Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/316d5247-aaf6-3be5-988d-6a39f57fc1a0.roa
File:                     316d5247-aaf6-3be5-988d-6a39f57fc1a0.roa (raw, json)
Hash identifier:          6/ciFz4k7O2GtFMjyiWUeXmMvhId2PJ7e4MWibkbuw0=
Subject key identifier:   AC:0C:B6:CE:6D:33:BF:ED:D9:17:53:C3:68:56:D8:16:A8:F1:58:3C
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584AB650EEF4ADA82E0E873C4E00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/316d5247-aaf6-3be5-988d-6a39f57fc1a0.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     10728
IP address blocks:        64.133.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:ee:f4:ad:a8:2e:0e:87:3c:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=c1dbc12f-03ad-44ff-b8d7-de3d37d096a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:27:b3:3a:c5:c3:17:bf:73:97:29:3a:09:8d:
                    cf:57:ca:e7:47:53:c7:9a:27:3e:1e:b0:98:07:0d:
                    79:52:10:63:19:44:93:8d:32:bd:bd:44:36:bd:77:
                    4d:d1:6b:bb:3d:c8:9d:4a:eb:07:ad:c7:bb:13:5d:
                    f6:6f:f2:c2:04:d1:65:8c:e4:49:4e:6d:23:77:69:
                    73:1b:48:c0:69:1a:5e:73:12:f6:74:17:c4:b1:25:
                    74:3a:c4:54:68:73:6c:9d:29:b4:b4:cf:db:a0:31:
                    35:29:6f:4e:35:52:3c:76:52:c9:13:65:49:ff:94:
                    42:a3:80:66:44:6e:a9:cd:19:56:19:ae:0b:65:95:
                    5d:95:1f:23:32:83:16:77:8f:c9:96:9a:9b:37:59:
                    62:9f:41:5a:5c:12:be:54:2f:70:45:5b:c8:1f:05:
                    72:a8:6b:5a:1b:b2:b7:0b:4d:ff:6d:d2:c8:47:d0:
                    b8:b9:5c:7b:49:fb:7b:d3:2b:0f:cd:2d:4a:e4:91:
                    f5:7f:d9:1e:c6:a7:7c:7d:13:db:79:ac:7f:50:0f:
                    74:d0:75:aa:1f:ee:83:61:3a:0f:c8:af:8c:78:c4:
                    65:11:ca:32:02:8d:85:04:5d:e2:6c:9e:f4:5c:84:
                    e0:ad:f3:d9:40:00:c9:2e:90:17:2e:77:02:5d:ad:
                    e0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:B6:CE:6D:33:BF:ED:D9:17:53:C3:68:56:D8:16:A8:F1:58:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/316d5247-aaf6-3be5-988d-6a39f57fc1a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.133.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:8b:87:e5:93:8e:72:0a:d3:44:f5:3f:55:77:3e:bd:1a:77:
         8a:08:b1:dc:2a:c7:91:f3:44:b4:b1:76:14:b8:26:62:5f:5c:
         ed:a0:0d:93:22:55:32:1a:53:8f:54:f1:3d:3e:c2:44:5f:2c:
         3d:36:c1:3b:ec:46:85:98:05:ac:d4:f2:cc:4d:e2:a0:db:b5:
         9b:72:06:a5:1a:8c:ac:1d:f6:22:f5:9f:18:07:f2:3c:94:37:
         74:5e:53:99:19:81:79:df:11:24:54:a5:62:2c:0d:f3:cd:0d:
         9b:71:15:b6:2a:41:93:2e:a1:f9:9d:63:1a:52:30:17:3e:69:
         16:0d:de:b4:ec:bf:d1:54:d9:f7:69:3f:75:39:14:f1:32:a6:
         3a:1b:9b:86:91:d2:0f:31:26:52:c3:d4:a8:01:df:ee:de:b6:
         be:56:ce:3c:4d:cf:2c:b3:34:20:40:4e:ad:6c:ac:b2:dd:37:
         77:d2:2a:59:44:a0:9f:2a:c1:0d:10:41:96:9f:f5:91:0a:e3:
         23:9f:c0:fa:b6:2d:be:3c:e2:ed:d8:cc:ee:fd:7a:d4:2a:59:
         89:15:f1:c0:40:26:05:4b:4d:23:85:da:b3:d9:a2:00:d4:79:
         81:b8:65:31:d4:20:b8:60:22:2e:d7:4f:40:d2:54:46:3b:0a:
         cc:c1:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:06 2025 by rpki-client