Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/f4a13fff-2af8-3236-aef5-f9de7616b897.roa
File:                     f4a13fff-2af8-3236-aef5-f9de7616b897.roa (raw, json)
Hash identifier:          9paO7MSpH/8l+a58WgEUEqKoYWHATlG7TaTwCjCZ0Vs=
Subject key identifier:   A4:1E:0A:D3:45:9C:7C:38:78:66:37:AA:52:1D:69:12:AB:66:3C:E3
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F4328584A1E2AA1AFA16C7BF0D4C29980
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/f4a13fff-2af8-3236-aef5-f9de7616b897.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        198.187.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a1:af:a1:6c:7b:f0:d4:c2:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=dc858122-f60e-4e8b-a1da-55c0fa979c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:eb:1a:8a:cf:b2:59:74:d2:14:e8:89:44:
                    65:5c:a7:7d:6a:3b:fd:15:c6:12:94:20:fc:c5:d7:
                    08:86:48:9d:86:fc:b1:13:a7:e5:b8:3d:10:4c:9c:
                    ec:7b:fc:95:21:92:38:36:91:5b:b7:2f:82:31:a2:
                    26:ba:c8:a1:85:03:f8:dc:90:29:72:00:28:48:5c:
                    df:b9:a1:74:00:1d:36:9d:0e:cb:87:4e:81:b1:5e:
                    7b:73:3e:86:e6:08:60:8d:d2:d2:8e:e9:36:5b:ae:
                    f7:16:9e:55:e3:94:c6:82:fa:fe:97:f1:c5:91:77:
                    e8:c0:8c:06:7f:94:d7:32:00:b8:7b:3c:39:84:b3:
                    c1:ce:ab:8e:77:fb:75:f5:22:1a:f9:4d:ba:18:93:
                    b2:63:e8:62:16:e6:01:cf:1f:a7:6b:a1:4b:06:83:
                    59:a8:cd:65:ca:23:bc:ea:8e:34:8f:63:9e:a8:ee:
                    30:ac:8b:ba:44:8b:d1:05:98:bd:e6:9d:9a:b4:68:
                    1f:41:30:8b:5d:3b:27:16:c8:93:df:82:62:3a:a7:
                    b9:44:5a:46:5c:30:78:25:87:28:13:22:8d:e5:74:
                    ac:c8:5d:ee:7f:50:9c:44:3f:bd:b9:84:74:de:d6:
                    76:ec:6d:d2:42:cd:53:30:dc:34:d7:1d:71:08:c7:
                    3a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1E:0A:D3:45:9C:7C:38:78:66:37:AA:52:1D:69:12:AB:66:3C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/f4a13fff-2af8-3236-aef5-f9de7616b897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:4c:38:ee:e4:52:bd:5d:a9:24:c3:c9:2a:96:1d:60:12:93:
         4b:8e:d1:48:3a:78:95:75:14:35:d0:8a:4e:0c:eb:8c:45:a8:
         47:7f:85:b2:21:32:ec:b9:0a:00:c5:20:aa:5e:d4:c3:e5:08:
         ee:18:e3:46:2d:b3:29:61:56:18:7c:6b:49:5b:23:94:ad:63:
         f6:dd:9f:27:29:aa:8a:1d:38:f7:1d:fe:97:e8:8e:4c:7c:fc:
         e5:a0:cc:fe:66:c3:f8:99:af:e0:cf:06:f8:f8:c8:74:5b:32:
         c2:4f:3d:62:a9:00:f4:bd:30:e0:0c:8b:5f:6d:d6:38:5b:30:
         bb:2a:bc:2b:60:1f:2a:f6:9f:3a:3f:05:d6:dd:77:1e:e1:6d:
         0d:8b:29:02:11:83:e9:44:2c:c2:59:35:3e:a4:74:89:ea:06:
         d9:1d:aa:98:25:91:1c:1c:d2:93:31:8d:c9:d0:8b:81:22:21:
         38:6b:39:a2:79:c6:c8:67:77:cc:e1:0f:dd:2b:e7:e8:df:88:
         ba:4d:73:8c:85:f1:92:d4:2d:96:78:f3:e8:bc:84:c8:5e:ab:
         f7:c7:f6:6c:f8:66:c2:a6:19:16:9a:2f:95:43:41:4f:1b:54:
         7e:c1:48:b5:51:45:41:b5:04:cf:89:b5:16:ea:10:3a:d9:de:
         22:f1:c5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:08:46 2025 by rpki-client