Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/307aff79-dbbc-3aa0-a20c-f2fe017d18eb.roa
File:                     307aff79-dbbc-3aa0-a20c-f2fe017d18eb.roa (raw, json)
Hash identifier:          HrwFPR8NPauizLMH1h9GtS6FFdi/uSQVCOEbk3XBI+M=
Subject key identifier:   1F:C6:0D:C0:25:DF:4C:65:3D:0F:85:CD:2A:C4:6D:37:00:AA:0E:4F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BB46D5845AB4FC81516952F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/307aff79-dbbc-3aa0-a20c-f2fe017d18eb.roa
Signing time:             Fri 31 Oct 2025 13:33:31 +0000
ROA not before:           Fri 31 Oct 2025 13:33:31 +0000
ROA not after:            Thu 29 Jan 2026 14:33:31 +0000
asID:                     55470
IP address blocks:        64.8.236.0/23 maxlen: 23
                          64.105.84.0/23 maxlen: 23
                          64.105.90.0/23 maxlen: 23
                          64.105.228.0/23 maxlen: 23
                          64.144.220.0/23 maxlen: 23
                          66.167.66.0/23 maxlen: 23
                          67.102.164.0/23 maxlen: 23
                          209.166.8.0/23 maxlen: 23
                          209.166.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:6d:58:45:ab:4f:c8:15:16:95:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 31 13:33:31 2025 GMT
            Not After : Jan 29 14:33:31 2026 GMT
        Subject: CN=76ad8a5b-e6f6-4c20-a373-05083e9d4c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:7e:82:2a:5d:d9:0b:2b:b4:6a:85:d7:b9:
                    7f:a8:d6:45:9d:59:27:6f:8b:d2:76:1b:e1:6e:bb:
                    08:76:6a:b1:26:58:3b:dc:51:2f:e7:39:c9:79:4e:
                    f7:a6:76:ee:b0:cc:81:db:bb:b9:e5:5f:99:e6:91:
                    52:71:c6:80:68:25:6f:5e:d4:c2:65:3a:1b:05:5a:
                    4e:d2:01:91:34:69:65:6a:c0:c0:f4:af:13:4c:d4:
                    18:ac:93:24:6b:cb:53:31:fd:ed:9a:32:4c:5b:40:
                    1b:9e:24:cf:23:8f:11:79:26:24:3a:5a:b9:46:e4:
                    d2:51:e2:c0:71:d5:87:be:b4:18:4d:35:bc:05:4c:
                    99:90:44:a6:65:93:16:c2:cb:a7:b9:17:d8:0b:2d:
                    cf:b6:49:cb:97:64:87:49:5c:f7:28:37:0a:1b:00:
                    d2:d4:d4:de:9b:e0:41:c2:f7:83:5b:a7:76:91:c4:
                    f6:02:b2:1e:89:9f:9c:0d:b5:b5:c9:19:e5:14:08:
                    ec:8a:0d:a6:86:bd:af:74:6d:e0:cb:46:6f:fb:19:
                    ea:ac:ff:c6:ab:0a:28:34:0d:59:d3:70:2e:1f:f5:
                    92:7b:b5:f9:de:3d:e3:d2:cb:a3:a9:ef:b8:92:4b:
                    8c:4d:d8:2a:da:0a:21:16:ad:6d:2c:40:47:72:f0:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C6:0D:C0:25:DF:4C:65:3D:0F:85:CD:2A:C4:6D:37:00:AA:0E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/307aff79-dbbc-3aa0-a20c-f2fe017d18eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.8.236.0/23
                  64.105.84.0/23
                  64.105.90.0/23
                  64.105.228.0/23
                  64.144.220.0/23
                  66.167.66.0/23
                  67.102.164.0/23
                  209.166.8.0/23
                  209.166.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:27:20:80:e2:f8:e7:42:ea:2b:e7:6b:75:8a:c3:9c:86:d4:
         a2:a9:9b:a8:1f:39:8f:40:37:7e:eb:56:3c:ce:9c:d6:ea:7f:
         79:54:cd:aa:71:bb:57:27:d6:15:2f:e3:7a:30:b3:45:da:a1:
         f9:92:17:1b:5b:95:5c:ce:04:06:31:05:6b:80:8d:24:de:eb:
         d4:95:c4:70:ce:6f:0d:bb:c6:b6:e6:63:e2:58:37:5c:08:4b:
         a7:df:d2:5e:b4:06:3c:19:2d:f2:df:ab:8d:5a:78:c0:da:7a:
         ec:24:28:b4:ec:b5:3c:43:74:f1:59:9c:9c:77:01:92:5f:63:
         07:74:be:46:55:3f:b2:63:6b:e6:13:c5:6d:4f:2e:54:49:8f:
         f1:84:1d:c1:ea:f6:67:a4:a8:d6:a4:53:b5:b5:ab:29:28:30:
         e3:0c:f6:21:7c:c2:99:4a:5b:ab:c9:28:75:0c:3a:5e:08:65:
         58:9e:d8:92:a1:e6:dd:a0:4a:17:43:ee:89:8f:2d:35:b9:af:
         e4:30:95:7f:2b:f0:01:69:37:0d:18:1e:74:7f:ca:af:71:44:
         30:4e:21:eb:87:41:01:41:a1:d3:c0:ac:ad:e2:bd:ec:94:34:
         da:28:a1:0b:95:bb:12:d7:d4:45:78:b7:1b:3e:11:52:43:3b:
         61:80:09:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:39:09 2025 by rpki-client