Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/b3f3356b-5927-3263-8f8d-b62359f29a1c.roa
File:                     b3f3356b-5927-3263-8f8d-b62359f29a1c.roa (raw, json)
Hash identifier:          YwIv6qSM7jIONUPF8iJu0fubD18Z+kSfzyuvMjrd3jU=
Subject key identifier:   65:B3:68:D4:FA:BD:D3:7D:4F:78:D1:75:33:A2:22:68:95:A3:6B:32
Certificate issuer:       /CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
Certificate serial:       010D0C9F4328584A19FAB69F4E6733EB4801EA80
Authority key identifier: 08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/b3f3356b-5927-3263-8f8d-b62359f29a1c.roa
Signing time:             Fri 06 Jun 2025 13:01:04 +0000
ROA not before:           Fri 06 Jun 2025 13:01:04 +0000
ROA not after:            Thu 04 Sep 2025 13:01:04 +0000
asID:                     2698
IP address blocks:        64.113.64.0/24 maxlen: 24
                          64.113.65.0/24 maxlen: 24
                          64.113.66.0/24 maxlen: 24
                          64.113.67.0/24 maxlen: 24
                          64.113.68.0/24 maxlen: 24
                          64.113.69.0/24 maxlen: 24
                          64.113.70.0/24 maxlen: 24
                          64.113.71.0/24 maxlen: 24
                          64.113.72.0/24 maxlen: 24
                          64.113.73.0/24 maxlen: 24
                          64.113.74.0/24 maxlen: 24
                          64.113.75.0/24 maxlen: 24
                          64.113.76.0/24 maxlen: 24
                          64.113.77.0/24 maxlen: 24
                          64.113.78.0/24 maxlen: 24
                          64.113.79.0/24 maxlen: 24
                          64.113.80.0/24 maxlen: 24
                          64.113.81.0/24 maxlen: 24
                          64.113.82.0/24 maxlen: 24
                          64.113.83.0/24 maxlen: 24
                          64.113.84.0/24 maxlen: 24
                          64.113.85.0/24 maxlen: 24
                          64.113.86.0/24 maxlen: 24
                          64.113.87.0/24 maxlen: 24
                          64.113.88.0/24 maxlen: 24
                          64.113.89.0/24 maxlen: 24
                          64.113.90.0/24 maxlen: 24
                          64.113.91.0/24 maxlen: 24
                          64.113.92.0/24 maxlen: 24
                          64.113.93.0/24 maxlen: 24
                          64.113.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:fa:b6:9f:4e:67:33:eb:48:01:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
        Validity
            Not Before: Jun  6 13:01:04 2025 GMT
            Not After : Sep  4 13:01:04 2025 GMT
        Subject: CN=64e9c6d4-4254-4667-83d0-24e0753c519e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e6:de:19:4d:47:71:b1:7e:f6:29:d9:7c:05:
                    97:94:57:39:5a:da:f0:d8:36:c1:3b:ca:3f:43:0c:
                    c2:21:cb:a2:b5:b9:e7:e5:29:d7:d0:2b:df:08:07:
                    b2:04:c2:d0:39:ca:94:af:48:3a:f5:06:46:5e:69:
                    c5:ca:5f:51:f5:d2:4f:4f:fb:d8:f4:b9:4a:a4:ec:
                    b3:3e:fc:48:0b:db:9d:06:9a:26:3d:ab:d9:83:84:
                    36:48:28:bc:a5:7b:78:fb:41:57:76:61:ac:f1:aa:
                    fb:07:b8:c1:bf:51:49:fc:b9:8a:a2:dc:d8:ad:a5:
                    59:3f:06:c8:5f:65:d3:bb:ec:bb:2d:98:39:5c:31:
                    bd:80:b5:b3:22:98:11:e6:72:78:0c:85:03:1e:63:
                    6d:b7:66:4f:0e:9f:fe:e1:44:34:ef:76:49:01:d3:
                    71:1a:d4:04:fa:49:5e:26:be:b1:8e:45:70:b2:bf:
                    9f:5d:db:8a:5c:a0:5e:e8:3e:19:3c:4f:7d:e5:e4:
                    98:2a:a2:1c:57:30:2f:2f:64:22:4e:b7:fd:bc:58:
                    b4:f7:74:6f:12:d2:17:4d:b7:52:cd:b7:0d:79:e3:
                    fb:f4:c5:aa:24:c7:01:b6:57:2a:52:84:eb:ab:62:
                    07:9a:56:84:ee:ec:d0:c8:65:7c:25:62:0d:48:dd:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B3:68:D4:FA:BD:D3:7D:4F:78:D1:75:33:A2:22:68:95:A3:6B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/b3f3356b-5927-3263-8f8d-b62359f29a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl

            X509v3 Authority Key Identifier:
                keyid:08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.64.0-64.113.94.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:99:d4:ba:75:e7:2f:76:72:0c:06:b6:5f:07:c0:3d:f4:
         7b:47:31:fb:7a:e2:7b:7c:6d:c7:fd:2e:e0:7a:9e:2b:79:f6:
         0d:5e:b5:73:94:ea:59:64:3a:e9:31:a9:3e:bd:61:e8:60:f2:
         26:06:e2:95:16:15:02:98:f9:d7:3e:a7:28:9b:35:9d:e2:df:
         9e:aa:84:8c:c4:7e:73:8f:78:ab:64:32:67:80:53:e0:9c:3a:
         0b:05:ce:b2:60:80:f1:c5:48:a6:9d:e9:d7:d0:29:48:3d:e3:
         53:57:9c:a1:59:98:36:5c:10:0b:dc:f0:1e:ec:95:02:73:c9:
         6e:56:ac:ce:4b:0d:d0:c2:70:d9:fa:50:0e:8d:a4:d0:97:2c:
         11:92:1b:58:bc:25:2d:24:70:9b:eb:b1:70:33:46:83:4c:1f:
         64:0b:77:5b:6e:99:cd:ab:e4:ce:43:d4:01:d7:79:11:2f:4a:
         b6:7d:62:cf:1b:28:22:c7:30:0d:8c:37:d5:2c:e5:ee:f6:51:
         0a:b7:c7:12:b9:69:3a:3c:59:a0:02:7c:7a:57:fc:77:07:14:
         d1:a5:c7:9f:a2:b5:ed:8a:ef:71:0b:14:dd:86:18:b2:92:ab:
         74:ce:93:45:0c:4d:ee:45:f0:8d:4e:89:51:ed:00:61:ec:9e:
         8d:0d:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:46 2025 by rpki-client