Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/9c616a97-4e5f-3c08-a99b-c273786acbca.roa
File:                     9c616a97-4e5f-3c08-a99b-c273786acbca.roa (raw, json)
Hash identifier:          SR87o4LMZciey1TN/cauZ3WsxiSzUaemNweq9BNoiAo=
Subject key identifier:   77:22:29:EE:B0:B8:96:0A:74:94:A6:FD:E7:7E:4D:FB:AE:66:4B:E9
Certificate issuer:       /CN=70e06abf-51dd-4cb1-873b-6ecca4436f98
Certificate serial:       010D0C9F4328584A2C2016E6E4404EDA52515C80
Authority key identifier: AF:57:52:B8:3D:0F:2E:1D:F7:55:A3:9F:0D:65:8B:41:44:89:62:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/9c616a97-4e5f-3c08-a99b-c273786acbca.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     8075
IP address blocks:        192.64.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/70e06abf-51dd-4cb1-873b-6ecca4436f98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/70e06abf-51dd-4cb1-873b-6ecca4436f98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:16:e6:e4:40:4e:da:52:51:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e06abf-51dd-4cb1-873b-6ecca4436f98
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=f92e93d9-2798-47a1-b419-15f3d3f27926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:13:06:61:cc:e6:2b:5b:d8:9a:60:da:b6:
                    80:7c:9a:32:35:6f:27:da:16:ac:8e:56:46:b6:a2:
                    2e:96:ff:04:d6:8c:45:6a:c4:ef:98:2b:f5:68:db:
                    2f:75:c5:37:53:6a:5f:62:33:41:6b:50:16:03:51:
                    2e:dc:b2:29:e1:7d:08:60:ce:70:95:22:c4:d5:63:
                    b2:51:43:2c:82:8f:23:0e:93:ac:cb:65:bb:e4:95:
                    88:61:69:54:ce:14:8a:20:e6:e0:2b:f8:9e:ad:fc:
                    9c:d6:98:77:e2:32:c5:0d:29:9e:6b:d8:90:bb:84:
                    e3:4a:62:5f:e1:6e:be:68:ac:88:04:54:00:cf:1a:
                    74:5d:4f:9c:7e:57:41:f9:4f:c9:c7:a7:68:e6:39:
                    db:23:ed:56:9e:fd:d6:f4:a0:ef:1c:53:57:ff:95:
                    f4:b4:07:2f:a5:19:c8:13:dd:95:b7:0d:09:7a:68:
                    fe:ce:d7:b3:a2:f9:ff:ca:51:05:42:71:ec:06:d9:
                    ba:68:a3:8a:b9:e0:eb:c3:ab:4b:39:41:d9:22:3a:
                    94:de:fa:00:09:89:d9:36:4e:70:56:80:57:02:c4:
                    33:82:9b:f3:f6:59:af:b3:1f:3e:24:b0:95:a9:4a:
                    0e:66:4a:22:25:51:75:7a:dd:df:67:d0:78:db:f1:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:22:29:EE:B0:B8:96:0A:74:94:A6:FD:E7:7E:4D:FB:AE:66:4B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/9c616a97-4e5f-3c08-a99b-c273786acbca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/70e06abf-51dd-4cb1-873b-6ecca4436f98.crl

            X509v3 Authority Key Identifier:
                keyid:AF:57:52:B8:3D:0F:2E:1D:F7:55:A3:9F:0D:65:8B:41:44:89:62:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:41:c7:fb:89:95:42:cf:7a:ef:de:44:85:ec:13:b1:5f:2d:
         f7:22:ee:6b:37:20:2c:06:f9:11:5f:f2:4b:40:fd:d6:bd:1b:
         4d:1b:7a:32:11:26:76:24:1e:cf:cd:b4:b6:1c:b6:1d:61:96:
         a7:c4:96:99:60:e3:21:4b:2a:d2:67:e3:6b:ff:5c:96:c9:ca:
         6a:40:92:5e:d9:77:ea:db:c5:06:69:26:62:df:48:51:56:f5:
         f2:48:5b:f4:ea:e0:9c:fa:58:13:3d:ca:07:68:cb:08:7e:52:
         f6:b6:9d:d3:80:b4:f6:d8:d9:3c:a6:3a:1b:b3:1a:dd:f0:31:
         69:c8:fa:14:eb:9a:f8:fc:0a:1d:49:33:f4:60:f0:f3:f5:bc:
         fc:f2:bf:f0:10:5f:1b:ad:de:a2:3c:95:13:87:55:08:6c:98:
         67:d5:50:e1:70:94:3e:62:d9:02:6e:33:21:42:bf:1f:cd:90:
         50:8e:ae:65:5c:9b:d3:36:1f:fc:b7:78:44:84:e6:02:49:08:
         9f:17:80:bf:7b:18:3f:a9:7b:d2:f3:0a:66:d4:28:97:f9:b6:
         97:43:f3:b6:f9:61:6e:f8:94:f1:71:49:b8:a9:2a:c7:e9:43:
         d0:e0:05:c4:33:56:d0:1f:43:cc:4b:28:91:ae:54:cb:c4:dc:
         2d:0a:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:42:30 2025 by rpki-client