Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e063e638-4278-3c6e-a5e3-5887d96d580f.roa
File:                     e063e638-4278-3c6e-a5e3-5887d96d580f.roa (raw, json)
Hash identifier:          WMzd0ejm/FX4g+qr8n5PBXGVYQSfWWJGkx0Auz5g2DE=
Subject key identifier:   01:8E:47:F2:1F:02:96:76:A4:AF:7D:DF:B9:DF:1F:3C:17:B9:5A:47
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F4328584AB91BA057A0D3155AE51B7BC0
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e063e638-4278-3c6e-a5e3-5887d96d580f.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        69.64.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a0:57:a0:d3:15:5a:e5:1b:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=c2ede5fa-d79f-4602-bd38-c7430357a248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:12:72:2f:04:2e:a4:0a:74:40:42:56:53:
                    ec:5d:54:5e:65:b1:36:84:1b:c5:de:70:90:ba:f6:
                    8e:8c:75:2d:46:96:61:b2:82:66:ff:4d:b0:09:9b:
                    39:8f:be:78:92:70:9c:b4:4b:0a:14:7c:ed:0d:84:
                    fc:5f:99:a8:71:03:0e:af:47:a0:c8:c8:39:be:e6:
                    90:7d:3e:fe:25:ea:ec:f9:70:6e:3d:c6:8f:42:a8:
                    f6:dd:2b:75:ff:88:bb:b8:eb:31:85:78:97:7f:44:
                    f6:3b:c7:ec:e2:b5:ce:28:ef:be:cb:85:88:b3:08:
                    8a:66:0e:50:f9:e7:41:88:29:a3:eb:c7:3e:d1:36:
                    c0:f5:d6:fb:43:74:26:c5:1d:95:14:6a:fc:0d:45:
                    d1:51:0e:00:c5:bc:52:bc:6a:06:44:f3:8f:b8:52:
                    9f:f1:af:75:44:d7:83:92:00:8a:5f:6d:f2:d5:ae:
                    e9:51:87:2e:2a:c5:65:02:63:4c:32:c0:ab:81:be:
                    b0:30:81:67:39:04:51:6c:8c:45:3e:5f:48:6d:0f:
                    16:94:b5:cb:16:2f:27:31:59:12:ec:a4:a0:49:fa:
                    82:3d:e4:c2:b7:5e:0a:e7:92:87:45:07:05:af:90:
                    aa:9c:6b:10:cb:30:53:71:36:61:a3:06:8f:c7:15:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:47:F2:1F:02:96:76:A4:AF:7D:DF:B9:DF:1F:3C:17:B9:5A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e063e638-4278-3c6e-a5e3-5887d96d580f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:1c:02:d6:33:88:23:4a:b3:de:34:b4:38:a9:e3:4e:4e:a8:
         5b:94:d7:21:36:23:de:6b:cf:32:f0:ee:5d:50:cb:3f:4e:2d:
         d4:24:26:e4:e5:a9:a0:91:3f:75:c0:9f:57:02:88:e1:ca:2c:
         fd:a5:d7:c8:a0:bf:22:4b:c6:46:2e:31:72:9e:d0:eb:81:73:
         a1:8e:e7:18:c4:68:fe:62:93:9b:f9:af:ba:4b:62:fa:2f:2c:
         7e:71:ac:5f:2e:39:41:3d:54:73:12:99:4e:80:3c:7d:ea:c3:
         8c:fa:74:cd:e7:b5:e4:02:89:2a:b1:22:a8:8f:56:a3:dd:fc:
         c2:b8:ac:3d:4e:bb:53:1b:3e:93:59:1b:d7:d3:47:39:66:88:
         4d:ae:ff:76:4e:ae:e2:33:12:be:cb:03:a6:61:ae:2e:7f:92:
         2c:ab:87:c9:32:80:9d:ae:0d:81:3f:0c:b6:18:a3:06:92:f6:
         31:62:36:b4:53:71:65:f5:37:48:31:d1:36:75:3b:d4:f8:7a:
         ee:b6:18:1a:f6:1c:79:be:8b:da:ae:3d:d2:f3:47:2d:c6:a9:
         6d:48:aa:59:aa:58:27:0d:e5:33:4b:53:9e:06:d7:53:ec:5b:
         4f:80:42:19:e6:6e:0f:76:fe:32:d8:d9:49:3d:ba:de:d6:e6:
         87:7b:86:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:44 2025 by rpki-client