Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/ed635746-9787-3a53-83f8-5774e73170ab.roa
File:                     ed635746-9787-3a53-83f8-5774e73170ab.roa (raw, json)
Hash identifier:          YABKW1Y4u1o95L+x9KjAty/GIevhmMweB8PobiS/puk=
Subject key identifier:   A1:B7:43:B5:55:24:AA:BD:4C:A8:86:CC:71:91:0F:99:C9:FD:04:36
Certificate issuer:       /CN=12de60db-ef00-4011-ac2b-057362ea0602
Certificate serial:       010D0C9F4328584BC10BCE243A6831CF8D341080
Authority key identifier: 34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/ed635746-9787-3a53-83f8-5774e73170ab.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     36849
IP address blocks:        64.65.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:ce:24:3a:68:31:cf:8d:34:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12de60db-ef00-4011-ac2b-057362ea0602
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=62f5b9ba-7282-479a-b622-bcb0d13d9793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:ad:39:07:4f:27:71:7c:57:89:6d:9f:17:
                    09:3d:22:b3:99:4e:47:40:f3:94:20:46:3c:5f:f7:
                    5c:74:ab:e1:21:d9:1b:6b:1d:a8:e3:88:f4:50:97:
                    34:84:0e:b9:0f:34:9f:33:42:1f:56:07:49:48:db:
                    8c:f5:a4:8b:4e:d1:9c:c5:b7:89:43:c8:63:85:6e:
                    3e:cc:81:aa:94:d5:6a:66:18:8f:90:d4:99:05:a4:
                    17:15:d4:d9:64:ec:b3:c8:da:45:87:56:ea:14:c5:
                    0c:a0:88:ba:06:d0:bf:f6:01:b8:50:e6:79:42:0e:
                    63:95:ad:6c:9d:77:59:a1:65:59:5f:08:37:ca:f3:
                    e8:a3:19:ee:4e:ae:e1:6f:4d:65:31:01:73:8b:be:
                    91:93:03:ef:da:b8:d4:96:9b:9f:1b:05:58:1a:b6:
                    f3:d2:ec:23:16:ed:23:15:1f:34:8d:e7:12:89:ec:
                    c1:44:6c:a8:94:fb:3b:14:b3:2e:93:6a:f6:82:62:
                    34:67:60:25:f5:e1:74:7b:2c:49:d6:d7:f6:0d:7d:
                    e2:23:85:04:33:38:d7:12:35:81:63:6b:c9:29:c4:
                    06:74:91:63:eb:bb:4a:a1:2c:91:5e:c6:c7:40:51:
                    4e:ed:a1:f3:37:a4:d0:88:09:b8:ef:2e:bd:f2:00:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B7:43:B5:55:24:AA:BD:4C:A8:86:CC:71:91:0F:99:C9:FD:04:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/ed635746-9787-3a53-83f8-5774e73170ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl

            X509v3 Authority Key Identifier:
                keyid:34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.65.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:72:6e:a1:8e:76:06:b7:78:e8:6c:14:69:04:3e:91:9c:
         be:5f:d4:fd:bc:10:bb:28:11:3b:ae:30:15:b2:08:85:4f:fa:
         85:e5:b6:17:2c:c2:4d:ec:9d:f0:c3:0e:43:e5:48:e3:e5:b5:
         21:32:1f:58:81:fb:44:68:8e:55:65:96:c8:e3:54:a2:b2:39:
         ab:5a:97:29:ba:63:59:36:10:6b:63:7e:ca:f9:cf:b9:ac:ce:
         7c:d9:47:7a:ad:b2:70:cf:b6:4b:30:76:f7:b6:c2:de:80:36:
         c8:b2:9c:03:f7:ec:72:a9:b8:84:ea:01:88:f4:63:d5:3b:48:
         8d:e3:e2:10:a4:fc:11:bd:87:83:5b:6d:a0:c8:38:b7:f8:81:
         bc:50:47:f8:1f:6f:bc:ca:41:b4:7e:3e:24:88:31:19:19:d3:
         45:a4:d4:99:0b:68:be:e0:71:55:75:45:21:78:b4:e7:f7:d6:
         57:7d:a1:c1:e9:d9:52:73:9c:ad:80:ee:31:6b:62:2e:e1:87:
         2e:e6:02:79:e2:80:07:c5:e1:09:cd:86:0d:bb:90:f6:96:79:
         88:db:88:10:d9:a4:df:e8:ed:a1:42:b6:d9:ab:98:d3:4d:49:
         0a:77:57:73:53:06:37:53:a9:e7:5a:dd:06:91:7f:61:7e:80:
         32:c0:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:03:22 2025 by rpki-client