Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa
File:                     2951e8ad-8636-3403-831f-0d15984794b4.roa (raw, json)
Hash identifier:          kLpabM4AJXPMGx7Qa9OnDGvE3FewiqIZSCJWygW7+8o=
Subject key identifier:   1C:7D:43:80:40:74:69:70:2D:A5:FA:AA:CD:5C:B7:62:34:27:8D:61
Certificate issuer:       /CN=29c10060-705c-45ae-937b-544864b670d7
Certificate serial:       010D0C9F4328584AA42B7EBEDA1E3499AA161E00
Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        64.71.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7e:be:da:1e:34:99:aa:16:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c10060-705c-45ae-937b-544864b670d7
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=3905294d-a276-4f44-baca-b810b1841c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:16:ff:c8:b6:9d:72:de:d7:1c:b9:1f:3c:
                    31:cd:c2:66:45:4b:50:fc:05:e3:aa:e2:f9:e3:98:
                    31:6e:aa:28:20:30:f8:06:d1:40:89:f2:a3:ef:92:
                    e9:de:6c:32:ac:62:13:9b:d1:3a:d9:8e:05:b3:3d:
                    5e:a7:90:cd:58:16:fe:70:56:66:8e:41:72:98:70:
                    1e:17:21:e2:b3:87:94:8c:43:75:a6:25:47:22:0c:
                    04:19:1d:0a:6d:0d:37:06:b8:63:46:75:d4:03:27:
                    e5:a1:6a:af:d0:c8:f8:92:38:eb:7c:d0:6c:26:3a:
                    dd:6f:45:a6:f0:84:a6:30:a8:22:64:b5:10:2a:c7:
                    8d:76:42:0f:42:d5:34:8c:55:6c:bb:da:a2:0e:43:
                    34:64:31:d7:e4:c0:e4:01:7c:d4:7d:ed:e8:72:73:
                    90:5b:af:e3:a9:f4:f3:16:d1:d8:b8:54:e6:b6:3d:
                    e2:65:b9:6b:a2:61:32:a5:61:4e:c5:e6:bf:b0:0b:
                    9a:7a:10:fd:b6:51:c3:95:c5:3e:f0:25:54:9e:df:
                    83:87:6c:e1:30:4b:58:b8:7b:dc:14:ad:f0:da:fe:
                    77:ba:33:5a:3c:7a:22:7f:6e:75:75:1e:0e:77:fc:
                    be:7b:4a:6c:ae:0a:cc:f5:4f:cb:0a:f2:39:e3:35:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7D:43:80:40:74:69:70:2D:A5:FA:AA:CD:5C:B7:62:34:27:8D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:a2:25:2a:4e:22:5f:1a:a5:81:8a:0d:08:54:a5:32:a5:
         04:62:f3:0c:6f:f2:82:6e:c9:14:c6:bc:08:58:cc:b1:8f:2f:
         9d:7f:c4:bb:ba:03:96:c8:2a:a0:9b:05:35:47:46:ad:ac:f2:
         6c:5b:4e:c2:f7:8c:8e:44:11:90:8c:3d:33:be:1f:33:87:1a:
         53:9d:84:7d:97:8e:2e:ba:97:cc:0a:86:55:f3:e4:d2:44:9f:
         5e:a6:15:1f:59:5c:f8:2c:0c:fa:22:b7:9d:8b:cd:ba:48:46:
         ba:23:11:09:64:69:16:e6:f0:93:8e:34:41:51:07:7e:39:76:
         9b:91:c8:84:31:7f:41:59:04:33:b6:d6:f2:fb:9f:4a:ab:bb:
         53:84:59:a0:ab:b8:01:51:91:bc:e3:b1:98:d1:ac:26:74:8b:
         16:8a:f6:72:ff:d8:97:ce:c2:62:10:5b:7d:72:f3:de:ff:79:
         d6:dd:6b:5c:52:e5:47:c5:0c:75:97:ea:b7:98:05:82:27:de:
         87:d8:1d:55:b1:5e:01:ce:68:49:fc:77:55:01:90:78:96:b9:
         5d:6d:87:bf:47:22:73:ce:39:3d:c9:85:4c:e3:b4:e3:25:3c:
         d9:a9:39:0d:df:33:02:05:3f:aa:d2:5b:31:fb:28:64:fd:3e:
         3d:91:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:08 2025 by rpki-client