Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/9e0430f2-a68a-3dcc-a04c-296c574cb422.roa
File:                     9e0430f2-a68a-3dcc-a04c-296c574cb422.roa (raw, json)
Hash identifier:          1tr8HNsDgJe7CmHjqypl0kYtF2KbG93U5JMbNK4Lhbg=
Subject key identifier:   23:F2:A0:EE:C8:D4:3A:B7:92:84:72:6A:61:90:0D:60:AC:AE:00:CE
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584A4110544B53E11509CE3EF700
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/9e0430f2-a68a-3dcc-a04c-296c574cb422.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     396032
IP address blocks:        64.38.173.0/24 maxlen: 24
                          64.38.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:54:4b:53:e1:15:09:ce:3e:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=ed1ea535-fac0-41c5-b703-a25d3cc78e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:8b:bf:c7:3e:5d:95:55:8f:c7:01:b9:39:
                    d2:63:bd:b3:7c:87:98:d5:56:2e:d3:20:86:b5:78:
                    2c:19:0a:f1:2b:f2:4d:5b:33:a4:de:b5:be:d0:3d:
                    3b:1f:f2:e6:aa:33:5c:38:a0:23:07:c9:78:b2:a9:
                    8c:ad:df:cf:ef:f6:49:12:14:f6:38:e5:74:b0:8e:
                    3a:29:bc:2c:d5:b1:1b:7c:fb:3f:f4:15:ea:e9:a6:
                    16:b3:35:4c:01:11:2b:9c:65:d5:af:95:3e:ea:0d:
                    da:e2:09:47:da:51:68:44:02:23:e4:cc:25:b0:bc:
                    38:9e:f1:4e:03:ae:9f:e7:f6:39:1b:99:39:43:ca:
                    74:7c:e7:22:57:3d:3d:e5:e4:04:7a:3c:7e:04:a8:
                    ea:3e:f6:7a:4a:8f:01:aa:7a:7f:14:c3:31:7c:ed:
                    41:bf:4c:90:02:8d:3e:1d:fd:15:bd:c2:48:ae:09:
                    ac:80:9e:96:1c:67:b1:7e:b7:27:7d:75:3f:1f:4c:
                    3f:5a:4d:41:03:dd:02:e3:e6:5e:56:d1:17:d0:87:
                    a9:c6:7f:04:55:85:88:b5:c2:03:31:61:47:ed:f8:
                    db:d8:87:47:eb:9b:ec:3a:1d:e4:67:a9:0b:fb:2f:
                    13:d8:9b:71:01:5b:b7:97:81:a4:4a:c4:44:38:7d:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F2:A0:EE:C8:D4:3A:B7:92:84:72:6A:61:90:0D:60:AC:AE:00:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/9e0430f2-a68a-3dcc-a04c-296c574cb422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.173.0/24
                  64.38.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:dc:bb:f0:fd:ba:c7:50:a2:0b:ae:a5:04:70:b5:53:26:23:
         fa:c9:90:2f:59:4e:c9:d9:e5:54:7f:dc:86:2a:e1:10:2d:fe:
         95:8d:f4:b5:4a:ba:a1:cb:9b:d7:31:5c:97:b7:12:b2:de:07:
         ee:9a:22:a8:5f:2b:6e:6d:6d:09:00:75:50:82:cb:30:83:9b:
         53:b7:75:71:d9:82:08:9b:e8:f9:12:9e:c6:35:9a:73:2b:49:
         55:2c:8a:c1:f2:2f:84:44:e7:c5:26:c1:4d:92:f5:05:ef:50:
         11:07:e6:38:74:8d:bf:41:72:1f:5b:3d:64:80:09:06:64:a3:
         e5:ef:cf:0b:04:cb:35:3f:bb:dc:b7:6f:a2:3e:d1:eb:cf:aa:
         07:9c:78:58:0d:15:70:2c:f4:ed:83:38:ff:a8:06:67:ae:ad:
         39:ba:32:31:6d:b6:c8:4b:91:f7:63:5c:56:b2:0e:03:70:44:
         5f:e1:e6:95:cb:f4:b8:e7:52:5f:36:27:dd:c3:44:99:d0:15:
         24:40:af:af:72:60:3d:31:62:2b:ff:43:bb:99:f0:28:32:75:
         e4:26:fc:63:45:1c:41:42:e8:01:a4:64:4e:8c:12:27:a1:1e:
         9e:b9:4c:c6:ce:bb:fa:ed:e4:ae:56:ec:e4:8d:13:3a:ec:fd:
         0a:68:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:16:11 2025 by rpki-client