:b5:20:36:ce:
                    44:67:b8:8e:ae:f5:12:6c:71:5e:e9:1d:93:72:fb:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:03:F9:3D:C3:09:E2:BA:36:84:D2:F5:F0:8C:E8:81:96:C9:24:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c0cb337b-414f-3564-8295-d4fdcb393471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ac:54:45:9b:99:2f:2c:aa:c9:af:0a:49:49:25:b8:43:00:
         fa:f5:54:e6:1b:54:71:4d:86:52:91:3e:cd:d3:39:a2:8e:1d:
         99:f9:80:43:b2:d3:7c:df:35:34:e7:4b:6d:19:b1:7e:b2:c7:
         c8:b9:a3:a6:1e:e0:b5:f5:b6:5d:09:01:e9:e7:24:e9:65:cf:
         85:29:29:f7:ee:ac:86:75:b3:7d:25:fb:72:ab:35:2e:09:63:
         89:4f:fb:5e:ef:60:6b:74:d9:36:d9:0a:98:4b:e6:ac:57:bb:
         8e:91:d9:80:79:2b:60:3c:2f:78:fa:21:4d:ce:33:1d:f9:55:
         9d:7d:e1:14:b9:91:9f:08:e9:30:97:c5:73:20:93:1f:1d:75:
         bc:d9:41:cc:36:0b:d5:32:dc:0c:01:87:ce:00:e8:1a:f9:77:
         13:93:4c:9f:3a:ee:1c:7b:2f:b5:29:2b:5a:a8:c6:d1:2c:4e:
         c0:6a:d2:ac:9d:9c:4d:2d:93:d1:1c:d9:fb:b7:e7:cf:ba:de:
         05:9d:8f:b1:19:b1:2e:61:86:d4:49:63:c7:b1:07:22:a8:dc:
         e2:d0:b2:49:27:59:52:76:56:eb:da:b8:de:8f:5f:6a:28:a5:
         04:59:28:0d:a6:a5:80:52:06:fc:45:96:81:ed:24:b9:f2:8e:
         0e:83:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:27:16 2025 by rpki-client