Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0721195f-b137-3110-8f36-18e8f861fc0b.roa
File:                     0721195f-b137-3110-8f36-18e8f861fc0b.roa (raw, json)
Hash identifier:          sQ+a6TPbdx0J8DA1Ym6kX2vv0mL3Zg1FHsMV1XLOe2Y=
Subject key identifier:   92:BD:52:D2:74:E4:0C:6F:DA:13:D8:6E:7B:20:9B:4E:69:C4:65:5D
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584AB220BE9BE43F36DC112FC100
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0721195f-b137-3110-8f36-18e8f861fc0b.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7029
IP address blocks:        64.86.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:be:9b:e4:3f:36:dc:11:2f:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=f5de2fbc-6ec0-475c-b4e7-643669420a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:48:ef:f9:8d:af:be:68:30:ac:d9:76:9a:a0:
                    d6:6d:b0:de:c2:5f:f3:ae:4d:80:10:80:29:65:0b:
                    18:ee:dc:22:b7:55:fa:49:0d:05:88:48:bb:7e:68:
                    b0:98:ca:f2:13:f7:17:b0:36:7c:ba:a8:16:00:98:
                    52:00:8a:16:51:30:fc:eb:80:d8:bb:40:08:0a:96:
                    ff:6a:f1:e0:c8:37:e6:ab:7c:ea:65:dc:98:ff:ef:
                    25:56:95:0d:5d:8f:c2:32:0a:94:d7:ad:1f:d4:8a:
                    51:0b:eb:0c:d5:77:d6:67:2e:f4:43:03:b5:c7:cd:
                    2e:a5:bd:ad:03:25:a9:99:5b:d0:ca:33:d0:1c:d9:
                    6a:7f:cc:8d:d1:14:7f:de:70:c5:bb:a7:e8:c1:68:
                    af:8a:4f:90:65:0a:66:2c:dc:93:e1:ce:a0:f5:a9:
                    a5:a8:6e:99:03:0e:a8:d8:1a:5a:75:d4:02:c5:34:
                    ae:23:46:00:81:c9:9b:dd:f4:80:f0:d3:5a:e1:25:
                    ca:3f:2c:3e:8e:31:92:87:39:d3:fe:21:bd:cc:ea:
                    9f:c9:b6:44:79:25:1c:3a:dd:1d:8d:18:58:6e:94:
                    37:61:f3:89:4d:ab:c9:a2:f8:26:3d:ea:60:a2:23:
                    79:cf:e4:1d:2b:89:64:70:bf:52:9d:32:1e:6d:d2:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BD:52:D2:74:E4:0C:6F:DA:13:D8:6E:7B:20:9B:4E:69:C4:65:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0721195f-b137-3110-8f36-18e8f861fc0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:98:70:ee:ba:4b:df:51:63:80:e9:35:e2:70:a3:16:fd:ad:
         09:16:26:c6:13:70:61:ba:76:65:31:0e:1e:f1:06:5f:30:18:
         70:5b:d8:56:6d:48:df:34:fa:66:b7:8c:7f:c8:e2:5f:79:5d:
         30:97:bc:99:b0:18:33:cb:21:30:09:64:8b:f8:8e:81:bb:e9:
         e5:d0:a1:e5:c1:94:56:f5:9d:41:52:88:3b:a0:f0:ad:58:9c:
         40:00:12:c7:3c:d5:34:00:47:e8:82:21:7c:96:43:cd:d7:a8:
         2d:96:18:9b:68:d5:af:36:68:e7:cf:35:63:80:35:59:77:58:
         6d:7f:9f:bf:46:5b:2f:f4:ca:ea:80:44:4a:25:be:65:49:fa:
         f3:46:66:87:36:02:33:8d:a4:60:64:6e:c4:6b:f2:40:b7:ad:
         b3:95:9f:86:a8:36:a4:1b:24:01:6b:5a:0f:14:9f:69:c4:8d:
         c8:e3:7a:30:5d:0d:24:e2:2d:57:b4:ed:04:29:f6:65:6f:4a:
         25:52:4b:ab:b3:96:4e:0c:20:e5:9b:a7:42:95:47:02:83:f1:
         3f:63:1d:82:8c:36:85:1e:60:6c:a3:3a:f8:26:c6:f7:b3:30:
         b9:8b:85:13:5c:bb:39:c9:a6:a8:b8:5e:78:3e:9a:8d:b8:aa:
         32:45:b9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:21:51 2025 by rpki-client