Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa
File:                     a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa (raw, json)
Hash identifier:          nuxGd+ah/oI6+b9mXmrNY1eWHc8R2yCEN+jKAamIOsc=
Subject key identifier:   61:93:E8:70:54:63:62:47:5A:85:B0:95:97:FE:6D:C7:A2:5C:09:82
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584A8B0B5844F6842EE39EC8EAC0
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     11090
IP address blocks:        64.4.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:58:44:f6:84:2e:e3:9e:c8:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=22a26f84-9694-4ec5-83cb-6c379906db6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ed:c4:f3:ea:d8:46:5c:de:3d:8a:24:9f:c4:
                    5e:1a:ed:08:8c:f7:72:ec:6a:a5:01:f2:07:3c:46:
                    fd:6b:5d:63:2c:79:3d:1f:38:bd:fb:a6:b8:55:d5:
                    cb:1e:cb:6d:ab:df:0d:ef:68:0c:95:1e:6c:33:ca:
                    55:b6:86:38:ac:7a:c8:cf:3d:d1:e9:8d:18:fa:27:
                    29:d4:c2:6f:a2:cb:40:87:ae:88:2f:9e:a4:87:92:
                    a7:1d:e9:62:d0:0d:b7:ae:40:7e:4c:9c:3c:7f:dc:
                    79:6d:00:ba:ff:97:0e:fd:61:0b:63:21:8f:f9:54:
                    73:e3:e5:6d:f4:ce:44:ff:c0:30:c3:8d:2f:ec:94:
                    79:7f:2b:7a:4b:ee:1d:d3:e0:c4:b0:a3:f3:54:27:
                    34:99:73:54:e9:2e:cb:cd:d6:b8:20:19:26:23:09:
                    4a:e8:d3:01:f7:2b:ea:28:43:cf:b9:4b:22:0d:95:
                    66:76:7f:83:87:04:73:0e:f0:c4:a3:49:a6:89:5b:
                    f2:14:dd:78:11:93:1e:c5:3c:d7:7e:16:16:36:3e:
                    ff:9a:98:6c:e1:bb:ca:ba:dd:5e:fb:af:d6:21:05:
                    e3:4e:20:ec:c6:c1:3a:1d:ad:b1:99:09:08:64:35:
                    71:4b:22:42:43:b7:99:31:ea:14:d1:eb:35:c7:80:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:93:E8:70:54:63:62:47:5A:85:B0:95:97:FE:6D:C7:A2:5C:09:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:be:1d:d4:37:5c:7b:c7:3b:29:68:3c:38:06:be:5d:00:62:
         a2:dd:01:d6:2e:62:8e:41:f6:67:5b:60:55:15:12:d6:e3:b3:
         2f:cf:fa:17:8a:fd:e8:86:5a:df:d7:51:22:34:9b:b6:9d:ec:
         be:1d:15:55:3e:7c:52:26:b1:a5:51:a3:8d:78:96:3f:f2:20:
         1c:c4:f6:d0:4b:0d:7d:b9:d3:0d:ff:16:40:c2:79:98:88:94:
         d8:20:a6:ea:8e:5a:d2:25:79:03:66:ee:ce:b4:9e:cf:c2:52:
         ab:70:64:de:f3:ac:7e:42:41:c5:51:30:00:47:1f:3a:16:b0:
         55:50:3f:59:ea:c1:6a:ce:bc:b4:1f:3a:31:2b:9d:fc:d9:c8:
         18:62:a4:77:c6:6d:ce:4a:88:fe:cf:b1:66:a2:b9:aa:f4:5c:
         39:a3:17:c3:95:be:97:33:b2:2c:77:95:38:b7:25:fb:b1:3a:
         c9:b9:c0:b5:39:48:1a:30:24:64:31:95:35:c6:d3:17:34:74:
         c8:b9:e7:b5:3c:b4:b7:11:91:30:10:e6:d0:d4:21:14:31:21:
         fe:41:76:d3:13:21:65:ac:2e:c7:ce:47:8d:31:ca:b5:e9:81:
         39:9c:0a:85:20:85:b4:7a:03:be:ba:e8:37:1c:dc:50:e7:a6:
         34:41:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:55:35 2025 by rpki-client