Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa
File:                     bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa (raw, json)
Hash identifier:          Tfqtw+4J6VTf/H7kNl9EFAXVgA06e0j7FnaXU5BmbRY=
Subject key identifier:   A8:ED:90:A6:84:FC:46:CF:7F:2A:E6:9F:85:D7:2E:09:A8:FC:91:BE
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F4328584A30502BDEDC56434F89C8F700
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     14090
IP address blocks:        64.21.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:2b:de:dc:56:43:4f:89:c8:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=0439475d-8e03-4eca-bb55-e25472005af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:a6:49:d4:72:63:27:0e:db:a9:57:04:65:
                    68:2c:b1:b1:0c:a4:cc:9d:77:98:e0:d4:1e:a8:b1:
                    5b:41:48:0c:ee:f7:fc:c1:81:5e:5c:65:b3:7d:4f:
                    72:3b:84:96:0e:f9:bb:e6:0c:42:d8:ab:b0:88:5f:
                    42:d8:10:06:9a:c8:e6:37:f8:4e:fd:f4:36:6b:93:
                    e3:ca:30:52:25:7b:1c:f0:c0:2a:78:60:72:71:ce:
                    69:09:ee:aa:9a:2b:cd:a2:da:b9:d1:cb:0c:64:72:
                    f2:0b:75:f0:30:83:90:c1:4a:d5:2f:e2:ac:a4:ab:
                    73:3e:91:e4:24:20:8c:e7:07:87:aa:ad:a5:6d:f2:
                    75:85:78:a7:11:b6:52:54:3a:75:22:fa:5b:2f:c3:
                    d2:91:2b:d7:39:7f:7e:2c:d3:16:e7:72:c0:6b:6b:
                    ac:df:ee:5a:6b:b4:10:63:f4:d0:ec:b6:d8:6b:3b:
                    19:b9:cd:42:e1:ff:19:21:7c:04:52:4d:37:4f:79:
                    e5:23:e7:e9:b6:bb:04:75:87:69:b4:67:f6:c3:48:
                    58:7f:33:7e:2b:c7:90:b6:06:0d:ca:ae:97:e0:17:
                    bc:95:4a:fc:60:0e:5a:86:d7:2e:74:f7:e3:9f:b0:
                    38:b3:7d:bd:34:ee:b7:f4:1d:d0:69:3f:2c:6d:ee:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:ED:90:A6:84:FC:46:CF:7F:2A:E6:9F:85:D7:2E:09:A8:FC:91:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.21.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:30:f4:c9:d7:43:d5:7c:f1:5b:ca:4d:25:e7:7c:b3:81:
         40:03:45:88:c0:27:ae:a5:c9:dc:5f:82:de:ec:d3:8b:e7:32:
         f4:9c:7b:78:a3:9c:06:b1:61:23:05:92:42:e6:34:b9:c4:44:
         43:ca:3b:83:f1:eb:db:99:bd:13:65:6c:8a:03:cc:cd:0e:8d:
         72:59:32:77:5d:de:97:75:76:45:2d:fa:7e:19:05:a4:76:e6:
         29:ee:08:58:a6:23:8e:3e:f4:a8:e1:ad:f7:e2:23:ae:2d:d2:
         81:cb:c2:8a:89:4a:4b:9c:78:c9:cd:65:70:6c:5e:e4:7e:4d:
         d0:89:70:29:ee:f4:f0:5b:98:95:ae:ee:50:5d:c9:76:c7:a0:
         94:23:5d:23:ef:2d:60:ef:40:19:08:f4:6e:29:a6:50:a6:29:
         b3:c3:c7:22:61:fd:68:f0:b5:27:82:ed:b5:53:0b:84:81:b3:
         fb:d5:af:a0:e2:f7:6f:d8:44:44:a9:4a:c5:46:b9:92:91:24:
         d4:75:3a:83:89:4b:6b:b1:24:37:6b:4f:e6:52:2d:2d:ee:77:
         de:7a:08:47:08:2a:1a:1c:01:0d:6b:68:6d:55:4d:f1:e9:49:
         e2:e7:a8:1b:9f:2b:d8:5a:ba:24:cf:6a:4e:c1:de:c2:bb:60:
         0c:4e:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:44:36 2025 by rpki-client