Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/387f6db0-20d1-3de5-86c6-570f32283f2a.roa
File:                     387f6db0-20d1-3de5-86c6-570f32283f2a.roa (raw, json)
Hash identifier:          FP2ACqDedsbGxUpvjdaqfalUENK5SVMExk/lU28vTXs=
Subject key identifier:   FF:92:82:4C:7F:3F:B2:CD:5D:AD:54:E7:10:CB:F9:13:0A:66:2B:B9
Certificate issuer:       /CN=4e84d19a-da77-4951-9413-0914c81e76e1
Certificate serial:       010D0C9F4328584B76F28C1243F08CE37C12F580
Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/387f6db0-20d1-3de5-86c6-570f32283f2a.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        64.190.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:8c:12:43:f0:8c:e3:7c:12:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=f33162bc-b0ca-4b08-90c1-a6869ba38b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:a5:16:5d:2c:6f:30:28:5a:c6:98:33:41:
                    fe:5c:df:15:1c:b3:ff:25:ec:64:16:96:b2:d3:17:
                    0b:67:4c:2e:c3:ff:23:b7:c4:c0:16:c9:67:5f:2c:
                    ed:31:86:86:71:dc:c0:2f:a0:3d:36:9b:8d:e2:d8:
                    a2:ed:e3:ed:91:f2:ef:a4:dd:24:b6:65:f4:2d:84:
                    bd:e4:b5:41:2f:4d:c1:78:97:2e:e3:7c:ef:bb:d8:
                    1c:a3:8d:5f:07:3e:24:9f:8a:d7:13:5c:c7:b4:ea:
                    4c:9d:fd:98:51:09:08:18:7d:65:73:e8:64:38:9a:
                    46:8c:9f:1f:8e:b2:46:62:2f:56:ff:dd:23:78:4a:
                    d4:aa:09:0b:80:26:34:7e:8a:22:ce:b3:f9:2d:f6:
                    98:8b:0e:69:8b:f2:28:21:54:5f:19:a6:d3:61:21:
                    ac:13:d9:8d:1f:2c:20:2a:27:93:a8:8f:49:ed:61:
                    6e:f6:78:3e:5e:ff:95:4e:14:c9:43:86:97:a7:f6:
                    55:ad:fc:fa:54:31:fa:17:49:be:1f:38:e4:0f:55:
                    8b:97:c4:4c:36:53:10:e1:bb:89:8c:13:f1:4f:28:
                    aa:43:ae:2f:b2:22:ce:1a:23:40:5a:b6:0e:a9:5b:
                    d0:9f:97:56:8f:1a:bf:38:01:2a:be:39:42:33:51:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:92:82:4C:7F:3F:B2:CD:5D:AD:54:E7:10:CB:F9:13:0A:66:2B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/387f6db0-20d1-3de5-86c6-570f32283f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:5e:4b:43:23:dc:41:23:45:7e:29:95:ef:75:3d:5a:0e:e4:
         ef:86:4b:a7:0b:01:a3:f2:42:d4:d7:ab:81:cb:1c:af:74:64:
         39:f2:1d:43:14:9c:34:00:1e:2c:a9:bf:87:20:40:25:d0:e7:
         d2:79:4a:00:b2:2c:75:4a:91:c0:78:66:34:91:13:d8:1e:c7:
         b4:f3:f4:89:79:2c:97:db:76:ab:d8:2b:6e:2e:38:fb:e5:22:
         cc:70:c5:c3:54:91:a7:e6:95:c5:aa:86:4d:39:4c:e1:0d:e1:
         43:06:09:26:65:45:6f:00:e3:b3:27:c8:bb:dc:4e:b0:17:30:
         e5:f7:d5:29:24:c4:cd:05:31:08:99:b8:69:2f:5a:32:16:b9:
         0e:65:83:16:c3:86:1b:c5:25:4b:78:e5:81:f3:84:25:6f:31:
         0f:13:cc:c1:1c:32:31:ee:76:f0:6a:16:4c:e5:23:42:ac:f1:
         33:30:0a:5a:4c:40:b3:d2:9b:aa:f5:9e:ae:0b:f3:c0:71:b7:
         fc:bf:75:9f:1d:2f:1d:57:5d:ba:a6:52:d5:48:29:d9:70:0b:
         3e:2a:ef:d9:7c:33:b9:58:cf:2e:b9:b3:70:c0:ce:72:89:64:
         91:c2:5d:1e:df:83:bc:74:5f:92:36:b5:fc:cc:39:02:f1:44:
         5e:f2:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:19:07 2025 by rpki-client