Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8a8ae4d-9bb4-3ad5-b335-4fa295389e1f.roa
File:                     d8a8ae4d-9bb4-3ad5-b335-4fa295389e1f.roa (raw, json)
Hash identifier:          tAEFcMLrsJ8YNtalz8FCjxa4R7WDIiURR+VAFdv5CrI=
Subject key identifier:   3B:83:B8:47:FF:0A:7F:2A:AB:F5:A4:1A:AE:79:9C:07:51:10:7D:2F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AF0C5E086BE0A6F5B0F740780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8a8ae4d-9bb4-3ad5-b335-4fa295389e1f.roa
Signing time:             Fri 22 Aug 2025 11:33:28 +0000
ROA not before:           Fri 22 Aug 2025 11:33:28 +0000
ROA not after:            Thu 20 Nov 2025 12:33:28 +0000
asID:                     40605
IP address blocks:        64.81.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:c5:e0:86:be:0a:6f:5b:0f:74:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 22 11:33:28 2025 GMT
            Not After : Nov 20 12:33:28 2025 GMT
        Subject: CN=fcbc9daf-3b6d-4dbb-b0f6-bf9eec35a3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:84:84:f5:29:20:0f:d6:67:ef:ca:aa:b1:12:
                    9d:b5:fe:f2:3f:2f:fa:36:f3:79:a3:bd:96:5b:d0:
                    8f:31:62:b6:8d:95:96:2b:2a:37:f2:09:1b:b8:99:
                    7c:e6:73:22:bd:55:92:66:08:58:11:58:25:92:c8:
                    b6:2e:39:d2:0c:26:15:d7:9c:d3:5e:fe:98:b3:27:
                    38:ce:ba:ca:27:10:f5:da:10:21:f7:70:bc:9d:f6:
                    00:ed:b3:3b:3d:4a:40:62:e2:a0:88:e0:33:04:24:
                    1d:c3:38:8d:36:da:17:93:42:6a:9e:45:75:a4:fb:
                    c0:cb:b3:23:a3:96:8a:14:29:a4:50:36:c2:7e:f6:
                    76:52:72:02:3a:ed:ea:65:7e:8e:b4:37:39:4a:29:
                    58:5e:f3:71:d4:d7:d1:d4:53:cc:fe:84:d9:f3:fd:
                    b9:64:bd:17:39:e2:fb:6b:f8:b1:b5:c6:93:2d:8d:
                    ab:8d:6c:b1:34:d7:67:67:f4:99:ce:1f:3d:3d:f0:
                    c1:b0:48:b7:1e:a9:6d:84:6e:97:64:b6:26:f4:c6:
                    5b:ae:f4:d5:62:36:28:8e:94:f2:0e:3e:2b:1a:ea:
                    4e:7e:80:c9:a8:48:64:c4:24:15:8a:62:55:86:52:
                    94:37:99:02:a3:17:82:71:1e:bf:9b:54:63:b9:a2:
                    43:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:83:B8:47:FF:0A:7F:2A:AB:F5:A4:1A:AE:79:9C:07:51:10:7D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8a8ae4d-9bb4-3ad5-b335-4fa295389e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:da:aa:f1:fb:e2:5c:cb:18:70:ed:bf:5e:93:ad:2b:a9:6f:
         26:0b:b7:d5:2b:10:72:1e:a5:f2:aa:e0:9f:7c:74:9f:24:8c:
         36:ee:9d:94:e3:fe:84:85:15:b4:af:1d:ce:71:54:ed:ce:3f:
         92:03:62:1a:dc:02:c1:90:dd:64:e6:00:81:c1:d1:de:38:82:
         b4:5f:69:07:ba:34:ee:0e:c1:d7:4a:7f:eb:24:3c:f9:0a:28:
         1e:79:49:15:57:ff:80:61:c0:88:de:f6:27:9f:5a:34:39:5c:
         93:da:f8:45:9b:cd:ce:de:4a:3a:0c:85:65:85:25:cd:bb:37:
         c5:c7:e2:a4:d3:20:95:e6:e0:3e:a7:0b:54:7e:3a:bd:44:a5:
         34:ab:9e:51:83:82:85:f3:b9:1c:6a:76:be:18:75:e5:c8:1d:
         2d:c4:1e:0d:ce:7f:74:28:ed:7a:a9:e9:a9:91:2f:cf:37:25:
         0d:0f:25:28:5c:35:b0:a5:41:81:a1:dd:cc:b5:bc:02:e2:28:
         2b:a4:78:2a:88:86:d5:22:d2:52:45:ff:b2:cc:19:a3:ba:e2:
         d0:22:35:7e:86:c5:94:f6:db:3d:4b:86:25:4b:fa:1e:24:d1:
         73:aa:88:48:10:ff:99:73:0e:5f:04:7d:ac:95:a9:21:9a:43:
         44:89:f0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:21 2025 by rpki-client