Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/50017cfa-0d6d-3856-8e19-22ebede8cc9c.roa
File:                     50017cfa-0d6d-3856-8e19-22ebede8cc9c.roa (raw, json)
Hash identifier:          p8giH+pQRjm9xTXkLceYoqIFCRqaAgwUJb4jzewT7JY=
Subject key identifier:   74:A9:88:10:BC:5B:ED:5D:6A:1B:E7:FE:63:C2:E7:3A:A6:E6:E9:52
Certificate issuer:       /CN=5f55a9bc-459c-49dd-8940-ede4a86712a5
Certificate serial:       010D0C9F4328584BBE4038E1C42AD927771CBE80
Authority key identifier: 90:A5:CB:75:0E:E7:24:B4:B7:3D:AB:91:C2:B5:78:7B:96:A7:13:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/50017cfa-0d6d-3856-8e19-22ebede8cc9c.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        64.190.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/5f55a9bc-459c-49dd-8940-ede4a86712a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/5f55a9bc-459c-49dd-8940-ede4a86712a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:38:e1:c4:2a:d9:27:77:1c:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f55a9bc-459c-49dd-8940-ede4a86712a5
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=31e52a5a-3289-4453-87c9-46017e409c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:56:35:9e:5c:f8:a3:35:d1:b2:2d:9f:24:
                    bf:3a:7e:c5:ea:87:46:27:9f:52:96:94:04:12:42:
                    2a:16:6f:af:6b:6a:1a:21:42:b6:dd:21:2b:3a:04:
                    39:2e:30:33:4d:8b:56:42:8b:2f:83:7a:8b:e5:cc:
                    9c:0e:05:a3:da:da:8f:68:dd:1d:af:8b:5c:4f:bb:
                    93:f1:9c:62:4b:a7:24:1b:88:59:86:9d:35:eb:16:
                    74:16:cd:0d:a2:56:5f:84:a7:d3:21:59:9a:b1:97:
                    ba:1b:a8:bc:1b:4b:a1:aa:41:b1:94:21:61:d9:74:
                    1c:1a:d5:81:3e:94:b1:ce:64:49:ed:35:37:fb:bd:
                    9e:e5:26:97:3b:ec:4d:5c:57:76:b3:fe:82:65:55:
                    a5:30:5c:50:33:c9:ec:f6:e6:ef:51:f5:12:5f:2e:
                    45:56:00:6b:68:95:78:83:ef:1c:34:3f:b9:89:76:
                    27:06:31:f3:09:ec:b1:c3:9e:4d:e8:da:40:43:17:
                    f2:9b:8b:45:5b:3c:91:d9:d4:35:5e:c2:b2:00:3d:
                    df:5c:ac:a0:ce:12:b3:db:71:9e:82:d6:75:9b:cc:
                    78:2a:11:25:7b:0a:32:3d:19:0e:3a:eb:fb:3a:55:
                    eb:db:8a:93:93:9c:43:a9:7b:45:e2:d7:50:49:dc:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A9:88:10:BC:5B:ED:5D:6A:1B:E7:FE:63:C2:E7:3A:A6:E6:E9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/50017cfa-0d6d-3856-8e19-22ebede8cc9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/5f55a9bc-459c-49dd-8940-ede4a86712a5.crl

            X509v3 Authority Key Identifier:
                keyid:90:A5:CB:75:0E:E7:24:B4:B7:3D:AB:91:C2:B5:78:7B:96:A7:13:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:8a:ee:04:76:e2:f9:f2:06:5b:75:60:56:93:35:5b:30:0e:
         2f:69:be:53:c4:ed:73:dc:95:f8:d5:55:9f:08:b1:1b:29:78:
         5f:8c:aa:c0:f3:1a:83:43:21:c0:a4:76:ce:20:11:95:33:70:
         60:88:93:32:22:0a:41:5a:fe:3f:47:cd:38:18:78:12:a0:d4:
         5e:f9:d0:bd:14:ab:c9:0b:bb:3f:ab:73:e1:a9:cb:77:0a:d4:
         a0:84:0d:e2:0d:8a:ea:eb:e2:bd:ac:28:0f:62:49:a8:43:d7:
         d4:77:bb:3e:9c:50:01:7e:e3:40:f7:84:d1:a5:83:01:3d:49:
         48:c6:ac:e2:f6:28:33:d2:e1:e3:ad:9f:89:6d:df:8a:8d:fd:
         67:b9:11:ea:d6:42:ac:8b:63:c3:8c:38:27:82:8f:80:f9:a3:
         f4:6a:19:05:bb:c8:52:77:23:75:e0:92:5f:0a:18:c2:fe:cb:
         80:b3:bc:18:31:d1:b0:85:79:f9:fd:eb:55:de:6b:be:c0:d6:
         b5:11:de:96:43:3d:59:58:5c:d6:2f:31:43:66:98:23:98:1d:
         46:0e:0e:c2:47:6d:b3:b3:b6:7e:cd:e0:c8:17:f0:26:95:3f:
         2d:5d:7c:74:df:90:23:ce:cb:a9:bd:b2:45:52:4a:67:6e:66:
         df:ed:5f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:14 2025 by rpki-client