Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/51b28b8f-0a83-34f7-9e8e-16918e7a2b1b.roa
File:                     51b28b8f-0a83-34f7-9e8e-16918e7a2b1b.roa (raw, json)
Hash identifier:          yrz8UTdm4qifJaPzryRjCvgFdhnugIHnk3q+oPYQgVg=
Subject key identifier:   D6:A6:E1:49:54:BE:FE:B3:AC:A8:BD:1C:30:FA:82:41:9D:F0:AE:E9
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F4328584A77808E25EFA128987FBFE940
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/51b28b8f-0a83-34f7-9e8e-16918e7a2b1b.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     8075
IP address blocks:        166.98.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8e:25:ef:a1:28:98:7f:bf:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=4428cdc9-d681-45a5-b982-0d8fe36b31ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:90:ea:af:71:fe:9e:cf:17:e3:17:6d:af:fd:
                    45:64:44:04:a6:56:78:9e:95:d5:b3:d4:60:8e:1c:
                    89:71:0a:73:8e:fe:13:ee:e4:dd:0a:46:45:4a:21:
                    56:5f:0a:1f:d9:29:e6:07:5a:d9:4f:e6:0a:18:c5:
                    4a:7a:44:d1:cc:af:a0:97:1f:2a:81:be:2a:36:12:
                    9c:ca:a7:51:40:f9:12:41:02:67:f4:f9:99:af:51:
                    90:b8:90:47:ac:7b:c1:cc:1f:f4:b7:3f:d5:57:9c:
                    33:75:3d:dd:cc:e2:67:14:92:12:1d:07:ed:fb:db:
                    44:cd:12:27:00:da:be:92:46:d9:62:ee:2d:25:6c:
                    c3:55:31:d2:5c:7b:05:52:c3:4d:be:b0:ea:ed:c9:
                    51:df:27:c5:29:aa:69:58:bc:a1:1e:12:3a:e7:07:
                    93:c1:a5:3a:21:b2:7c:98:50:21:bb:2e:50:cb:24:
                    16:23:b9:44:c7:6e:9d:30:c5:7f:e7:c0:a2:26:39:
                    a3:f9:51:c9:d5:34:96:4e:df:0a:c3:36:af:98:ea:
                    bb:aa:27:55:fc:92:8f:10:00:3c:71:cd:d8:02:33:
                    5c:ef:55:40:47:26:d1:a7:a5:35:d6:58:e0:c8:58:
                    dc:71:ec:32:33:86:9f:15:72:68:78:09:c5:38:13:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A6:E1:49:54:BE:FE:B3:AC:A8:BD:1C:30:FA:82:41:9D:F0:AE:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/51b28b8f-0a83-34f7-9e8e-16918e7a2b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.98.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2b:de:56:10:ae:b4:a4:9d:ea:c7:e3:7d:14:e9:5b:89:c0:
         a8:2a:2e:6f:03:ec:3a:64:6f:ce:d8:3d:d3:0e:b5:22:84:bc:
         9e:e6:66:bb:26:e6:13:f5:47:af:42:da:72:18:ad:54:a1:27:
         07:95:ba:b5:3e:88:e3:04:e0:bf:14:a3:47:31:01:39:af:36:
         00:a2:88:3a:03:b5:72:84:82:e4:8a:20:66:84:6f:33:ba:6e:
         65:34:f6:54:1d:ed:ba:57:58:bf:12:d7:1f:e4:bf:dd:ec:95:
         ff:8d:69:87:b7:79:31:ac:63:9e:31:47:ef:20:49:e3:0f:33:
         60:c3:9e:f8:86:46:b2:03:2d:1c:90:5d:56:a0:b6:a2:0e:56:
         1f:f8:0c:e7:de:63:20:05:e8:33:de:02:8b:91:58:59:b9:ad:
         8a:7b:3a:14:6b:d8:91:2f:2e:44:bf:4e:fc:e4:50:6d:9d:8a:
         da:3e:ab:80:9d:76:13:d9:5c:be:78:91:66:20:2c:e7:67:f3:
         54:1a:af:16:7c:b2:88:67:55:46:18:9a:ae:43:4f:27:7c:f5:
         b2:61:26:99:58:e0:6b:b9:e4:2f:22:14:49:7c:4f:9e:b3:c7:
         06:16:72:89:b5:2c:20:2b:f3:e5:83:99:20:7e:da:34:cf:0a:
         4e:be:cf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:56 2025 by rpki-client