Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa
File:                     e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa (raw, json)
Hash identifier:          hf2NCePSz4nInfMzQxIvmHd05kPBXOD8ibQyQqOq200=
Subject key identifier:   E1:AF:B5:1A:A2:9A:52:CC:74:88:50:43:85:0C:16:C2:6A:68:C6:7C
Certificate issuer:       /CN=17c52074-58cb-4941-b609-0f5d1e4bca32
Certificate serial:       010D0C9F4328584AC2E10D53AFEA85791D67C3E0
Authority key identifier: 81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     399772
IP address blocks:        64.49.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0d:53:af:ea:85:79:1d:67:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c52074-58cb-4941-b609-0f5d1e4bca32
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=0eed7cc0-2ba6-4a25-851e-f497ad6ccbc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:28:32:04:08:b8:f1:62:7d:8d:ba:e6:d6:
                    81:87:fc:b7:09:79:88:27:22:2b:db:9b:e1:38:26:
                    66:b2:f9:3b:34:cd:46:22:e0:e0:9a:1a:d5:8e:cf:
                    a8:4a:9c:a8:4f:15:db:64:70:20:40:71:39:e0:9b:
                    f4:99:4f:18:41:63:0e:ad:cc:e1:9e:89:40:66:1f:
                    0f:68:18:a1:bc:7c:eb:95:dd:e7:09:d9:40:04:e8:
                    ab:bb:cf:7c:47:6f:43:02:b5:af:32:ad:fa:76:5a:
                    e8:70:5f:0d:61:c0:91:a8:de:25:ac:28:d5:4f:6f:
                    f8:39:d0:1e:ca:fc:c0:97:ca:6a:80:ce:9b:ca:ea:
                    66:64:7c:42:ab:97:0a:a9:10:14:de:2b:5d:83:9d:
                    9b:87:03:c7:cb:0c:ea:e7:7a:6a:a8:27:29:20:1b:
                    77:ff:de:c7:ee:36:8b:3e:a5:40:c3:a1:09:68:c6:
                    f3:25:bf:e9:e8:91:83:a5:ac:f4:ed:d9:6f:4a:cc:
                    ee:bb:de:e1:65:b0:4c:10:79:c7:76:ab:cd:07:50:
                    ff:4e:28:28:7e:0b:5a:68:1b:a3:eb:ed:4d:d7:e4:
                    17:11:24:77:c2:bb:4c:95:72:1e:53:58:8e:27:e6:
                    ad:19:50:5d:8c:15:5f:aa:ac:65:7b:88:6d:75:dd:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AF:B5:1A:A2:9A:52:CC:74:88:50:43:85:0C:16:C2:6A:68:C6:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl

            X509v3 Authority Key Identifier:
                keyid:81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:80:4c:91:fa:c9:de:7e:04:7b:3f:ac:bc:34:f1:bb:4b:a0:
         8d:61:b0:e2:8b:4c:9d:74:68:ea:b2:70:81:35:56:4d:87:1f:
         9e:11:2c:5d:42:67:84:81:ae:31:76:08:bd:98:36:85:6f:a3:
         11:6e:d0:1d:3d:f6:a9:c2:00:b1:7e:91:3a:a8:a2:0e:72:ce:
         3a:9e:cf:41:b9:40:48:6c:a7:ff:2f:bc:11:42:7c:08:19:da:
         a2:1d:1e:61:01:92:e3:ef:63:10:cf:51:4f:65:6f:2a:d4:01:
         72:3a:7b:9e:9e:ca:f9:a0:36:f5:25:83:19:20:1b:1e:c4:4f:
         5b:e7:da:31:d7:45:9e:1e:bb:d6:f1:50:95:c8:f7:82:19:11:
         11:ee:56:9e:dd:bf:03:9d:ab:8e:0e:d2:e6:7a:8b:e6:83:fd:
         d4:48:74:f7:d4:a1:6a:81:f6:12:c9:ba:8e:1e:5f:04:e1:69:
         42:7d:34:5c:79:26:00:5f:a8:48:80:44:ac:f9:33:a9:d6:4f:
         16:94:46:52:fe:4c:18:c9:31:d7:90:7d:09:6c:94:5b:f4:21:
         9b:4f:ab:1d:f2:7e:4f:35:7b:b1:68:65:d3:35:b6:9e:f3:bd:
         fe:b0:e8:d0:9f:11:a7:ad:5c:4a:61:d4:02:d1:0d:16:b3:bf:
         97:8d:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:54:51 2025 by rpki-client