Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb613705-3a78-389a-87a5-46a5cf41bc2a.roa
File:                     eb613705-3a78-389a-87a5-46a5cf41bc2a.roa (raw, json)
Hash identifier:          aD/7N8FXfbHer06PvWybOp/Z1fyQJ29oq6ghOfPa3lk=
Subject key identifier:   FB:EF:30:37:17:71:EB:8C:60:60:C3:32:15:CB:B4:38:BC:3C:84:55
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A785081275D2589429333EC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb613705-3a78-389a-87a5-46a5cf41bc2a.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        64.9.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:08:12:75:d2:58:94:29:33:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=ad8ca743-42a7-4ecd-b58a-b9715cc5fab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:ba:a3:bd:b5:a4:3d:b7:d2:ee:7a:72:4b:
                    35:55:d4:16:1c:0b:39:ce:2f:ca:d0:53:9a:8a:cf:
                    43:9d:d6:e2:3f:89:98:0a:e3:d2:1d:0e:d6:20:62:
                    46:19:54:c4:2a:40:93:aa:52:37:e1:9d:f8:8b:85:
                    e8:49:6d:b7:d9:41:3e:56:51:f9:68:ae:1a:fe:e9:
                    32:40:57:aa:28:c5:d2:f1:64:f2:cb:b7:13:ce:24:
                    9e:97:91:0d:7b:5c:81:7a:ea:65:15:b6:00:bc:48:
                    a3:ec:90:e7:90:89:2b:19:50:6d:bc:11:04:99:4f:
                    e8:dc:88:f3:2d:c7:4d:46:df:3d:73:15:1d:77:65:
                    9b:18:70:34:64:39:62:2c:57:db:4c:63:a9:18:9d:
                    c3:0f:ad:99:ba:a1:64:b7:7d:4a:25:3b:d6:80:30:
                    a6:ec:00:cd:88:a3:dc:54:e1:ab:9f:10:41:46:ff:
                    1d:ea:6c:75:bf:45:3c:67:a9:15:08:62:64:a7:87:
                    50:5c:bd:26:d4:b5:6e:59:f1:00:83:dd:3a:45:6d:
                    62:75:89:84:75:fd:32:10:7b:3d:5e:f2:48:a9:d0:
                    5a:f9:40:fb:f3:ef:c7:c1:b6:a9:bd:30:83:6c:87:
                    42:d5:df:3b:64:c2:18:a2:ee:44:1a:27:5c:19:22:
                    0c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EF:30:37:17:71:EB:8C:60:60:C3:32:15:CB:B4:38:BC:3C:84:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb613705-3a78-389a-87a5-46a5cf41bc2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:d2:b1:70:b3:9f:38:a0:18:00:00:29:7d:31:53:b7:14:1b:
         ab:21:81:b8:a7:8f:43:b1:aa:a4:65:87:d9:79:18:b6:d8:46:
         52:88:1b:c0:c4:a5:a3:a4:a1:6a:b2:6e:3c:0e:c7:a6:18:e5:
         3b:c0:3f:a4:15:fa:ee:8b:fe:6a:19:1a:94:94:f5:86:90:64:
         b6:99:6b:fc:e3:d3:d6:af:06:c0:34:2b:43:36:15:f9:f3:7d:
         6f:20:c7:eb:74:2d:08:a0:15:8e:68:f3:46:7b:c2:a8:da:92:
         c6:a1:f8:bd:af:3c:94:b2:3f:87:5d:a9:6f:b8:95:60:70:50:
         60:cd:46:df:b3:a3:af:e3:81:42:55:81:a5:a9:a0:ec:0f:6b:
         54:fe:a6:b1:5d:3d:1a:e3:b7:c4:3e:d8:7d:bf:98:dc:7b:e0:
         48:64:08:04:33:1f:e9:02:47:ea:ad:82:9d:3d:a3:c0:3a:99:
         00:ec:2f:ab:f7:c1:92:83:05:52:62:03:3c:ab:29:84:d4:4a:
         57:2d:62:63:7a:5c:9d:68:fb:27:95:3f:22:90:7a:fa:f6:7f:
         c7:79:b2:19:7e:3e:70:ad:cb:40:63:94:00:1d:45:ad:79:16:
         02:74:66:a3:b1:6e:f3:fa:e5:9e:1d:1f:0e:f0:a4:11:50:b4:
         1d:0d:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:02 2025 by rpki-client