Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/f6ab5e64-53f7-383b-a1f1-24933c2ee26f.roa
File:                     f6ab5e64-53f7-383b-a1f1-24933c2ee26f.roa (raw, json)
Hash identifier:          1MpK3/zLU+bMmZKGMrvyGg0oHxJxt38jcrDbpm1QxCQ=
Subject key identifier:   2F:BD:02:29:35:58:0E:77:90:A7:B0:67:84:61:76:E1:D7:7E:F1:34
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A093AA20C7EAD9ECFFB0C2300
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/f6ab5e64-53f7-383b-a1f1-24933c2ee26f.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     13768
IP address blocks:        64.34.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a2:0c:7e:ad:9e:cf:fb:0c:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=76987cb0-2ca9-4db9-bffc-f3b881e46dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:72:39:41:bb:fb:8d:21:a2:b3:b2:81:bf:
                    6d:b9:bc:9e:4c:ef:6d:65:8c:a5:dc:26:6f:49:6c:
                    86:f9:b6:49:b2:b4:e3:3a:07:4c:e9:a1:b6:a4:3f:
                    be:22:4d:b3:70:08:f1:f7:23:31:26:3f:d6:6a:7f:
                    99:6f:c0:16:e2:8b:50:16:4b:ef:de:5e:94:cb:d1:
                    d0:6a:64:7a:82:7b:30:87:72:e2:4a:7d:59:36:b9:
                    97:25:a7:9a:53:fa:1a:05:c9:2f:76:01:ca:41:20:
                    7d:a5:2c:6c:c4:51:f2:93:a0:b2:92:20:34:c4:b9:
                    c1:d0:58:22:2d:8a:c3:40:96:7b:f3:67:c2:cf:5d:
                    f7:fd:50:b3:a1:37:c8:6a:da:bb:bf:c5:5a:2d:d5:
                    40:5e:b8:ac:cf:44:2f:da:17:ca:35:c2:4e:ea:77:
                    d8:d5:11:1c:35:75:89:8c:d9:e7:cf:47:8b:75:6a:
                    8e:41:9a:c3:49:b5:d3:ff:f9:ef:7a:7e:43:7d:6f:
                    c6:3e:56:08:ee:78:7e:19:33:05:66:0a:7c:83:8b:
                    c4:ef:b1:7c:a1:e0:7c:79:b5:1f:2b:99:82:67:87:
                    9a:2b:94:bf:01:4b:72:a3:7a:5b:ae:70:44:58:6c:
                    30:07:5a:1f:e5:b5:b2:0f:11:29:3b:f8:98:07:6c:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BD:02:29:35:58:0E:77:90:A7:B0:67:84:61:76:E1:D7:7E:F1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/f6ab5e64-53f7-383b-a1f1-24933c2ee26f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:60:30:2c:a7:2a:2f:aa:9a:dd:2c:20:84:c1:6e:9a:aa:9e:
         2e:fe:f4:79:e8:9d:b3:c1:67:c7:c0:17:3e:01:37:bf:b9:b9:
         11:c1:f3:0a:cc:50:74:d7:aa:d2:2f:b6:a7:df:54:60:c1:8c:
         05:35:cb:0d:c9:90:1e:10:12:a0:fd:7a:fe:aa:2d:3d:28:8e:
         86:b8:b2:94:57:dd:da:e1:4c:59:02:91:6d:ec:5e:5e:61:44:
         8d:84:23:ed:b9:7f:51:d2:b8:5f:48:72:25:e2:c6:75:8e:b7:
         e6:7c:ae:13:8c:4a:fd:54:71:75:7e:c8:e5:03:92:fd:4f:aa:
         7e:33:f3:4c:6c:06:62:46:0e:f7:aa:11:3e:50:69:a3:82:2b:
         95:7c:bb:5e:d9:7c:34:dc:e0:40:aa:22:41:ba:bb:dd:a6:c1:
         66:66:fa:df:0e:c6:63:da:9b:4b:c9:99:c8:89:c7:3a:51:3c:
         6a:76:94:fe:cf:3c:05:2e:a4:c9:e5:53:09:7d:75:f3:6f:25:
         bf:84:4d:6b:83:51:e5:c2:d0:77:b0:86:06:99:6b:f6:fd:0a:
         6e:d0:d8:5b:b4:a2:97:e8:c0:56:09:32:0e:b9:92:ac:fc:8e:
         47:68:d5:33:26:5c:15:23:a5:d3:f4:52:49:1c:1b:60:70:01:
         d2:3d:84:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:41:09 2025 by rpki-client