Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa
File:                     f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa (raw, json)
Hash identifier:          CRQskYtAixKcpnGle0/vsHpVay41lEy1eZ27/ief3qI=
Subject key identifier:   18:24:1D:2D:75:F5:6A:3C:C0:AE:C0:5E:A5:F5:A0:8A:07:FC:2A:82
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A86DBD3F35DFF698486BF86A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        64.233.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:d3:f3:5d:ff:69:84:86:bf:86:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=c9422156-f75d-4d3d-87bb-752335a312db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:f6:53:2e:b8:8b:5e:8b:bd:44:0d:0c:92:
                    f2:1d:74:1f:41:04:77:18:bf:b8:3c:96:ac:42:54:
                    ea:4e:89:29:3e:c5:84:05:97:0c:f1:f3:23:be:f0:
                    3f:23:76:b7:1c:73:3d:cd:32:9b:b0:5d:ba:39:51:
                    45:a6:c5:45:c4:a6:ba:e2:7a:16:79:ad:29:eb:2a:
                    1f:61:56:af:b6:69:84:37:dc:02:55:d9:4c:42:74:
                    30:0a:de:8f:68:ac:c4:15:4c:73:59:30:dc:5b:f8:
                    40:d6:c5:df:37:56:ff:6b:3b:20:24:92:41:70:b6:
                    2c:f8:86:71:aa:c5:9b:91:45:ea:07:6d:e4:33:89:
                    f0:4f:b1:e3:da:41:bf:5f:e7:fa:c0:24:d7:c0:23:
                    59:79:66:c1:e6:8a:90:59:c3:b3:81:24:78:1f:47:
                    1f:43:15:11:33:e7:6b:bc:df:f6:06:5c:5b:67:7c:
                    4d:67:ac:ef:67:f1:ad:31:fd:8d:e4:07:f6:49:ee:
                    12:3d:fa:69:12:b8:ae:10:00:d5:ff:ac:0e:de:44:
                    d0:9b:ac:00:d8:40:32:32:31:20:a5:ef:1e:51:0a:
                    0d:fa:24:a1:d1:60:34:c9:7f:9c:28:29:72:a3:95:
                    b0:95:2a:30:6c:a2:06:43:d7:35:a0:ad:ec:8e:ec:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:24:1D:2D:75:F5:6A:3C:C0:AE:C0:5E:A5:F5:A0:8A:07:FC:2A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:d9:37:f1:e7:0d:e3:70:6e:2d:9d:3e:ba:f0:72:ae:2b:
         58:f5:23:ef:07:c6:c7:b5:c4:f0:50:10:ba:a9:01:2d:87:6f:
         02:be:06:0c:a7:41:96:3d:d4:9a:f9:4c:f2:df:cf:61:2a:32:
         5d:78:5d:1f:ab:69:04:1a:27:65:56:90:af:ac:e6:15:15:b0:
         ff:4c:61:e9:3a:84:cf:35:2e:77:ee:e6:71:5c:4f:de:77:e0:
         22:be:10:34:f2:85:4f:25:3d:3a:37:00:14:cf:a3:93:75:72:
         03:f9:57:8b:2d:8d:52:07:2b:15:ee:56:cd:2c:40:f3:10:a0:
         4b:a5:10:c5:b3:b5:47:82:6c:06:8d:23:bc:c6:c3:66:37:0a:
         2d:00:f4:79:67:ff:4c:b4:d0:ec:1c:0b:fc:97:a9:c6:2a:3c:
         39:8a:4d:86:2a:94:e5:16:eb:0a:75:e0:7e:37:e2:73:26:57:
         ee:19:51:3a:43:a4:ca:af:dc:67:27:c5:f1:9b:99:7d:e9:ff:
         69:4c:eb:c4:af:8c:51:11:ce:b7:11:96:48:1a:09:dc:18:dd:
         cc:1d:ca:99:a6:84:c7:48:8d:76:22:88:da:04:64:9c:61:d2:
         37:16:8a:d3:eb:11:fc:6e:27:f6:df:12:b5:96:5a:68:a9:61:
         fd:e5:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:24 2025 by rpki-client