Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e89bbff-0ac7-3513-b7bc-cfde562324a4.roa
File:                     0e89bbff-0ac7-3513-b7bc-cfde562324a4.roa (raw, json)
Hash identifier:          QuqR/iAQTSY2tf6VQvqhZbD36/ZaindAzhpt5DhjmKI=
Subject key identifier:   9B:26:5D:E4:94:15:A9:99:27:77:DA:F9:1F:A4:B9:24:4F:47:95:9A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584ABEC94575A78829ABFD47F240
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e89bbff-0ac7-3513-b7bc-cfde562324a4.roa
Signing time:             Mon 04 Aug 2025 13:49:53 +0000
ROA not before:           Mon 04 Aug 2025 13:49:53 +0000
ROA not after:            Sun 02 Nov 2025 14:49:53 +0000
asID:                     9304
IP address blocks:        64.81.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:c9:45:75:a7:88:29:ab:fd:47:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug  4 13:49:53 2025 GMT
            Not After : Nov  2 14:49:53 2025 GMT
        Subject: CN=0b06cb56-eb7b-401d-a8c0-aaabe3ad70d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:41:03:f8:a5:39:25:92:54:fe:3e:8b:f5:
                    06:7b:ff:35:77:74:01:ef:2d:dd:de:fd:36:fa:35:
                    78:c8:4c:70:01:17:31:07:9a:2d:a1:b8:e2:2a:5e:
                    11:ff:51:34:7c:ec:86:73:55:0d:a0:52:7a:a2:68:
                    be:58:12:b6:a4:65:b0:e3:26:7f:82:53:9b:8c:47:
                    e9:b1:c8:14:58:7d:12:e8:e4:24:ea:02:e7:c5:76:
                    28:cd:a9:95:41:d1:5a:78:0a:f4:5b:e8:6b:6e:8c:
                    3b:e3:bd:cb:7e:77:ec:5f:9a:36:8d:d6:0b:b3:d2:
                    81:0c:e3:ba:4f:64:9e:e7:29:37:4c:8e:06:15:f3:
                    4d:d4:d2:32:d0:fc:bf:8c:51:de:92:09:f6:49:a4:
                    5c:ad:dd:df:75:cf:16:48:42:d6:a7:91:f5:7e:ae:
                    54:73:1b:d4:36:9d:32:0f:8c:3f:ff:14:87:83:df:
                    c1:87:e7:05:06:58:14:55:0d:59:60:5d:1e:e2:2e:
                    22:f8:e7:9f:d0:43:da:7b:51:7a:82:cb:32:1f:82:
                    29:51:31:e3:6b:30:ef:65:3e:cc:b0:27:f0:c6:3e:
                    2f:89:8f:07:bc:87:3e:91:6d:d6:23:87:24:72:dc:
                    f9:04:91:df:d1:31:b2:b2:a5:2f:b4:42:67:bb:72:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:26:5D:E4:94:15:A9:99:27:77:DA:F9:1F:A4:B9:24:4F:47:95:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e89bbff-0ac7-3513-b7bc-cfde562324a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fb:0a:c1:19:28:c4:7f:69:6f:e6:e0:fa:b3:96:04:82:03:
         25:e5:4e:fe:05:e5:91:9e:dc:f1:22:df:9f:8b:72:4e:7c:ec:
         03:3c:87:a3:e4:81:9b:69:b9:16:0b:32:2d:03:35:a1:0e:27:
         07:ff:f3:db:cd:e1:91:f5:8d:d7:be:7c:5b:b2:f0:35:95:13:
         8d:2f:f1:56:84:46:5d:30:41:c6:c3:17:64:87:04:66:d9:a1:
         99:aa:a9:db:f7:30:1c:5a:72:08:b4:bc:74:e2:88:0e:5e:7f:
         55:5f:b5:7f:cd:0e:e1:4d:41:fe:0a:cc:06:3e:6c:02:7a:44:
         8d:3f:bd:e2:82:cf:66:56:c3:9d:fc:3e:2d:ee:0d:9f:6e:07:
         de:94:63:20:5a:23:6d:70:6f:d1:32:86:fa:f5:a2:4c:cd:f9:
         8b:26:89:95:8b:4a:56:26:37:9b:25:02:0d:4d:6a:db:e2:32:
         f0:05:21:d8:cc:15:35:9c:ca:ab:dc:19:eb:c9:e3:8b:57:e5:
         86:be:7c:91:ec:2c:58:92:5b:ed:1a:be:36:4d:e1:49:1b:33:
         f4:19:46:aa:ff:37:0e:ac:14:cc:31:7e:8b:62:61:81:f3:07:
         99:37:75:1f:38:ff:42:36:81:a7:aa:08:2f:de:d5:27:9e:1e:
         49:86:93:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:23 2025 by rpki-client