Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa
File:                     f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa (raw, json)
Hash identifier:          v7yhJ2p5jT7l0bV6VneYfXihvWX19ep0C4PBDq8mbRw=
Subject key identifier:   98:41:65:3F:69:12:94:8A:24:7B:EE:C4:D5:EA:61:27:A3:30:1B:3B
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584A2EEABF05A00E2D6995DD2200
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     852
IP address blocks:        64.22.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:bf:05:a0:0e:2d:69:95:dd:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=0869dab4-3575-47ff-9a4f-90dd0749d17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:d1:55:02:a8:4c:9e:ea:ba:ef:ea:b5:4b:
                    1d:2c:e8:63:43:60:04:ef:e3:b4:53:bf:30:ba:f1:
                    86:4c:33:e3:2b:44:08:f8:59:4a:17:ae:4b:7f:c9:
                    8d:15:bb:8c:19:03:1a:0e:cf:7a:20:a2:3c:63:ab:
                    03:51:a8:c6:3c:1c:8a:bb:f9:fd:c0:45:2b:59:35:
                    0b:05:20:54:c5:16:7f:ad:db:53:d5:08:87:0d:72:
                    26:c7:20:64:ad:a6:6b:1f:3e:55:62:47:0a:90:72:
                    06:20:14:52:b6:2f:b7:5e:d7:60:9a:5e:ee:75:e6:
                    d2:50:1f:9c:0b:71:48:53:c6:a8:b6:e6:1d:60:1b:
                    5f:4b:c8:23:46:c1:52:52:be:60:a7:7e:74:fc:48:
                    c4:ad:87:c0:96:c0:61:42:91:39:ff:da:c7:ee:e9:
                    11:8f:44:f8:af:0f:00:2e:97:f8:86:53:38:8f:32:
                    ca:63:e7:8f:9b:d4:49:9b:ca:3e:c1:dc:f1:77:48:
                    03:b8:21:0b:0f:16:ca:3a:c1:55:ab:bb:62:9b:38:
                    00:16:20:be:19:64:4c:90:08:69:85:3b:d1:a4:42:
                    2d:49:23:71:05:77:2d:e2:5f:fc:7a:09:b4:f5:91:
                    fa:1f:76:f6:1f:06:98:78:02:ab:1d:64:f1:e6:84:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:41:65:3F:69:12:94:8A:24:7B:EE:C4:D5:EA:61:27:A3:30:1B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:50:f2:c2:39:83:0b:6d:85:8d:97:40:b8:19:6e:ff:85:bc:
         70:74:53:cd:0e:6e:51:12:82:d5:18:67:1a:73:07:f4:b6:aa:
         d8:07:77:d4:5f:61:25:29:5b:1b:97:66:0e:d1:0f:a4:2e:ff:
         6c:9a:fa:48:41:f3:ff:00:7c:ed:ec:2f:84:33:91:79:f4:bb:
         92:c9:4c:1a:bd:1e:b9:7d:3d:96:76:ce:21:f0:11:4e:fd:92:
         d5:3d:1a:c0:49:21:57:af:d4:6d:e4:da:83:c5:9d:e6:d6:9c:
         ac:7e:41:a4:6b:a8:c2:a5:33:f4:85:64:4f:4b:f2:aa:0e:6c:
         3c:25:d5:72:c3:0e:fc:da:60:d8:65:8d:05:85:f7:30:3e:93:
         0f:5b:5d:12:06:db:b8:0c:30:6c:4c:85:d6:5e:01:c1:67:6c:
         a0:93:f6:ca:21:a2:06:41:17:ab:f0:4c:25:fe:b6:59:0f:4c:
         0a:91:fd:38:67:24:f2:7a:25:f8:85:db:20:9c:68:68:c2:ac:
         6f:d0:db:29:58:68:6b:77:b6:c8:fa:37:5c:2f:af:17:07:c8:
         7d:72:14:ff:32:27:ab:85:c5:65:43:c7:79:3c:e7:11:68:e7:
         72:a0:5e:72:64:f2:c5:b9:e2:c7:00:18:75:be:92:fa:5d:d6:
         74:26:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:55:01 2025 by rpki-client