Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa
File:                     0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa (raw, json)
Hash identifier:          MULlaj0YDliLeT1adnStievHt3sbd8dNgMrKi1GlOvI=
Subject key identifier:   3F:BC:91:B0:1E:BC:40:AF:86:37:F4:93:FA:79:EC:26:08:05:4E:F7
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584AB220C4234EC906CB495C08C0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     24439
IP address blocks:        64.86.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:c4:23:4e:c9:06:cb:49:5c:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=d3417b97-4a8e-4ff4-a72b-a86135ce98e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:24:a6:89:00:ec:74:22:69:79:ae:96:82:
                    da:d4:5d:10:d4:6c:e2:ec:59:ce:0f:a4:69:d6:d6:
                    32:51:14:2c:e7:9a:70:2c:bc:8b:e0:ce:57:6d:5e:
                    e2:8b:38:bd:d2:15:91:26:de:56:fe:eb:af:4e:5a:
                    0a:17:f5:2f:a6:f7:40:6f:91:ef:ba:e7:46:4e:23:
                    d2:3f:d1:37:f0:f9:fc:e4:e8:69:e0:b2:b7:5c:a0:
                    2e:1e:dc:55:aa:cd:ae:78:8e:48:d5:4f:9a:bf:fe:
                    da:27:9a:f7:25:5d:d6:2c:c5:8c:35:56:0e:75:b5:
                    17:ec:41:26:05:11:e1:c9:d4:4a:ce:ba:eb:a8:fa:
                    8b:58:41:e6:98:48:9d:7b:f0:c9:3e:a2:41:99:13:
                    60:c4:ad:6b:3a:6e:61:d1:37:73:09:95:d7:4a:1f:
                    66:64:92:76:f9:99:e5:f0:36:40:be:4e:fd:1d:f2:
                    69:78:6a:3a:ce:be:b0:41:8b:d3:1c:45:4b:2f:bd:
                    24:ce:67:98:0f:02:fb:36:8c:30:2a:41:06:a6:20:
                    7b:90:4f:60:ff:dd:ad:f7:36:3f:86:d0:b4:eb:bc:
                    2c:15:75:12:ac:97:46:30:a9:b2:94:ec:15:72:97:
                    89:08:b8:64:d5:cb:41:98:b1:7d:f3:79:a7:0f:c6:
                    26:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BC:91:B0:1E:BC:40:AF:86:37:F4:93:FA:79:EC:26:08:05:4E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:23:80:7c:d3:6d:e4:d2:21:b5:9c:dc:86:83:be:a8:42:b6:
         69:ea:3a:57:b6:aa:24:57:fa:9a:d2:37:17:51:9f:cc:a4:10:
         75:ef:ac:ab:e5:27:05:73:03:67:2c:bb:77:c0:24:5a:97:e8:
         e9:c2:ff:b7:47:b6:06:3e:4b:37:12:03:2d:ce:41:8a:60:4a:
         18:ef:74:c8:6e:45:fe:7a:c3:72:6f:5e:85:15:88:fd:47:99:
         c5:a1:6a:c7:88:fe:46:74:8f:0a:4f:cf:1a:a7:58:e4:e3:8b:
         d4:eb:26:de:0d:b2:a8:5f:bb:ed:c1:ee:12:ca:b0:91:1f:a9:
         d8:ce:c4:0d:51:61:75:aa:ea:ab:ff:31:b4:54:76:19:2e:94:
         a5:35:1c:be:3b:c4:b2:1c:93:d8:b3:5b:c3:be:0b:0f:a4:26:
         c4:a3:dc:77:c9:c0:fb:58:f8:69:37:9c:35:25:ff:df:43:64:
         69:c1:8f:3d:fc:ca:1d:d3:11:93:58:98:a2:34:b9:e6:29:05:
         b4:0a:c8:b8:d0:03:22:48:43:13:00:af:1b:08:58:a8:50:10:
         05:44:d5:dd:b6:b0:ff:af:fd:f9:ae:4f:00:df:b4:30:1b:ed:
         dc:3c:1a:98:33:27:d1:d5:d6:0a:aa:95:81:0e:00:25:3f:36:
         9a:10:f2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:08 2025 by rpki-client