Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/ecb03ccd-4052-3fc8-a695-fa9b25294560.roa
File:                     ecb03ccd-4052-3fc8-a695-fa9b25294560.roa (raw, json)
Hash identifier:          hWyZGKlFw1dqYKgx5NztCX9Gri8C+2mxSzZtvBzYO64=
Subject key identifier:   39:9A:0E:3E:0D:D8:0C:A7:CD:CE:0C:C1:D2:8F:D2:E0:EC:B3:DC:F2
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F4328584A9FFB98A38E3E5918B3E75A78
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/ecb03ccd-4052-3fc8-a695-fa9b25294560.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     62695
IP address blocks:        208.64.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:98:a3:8e:3e:59:18:b3:e7:5a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=a51f20f5-e071-4612-99d2-6a2d02536e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:35:e6:f4:f4:ef:bf:9b:15:29:4b:4b:dc:
                    4e:8f:bf:2f:09:5d:8b:b0:18:84:8c:d9:7f:7d:60:
                    98:ff:c6:aa:20:b7:fa:c1:4f:62:a7:91:09:6c:83:
                    77:9d:32:20:66:3f:f1:5c:cb:8f:01:89:db:1c:bc:
                    39:2f:4f:ab:89:23:14:23:a8:59:ae:da:99:32:95:
                    dc:28:81:97:0c:bd:df:b1:b4:5d:a8:b3:e4:c3:fc:
                    91:d2:d0:3c:90:40:16:b3:db:d5:d5:77:2c:9e:f3:
                    49:e5:5f:46:f6:75:9e:6c:ea:9e:7a:c4:2e:02:74:
                    4a:7c:74:56:31:2a:10:10:a0:6d:2c:26:89:54:32:
                    0c:35:04:49:a4:c2:c4:31:9e:d6:ae:88:09:21:83:
                    f2:a2:b8:96:98:78:e9:df:24:10:99:8d:34:1a:8d:
                    d1:12:8b:8e:92:aa:2e:01:19:07:9d:c5:57:66:08:
                    28:62:45:db:81:b0:3f:1c:da:d6:d8:34:ed:32:c5:
                    44:9d:63:a1:25:ea:06:b0:7b:3b:35:ba:02:bd:1e:
                    fb:0b:13:8a:12:cc:7c:22:f2:b6:99:c9:b8:c2:1e:
                    e9:79:81:8e:a0:f7:bb:d8:12:e7:ea:68:14:d6:fd:
                    7e:42:8c:a4:2d:91:fa:89:ae:02:03:0b:26:ce:28:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9A:0E:3E:0D:D8:0C:A7:CD:CE:0C:C1:D2:8F:D2:E0:EC:B3:DC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/ecb03ccd-4052-3fc8-a695-fa9b25294560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1d:f7:af:e4:fb:46:93:b4:da:3a:92:d8:30:30:73:c3:a3:
         bd:31:f9:ff:ae:a0:5b:4c:ed:fb:07:dc:59:c6:63:6a:0b:ae:
         7a:c6:38:08:48:cb:f9:ae:ac:03:2f:cd:18:3a:1e:7a:ab:b3:
         8a:e8:8e:1b:a6:7e:6a:82:53:24:5d:47:76:7c:f9:90:47:2d:
         1c:6c:58:4c:05:a3:22:4d:56:13:09:b2:b5:4d:8e:61:d1:54:
         bd:ce:58:f2:d5:3e:d8:a9:24:cd:be:74:3d:bb:6c:56:3c:d3:
         a5:6e:98:1f:f3:9e:38:a0:83:32:8e:7b:f4:cb:92:c2:42:ea:
         18:f8:3d:81:09:6b:54:1e:1c:b3:d1:37:0a:4c:80:c2:9b:cd:
         6c:5b:64:1c:59:cc:43:23:42:09:e4:00:1f:5d:36:98:73:95:
         da:c6:3b:76:3e:76:d1:12:9f:2a:b3:77:5f:3c:5c:60:a9:56:
         a1:7a:f5:64:85:ce:bd:cf:8c:67:e5:58:d8:a0:6a:01:5d:9f:
         3c:3b:9a:c1:6f:b0:40:ac:ba:c9:a3:0f:07:a8:0c:8f:d1:f4:
         14:bb:1a:ed:76:48:85:c6:f0:f8:53:a5:55:55:99:fc:41:81:
         b9:e6:cb:48:69:62:c1:cd:a3:4a:85:d4:80:50:16:12:81:2d:
         8b:63:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:26 2025 by rpki-client