Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa
File:                     89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa (raw, json)
Hash identifier:          7DhkXTy+I5Pib3ABID236i806cCFi4lvMQB9r5UHM88=
Subject key identifier:   F8:F0:26:22:E7:81:34:89:77:40:74:41:58:E8:D5:22:E3:9F:20:79
Certificate issuer:       /CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0
Certificate serial:       010D0C9F4328584AA85BA57B0350778ED197CE20
Authority key identifier: AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     9009
IP address blocks:        64.43.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:a5:7b:03:50:77:8e:d1:97:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=99c5138c-8864-42c2-b78e-813c7040ab27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:88:04:aa:1d:70:16:c2:50:ba:d4:60:78:
                    2d:e3:0d:dd:8c:e3:da:8a:c1:88:57:f6:f8:5f:e2:
                    e1:aa:69:81:f6:c1:13:76:82:db:99:e9:d8:a6:0c:
                    56:8b:f9:26:5e:a9:e0:7f:34:65:56:69:ba:0f:ed:
                    16:cb:78:53:b5:16:71:40:b2:d9:d2:08:cb:e3:e7:
                    06:08:61:16:74:79:c4:d2:f9:b0:9c:35:48:08:4b:
                    0b:79:8c:c6:55:b8:55:7f:07:b6:de:96:ca:1c:d5:
                    94:1f:26:68:8b:98:87:86:64:71:41:0f:7b:04:48:
                    50:f8:04:4c:1d:b8:d9:e4:2f:16:6b:d3:36:c4:4e:
                    d7:e9:3d:c8:c7:90:14:8d:91:a1:84:5a:7c:fe:15:
                    e4:de:1a:e1:e7:be:5e:07:ac:7c:c7:fa:d4:92:a3:
                    3c:40:f0:cd:a6:95:7f:d8:bf:ca:49:77:44:25:2c:
                    e1:b6:08:58:90:0b:06:5e:43:aa:8b:97:75:8c:f3:
                    86:fb:4c:0a:b1:17:03:9d:90:bf:be:42:4b:b2:c0:
                    73:36:79:38:df:b4:ee:7e:64:93:83:7d:b3:b6:4b:
                    ac:00:dc:e3:1a:53:f6:84:93:37:ca:93:91:6c:5e:
                    ab:60:d6:d8:55:85:48:22:96:f6:43:a7:f4:af:96:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F0:26:22:E7:81:34:89:77:40:74:41:58:E8:D5:22:E3:9F:20:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.43.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a5:ee:c7:50:c4:e3:75:81:b5:ae:87:8d:1b:ce:23:01:79:
         d6:1c:de:b6:57:de:65:19:ed:41:11:8a:46:80:2d:b8:9b:4f:
         f8:0f:08:d1:f6:81:89:cd:2e:60:82:49:ae:0d:aa:78:bd:2d:
         37:b7:14:b9:ce:8d:7f:27:ca:ff:93:b1:03:37:77:da:2d:1d:
         b7:8a:80:d3:9e:95:17:15:6f:58:46:4c:fb:ae:cd:f2:56:59:
         79:6a:52:83:bb:bd:e6:98:95:34:df:08:21:bf:50:44:39:75:
         27:fe:5b:48:79:b1:bf:8c:df:26:fa:50:27:e0:88:20:33:51:
         cc:8f:a5:9f:bd:70:a9:4d:11:cc:0f:53:6b:ca:2e:a3:77:3d:
         41:32:f9:c6:c8:c9:81:e1:ca:16:22:83:d6:a2:43:f4:45:9f:
         b9:4f:9c:8e:58:16:ee:ac:a6:01:75:79:34:e7:04:2a:a5:d3:
         7b:7d:35:85:21:7d:72:75:04:c6:8b:dd:2f:69:37:2b:31:78:
         2a:16:43:81:b7:e0:d2:0e:93:de:df:f6:dd:77:c1:2a:df:10:
         7a:33:b1:9c:2e:a5:27:4b:07:d5:d3:45:86:b5:2c:8d:d5:41:
         86:a0:07:83:c9:bc:99:97:d3:49:b8:e7:30:6a:f4:59:51:51:
         7f:c3:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:52 2025 by rpki-client