Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa
File:                     1c64bc7d-a302-3320-bca5-35577df76424.roa (raw, json)
Hash identifier:          9739IzegfbkFO4byCNWE54lMF7XasJbr4cLHfPhSdRg=
Subject key identifier:   BC:AB:1C:64:54:E5:A6:44:B8:14:B0:19:AA:5E:BD:AB:58:D2:C2:8F
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A0C05748DECA9E63CA3E812C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     13768
IP address blocks:        64.34.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:74:8d:ec:a9:e6:3c:a3:e8:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=fcf7c3fc-50c3-4efc-9c6a-e9272cbb12df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:75:99:a7:51:b8:24:1c:1b:73:6a:64:1e:
                    37:61:fe:7d:0f:b1:d1:bc:f5:7e:97:aa:28:44:19:
                    8a:4f:1d:7d:b0:e4:08:67:5a:10:47:32:c1:ba:70:
                    56:59:d5:5e:80:e3:2a:10:ca:5c:66:89:e4:da:25:
                    5f:ad:88:7a:22:ce:08:6e:f3:18:ae:da:7e:ec:ab:
                    1c:f8:f8:26:f6:c7:85:e3:d2:f8:18:0b:04:6a:cb:
                    b5:32:49:00:42:8f:99:7d:fe:65:5a:c1:5c:f8:43:
                    d4:85:41:16:7c:43:ae:30:55:50:9a:24:26:ce:66:
                    e4:44:d1:26:13:9e:f3:8e:cc:48:00:30:10:68:a0:
                    03:2f:97:62:5c:85:00:e3:8d:06:b0:6b:22:29:06:
                    69:6c:78:09:9a:f3:5a:a9:9f:ae:74:f9:39:be:54:
                    21:12:d5:9d:ff:0e:2b:15:57:3d:f0:f2:53:c9:0e:
                    c9:bb:e8:12:f8:64:10:c9:fc:65:9c:c5:a5:a4:e6:
                    d3:84:88:e0:be:e7:2c:78:7d:cc:ae:b4:e7:d3:8b:
                    3e:17:ce:cc:50:cb:c1:df:ea:3a:07:b6:0e:41:75:
                    8f:b8:4c:6a:07:b8:11:ae:ed:d7:b3:c5:46:6e:b3:
                    ad:83:e2:1f:a0:ff:6f:fa:8c:23:67:9c:1b:72:aa:
                    66:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AB:1C:64:54:E5:A6:44:B8:14:B0:19:AA:5E:BD:AB:58:D2:C2:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:5d:4f:d1:2f:8e:b7:bf:ac:1c:4c:b0:8f:cb:bc:0b:be:
         4d:3e:62:f4:6c:91:db:0b:b5:eb:24:a4:97:50:0c:9a:a2:7b:
         aa:71:1a:f2:ee:07:62:4c:aa:25:5f:8c:20:0c:66:0b:e5:fc:
         ba:79:2d:24:1e:2f:2d:d0:98:3c:49:e6:3d:07:a8:f8:cc:22:
         c7:2f:31:ac:a2:7b:8c:92:d2:bd:65:04:fc:8d:d4:df:5a:dd:
         6c:c1:7c:26:41:ed:61:52:cf:66:37:46:61:58:a0:75:f8:44:
         53:ec:ba:9a:42:ec:43:0d:3b:25:26:c3:bc:16:3a:18:f7:44:
         fc:3d:36:df:69:1e:16:0b:5d:01:91:15:2c:6e:c3:f9:ec:40:
         47:0a:2f:3d:2b:1d:e7:32:3c:94:f9:a5:82:01:b8:49:bb:18:
         7c:06:cf:6a:5b:0e:06:fe:4b:ba:fe:6a:4b:44:a4:18:eb:91:
         24:cb:d5:25:f3:ea:d3:33:94:7e:1a:11:01:36:97:d7:26:f8:
         2b:83:2a:8f:6e:b6:c3:91:99:b3:43:69:5a:98:0e:a9:9c:8f:
         89:47:22:c1:e5:2d:a0:43:58:33:f6:2f:94:c8:58:11:0f:8d:
         bc:d2:db:94:1a:1f:19:25:a7:49:3c:0e:c8:b7:ae:33:fe:84:
         14:f9:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:41 2025 by rpki-client