Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/ff633fe3-0e24-3cb0-b6a4-2ae82ddd8769.roa
File:                     ff633fe3-0e24-3cb0-b6a4-2ae82ddd8769.roa (raw, json)
Hash identifier:          eTEeoZkQnjcQZFMci4uQ2PqEJjxNtQuZjXq/cRVOrqo=
Subject key identifier:   F5:7A:8E:ED:1D:AB:CA:75:35:B5:F9:56:F7:20:FF:ED:E1:15:5D:2E
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F4328584AAB2657C0128BE1D8ED1EF140
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/ff633fe3-0e24-3cb0-b6a4-2ae82ddd8769.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     52347
IP address blocks:        162.217.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:57:c0:12:8b:e1:d8:ed:1e:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=d6785d9f-08ff-4eb9-8a4b-b13aeb56708c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:23:2b:3c:ea:13:c4:c6:cf:98:8c:a9:0f:
                    08:c2:8e:4d:c2:88:13:dc:36:5a:cb:67:a9:0d:ba:
                    9c:a9:fc:33:7f:52:98:6b:68:1a:0c:4d:b3:4e:37:
                    73:ee:83:0a:bd:66:af:dd:6c:1a:ed:79:77:f8:15:
                    81:09:93:2b:74:a6:ed:3d:80:b1:78:07:37:dd:70:
                    ce:f2:83:e0:76:de:44:ca:57:62:7c:b8:15:b6:11:
                    aa:4a:d0:77:fb:20:eb:1a:3f:d9:bc:ca:d4:cc:fc:
                    6b:ae:0c:85:76:ea:6b:52:c9:cc:79:a5:78:5d:f0:
                    ad:45:02:18:ba:35:ad:9d:70:e8:29:61:15:1a:d8:
                    3c:81:e3:c5:df:03:d5:30:0b:77:b1:48:2a:05:c3:
                    cd:96:b1:dc:0f:de:9a:1d:ed:b9:6a:65:89:68:80:
                    7a:79:71:ff:9c:9a:4c:99:dd:b9:cb:00:26:a4:73:
                    3d:e9:7e:5a:6a:c0:17:b2:cd:a9:9c:46:14:e1:05:
                    85:a2:64:b4:28:04:3e:24:84:2b:a7:7d:4a:7b:bd:
                    44:5c:55:b8:d7:6d:d9:e2:9f:d1:5f:c2:a3:ec:9d:
                    57:3f:1a:27:21:f0:87:65:34:6b:c0:bc:41:1a:22:
                    33:02:4f:49:01:a8:f4:12:be:e7:78:6a:9f:03:77:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7A:8E:ED:1D:AB:CA:75:35:B5:F9:56:F7:20:FF:ED:E1:15:5D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/ff633fe3-0e24-3cb0-b6a4-2ae82ddd8769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:a7:d7:a0:e9:4b:ed:c1:1a:01:21:c2:1e:a4:5c:2b:11:
         bb:26:fa:81:cf:38:38:c7:e0:38:65:03:fa:42:02:9b:56:2b:
         19:bb:2d:88:a5:9c:12:f7:dd:f9:5a:7d:59:6f:c3:5a:57:a4:
         0c:30:2d:dc:d3:60:a4:cb:e2:17:c6:b2:14:ed:65:aa:0c:a5:
         c5:bd:bf:d1:fd:55:ea:a0:5f:5b:e5:06:9f:d8:df:15:f9:ae:
         83:8a:a4:b3:30:8e:0a:a6:30:aa:44:d5:86:ce:ec:4e:83:14:
         d5:03:8a:3e:35:81:c7:65:7a:77:3c:fd:49:cb:4e:88:ea:6e:
         4c:ff:7b:f7:a2:94:82:8b:9f:57:1c:fa:90:c2:d3:b7:7a:42:
         dd:72:1d:e2:83:3b:fc:74:df:14:01:ae:25:c7:00:cd:70:94:
         ac:d8:f1:d5:98:ec:5b:be:48:25:37:e1:9f:b7:81:73:be:aa:
         4f:98:81:eb:de:46:3b:8c:a5:15:6e:bc:97:b5:e4:09:ed:e0:
         3d:57:8b:c0:d7:f3:40:13:33:ef:cd:60:6c:40:09:82:3a:39:
         27:08:57:e7:a4:2e:f4:3c:29:6e:4a:a7:67:54:b5:00:8f:c9:
         83:b6:aa:df:ea:b5:5d:18:31:32:39:01:a3:7c:27:98:12:e4:
         e0:dd:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:26:03 2025 by rpki-client