Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4b47c7a-2e3b-3a16-9518-8a59f1f121d0.roa
File:                     e4b47c7a-2e3b-3a16-9518-8a59f1f121d0.roa (raw, json)
Hash identifier:          A0D0Mmfqc0Ae8cAnW7sPlRufq6tsBkigTs6tJNSsWJI=
Subject key identifier:   79:D2:2F:A8:8C:BE:6C:2C:51:C4:5B:59:C9:32:48:02:3C:D8:00:F0
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A784CE3DABE3D2929415A100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4b47c7a-2e3b-3a16-9518-8a59f1f121d0.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        64.9.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:ce:3d:ab:e3:d2:92:94:15:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=0fb34866-3895-4209-bc8a-c8e36a78a1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:fe:48:f1:53:58:60:e2:c7:46:d7:05:da:
                    76:3d:ea:c9:da:33:72:1f:89:fc:8c:f2:90:45:a8:
                    d5:62:a1:32:93:f2:16:cb:9c:40:40:b1:1f:8a:e6:
                    33:72:7f:c7:ce:88:87:64:e1:e4:7d:28:eb:07:e0:
                    1e:97:c8:e2:1c:8d:84:a5:19:b3:ce:86:f1:45:e7:
                    73:c4:81:8e:c0:34:07:43:d8:2a:55:6c:7c:bf:aa:
                    e3:57:fe:fd:60:53:52:64:17:63:bb:c3:ca:2f:fe:
                    4d:e8:05:73:06:cd:92:47:3e:e8:56:7e:49:a5:a8:
                    0f:09:fa:6a:45:e2:8e:b5:ed:c4:2e:1e:70:c6:9f:
                    1c:dc:e5:bd:9c:82:13:58:23:53:e5:a2:4b:dc:67:
                    44:97:14:b3:01:36:af:45:c2:8f:4f:89:a2:05:b7:
                    10:dc:2f:15:e0:9b:01:e7:09:7f:01:01:26:7b:d6:
                    b2:fc:f6:9c:6b:d3:7b:cd:8d:59:2d:b6:1a:f5:4f:
                    eb:69:31:41:f9:af:74:1e:dc:59:02:e2:6e:5e:f2:
                    72:46:cf:17:6d:f0:77:13:8c:73:63:ef:5d:87:a5:
                    20:9e:c8:a5:a8:78:87:19:b8:e5:db:37:34:ea:1b:
                    e0:44:a0:37:aa:b0:ab:11:93:03:cd:b4:7e:d3:98:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D2:2F:A8:8C:BE:6C:2C:51:C4:5B:59:C9:32:48:02:3C:D8:00:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4b47c7a-2e3b-3a16-9518-8a59f1f121d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:36:d0:e9:fb:22:f3:cb:0c:fb:c1:19:3f:b0:1b:1e:3c:fc:
         dc:a0:3b:4f:1f:af:c9:00:20:20:32:0e:6e:af:38:4d:86:77:
         d6:7b:0d:54:6c:65:33:22:34:03:98:eb:e9:b5:31:6a:d1:93:
         71:8d:f3:fc:85:b8:0a:4e:f5:bd:2a:d4:5c:12:31:9a:d2:c8:
         36:29:7b:1b:42:30:3f:e8:3f:44:81:53:2c:62:6a:eb:78:ab:
         28:7c:96:61:32:f5:04:c8:95:3b:9f:ab:5d:d3:b2:29:93:d5:
         1d:11:b4:f3:1a:20:bf:5f:51:11:34:be:7a:cd:c7:35:4a:79:
         ce:3f:f3:23:b4:a0:ad:00:59:26:2d:b6:20:72:2c:06:1b:2d:
         8e:b5:2f:77:b8:e9:5a:b3:06:d7:5b:57:44:52:69:28:df:97:
         c8:8b:e3:b2:76:77:27:5a:f3:33:a5:86:b0:86:4a:d0:5d:54:
         45:48:92:32:53:a3:41:87:bc:f2:8c:9b:89:9b:fe:4c:0c:1d:
         ad:ea:f8:1c:61:00:5f:93:c0:da:cd:b5:ed:94:eb:28:23:7f:
         8a:f0:ab:db:98:5b:57:55:d0:3e:af:42:8f:d5:1b:7b:e1:ec:
         cb:0b:e7:ec:76:68:da:7a:15:5c:6c:3c:ce:e3:4f:10:9d:ff:
         66:e9:ab:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:22:18 2025 by rpki-client