Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/054bb6fd-f0cd-3694-892d-cce470f3e472.roa
File:                     054bb6fd-f0cd-3694-892d-cce470f3e472.roa (raw, json)
Hash identifier:          gRJf7zgA2Oq1gNjD97NsotF5GpIxlrkGj7QtGEzKxc8=
Subject key identifier:   38:B2:15:C8:D7:14:FE:F6:44:F4:D4:6C:1D:62:E4:F0:6D:74:F8:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2215924CC308CA6756DA480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/054bb6fd-f0cd-3694-892d-cce470f3e472.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        75.64.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:59:24:cc:30:8c:a6:75:6d:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=ebb0987e-8bd8-49b6-8b4b-20bd6b2215fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1b:10:36:a5:9a:6b:df:12:8f:70:94:d9:c9:
                    86:a0:43:c0:29:31:b2:08:f3:4f:93:ae:67:51:94:
                    26:87:04:fb:14:23:cd:7a:59:94:8f:69:4c:b3:c1:
                    42:f6:d3:d2:d1:69:64:bc:c0:3f:1d:f2:d5:cb:7e:
                    d3:ab:a1:48:16:30:a7:6e:9d:8d:c5:ac:cb:16:b9:
                    b8:cc:22:a8:cf:e9:77:4b:22:74:bf:83:12:bc:11:
                    0a:02:80:01:04:56:e0:b8:75:27:0c:b4:c4:21:26:
                    03:8a:98:71:ec:e6:59:9b:7e:da:3d:27:41:73:80:
                    d5:fa:a9:95:b6:d5:a8:c6:5b:9f:37:b3:6d:bd:29:
                    65:da:52:88:50:08:d6:57:2d:cc:94:0d:f6:09:69:
                    0e:be:fe:73:ce:98:a1:99:77:d3:dd:6d:5e:88:c3:
                    f0:d7:00:28:5f:21:5f:91:8b:2c:58:c9:6d:2b:13:
                    12:1b:80:9b:29:0e:ae:f9:0a:5f:de:94:09:59:da:
                    f6:c7:60:77:df:72:1a:59:c2:09:b1:d9:dc:8a:45:
                    2a:ac:e7:31:b1:c2:68:ef:c4:14:13:81:87:4b:76:
                    d5:e4:5b:3f:fa:94:bb:e5:92:2c:20:cd:b2:91:62:
                    96:6b:c7:fe:94:e3:f3:6c:cb:ff:41:33:b7:b2:b9:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B2:15:C8:D7:14:FE:F6:44:F4:D4:6C:1D:62:E4:F0:6D:74:F8:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/054bb6fd-f0cd-3694-892d-cce470f3e472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.64.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:a0:b3:8f:8b:fd:5f:42:b1:f7:5e:b6:cf:55:e6:a2:76:c8:
         c2:e9:0d:68:cf:df:53:b0:07:5c:ec:c7:c5:74:ae:f8:1f:a3:
         9c:c6:3f:2d:70:34:e8:f9:4d:ca:de:5b:dc:c9:7d:29:64:e7:
         a4:ea:22:98:34:b1:84:ef:c3:89:48:21:70:a3:8e:e3:b4:4a:
         b8:27:a6:b7:e5:18:d1:4d:c2:fd:67:cb:f4:ef:35:09:ef:32:
         92:c6:9c:b2:2a:02:4f:f9:2d:99:7e:3c:a5:bc:65:b6:d6:d1:
         8f:45:89:42:94:24:76:66:46:91:ea:09:93:f1:a5:20:f9:f5:
         86:5a:9d:8f:64:c0:16:cb:47:c8:60:9f:15:98:96:d6:a8:a2:
         b5:b2:1b:5f:f2:1b:d3:36:18:db:cc:93:0f:76:0b:31:38:f6:
         30:c6:fc:23:d1:18:98:24:ab:82:b9:81:e4:c0:38:2d:4e:91:
         e0:7c:c8:52:bc:16:b2:74:95:19:65:8f:1a:b9:b5:b9:ed:30:
         3d:e1:a9:c8:93:d4:87:e0:c5:7a:ba:e0:6d:ab:67:04:0b:df:
         19:55:4c:2a:da:2a:08:3d:5f:d1:55:39:0a:c3:72:1f:2e:22:
         10:6e:54:d9:a6:b0:6b:b0:67:84:2e:7f:9e:91:a7:fc:4b:e2:
         a9:f9:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:05:47 2025 by rpki-client