Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e654ce0-86bb-3dcf-9da8-c6f98e908a39.roa
File:                     5e654ce0-86bb-3dcf-9da8-c6f98e908a39.roa (raw, json)
Hash identifier:          PB6PbFP/DYo3WznmmepFs9cpa2LbSTUHIq18MOS5UYM=
Subject key identifier:   0F:68:A9:8C:EB:7D:37:F1:CA:AA:E8:5B:7D:16:B1:35:B7:D9:C2:32
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BF00BCE2BDB7B4F954580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e654ce0-86bb-3dcf-9da8-c6f98e908a39.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     6565
IP address blocks:        64.71.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:f0:0b:ce:2b:db:7b:4f:95:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b87b0783-e4fb-407c-81e9-e1d58547e93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:bf:42:01:40:3e:2f:0f:e4:de:85:96:26:
                    d9:e3:e3:ed:27:f1:8a:80:9c:39:f9:85:31:3c:22:
                    71:8d:03:c2:68:53:33:ce:80:db:2e:3c:c9:29:11:
                    71:98:16:a6:b4:76:e4:77:2c:e2:4c:f8:72:ec:9b:
                    14:41:d7:44:ae:27:2f:4a:3a:52:de:72:73:4c:54:
                    7c:23:79:7c:91:fe:a9:1d:ce:6f:09:55:2a:25:bd:
                    e0:60:6b:9a:e3:68:cf:7e:40:b6:09:1e:13:6f:f6:
                    e5:94:1b:13:d1:20:ff:9a:22:4b:22:1b:dc:73:d6:
                    63:8b:7e:87:f1:53:7e:9c:de:6e:ce:59:88:d1:f9:
                    70:d6:c5:9b:cd:79:c2:88:24:a5:5b:c7:91:c6:0f:
                    48:66:2a:5d:fe:da:76:3c:83:11:9f:27:78:75:db:
                    77:f4:4b:67:57:81:03:4a:92:92:4d:d0:7d:f7:9c:
                    fa:16:84:fd:30:a9:cc:44:ed:e7:df:d7:76:c3:9d:
                    73:32:25:f2:61:65:0f:b4:a1:89:c7:33:2a:c8:2c:
                    a9:93:b7:14:68:e5:33:3c:04:d1:c9:44:81:27:c8:
                    6b:53:ce:a4:95:97:5d:bc:b7:e6:f6:8b:25:a6:59:
                    91:73:a7:c2:f3:8f:65:40:65:6a:c5:31:20:76:12:
                    0f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:68:A9:8C:EB:7D:37:F1:CA:AA:E8:5B:7D:16:B1:35:B7:D9:C2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e654ce0-86bb-3dcf-9da8-c6f98e908a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:6f:bf:89:e2:00:9e:08:14:5b:d5:24:4a:31:eb:13:86:77:
         73:9d:8b:b3:a5:6f:ff:11:23:cb:35:f4:7f:ce:ee:ac:8b:e2:
         29:71:fa:15:cf:55:5f:a7:9d:be:31:bf:31:38:17:17:b5:1b:
         d6:f5:e8:9b:ef:dd:e8:3c:35:bc:d3:f9:8d:e1:fc:11:87:8e:
         20:cf:ff:da:24:61:35:3c:2a:8d:0a:c7:12:1e:c1:d8:c4:fc:
         39:54:67:a0:bb:f5:c3:93:85:e2:9f:8a:c2:a7:0c:50:a4:7b:
         9b:f2:d6:fe:23:88:12:18:52:00:ea:1b:35:8b:86:e5:d8:3f:
         9a:85:2f:56:9c:8f:bf:a8:1b:3f:cd:c5:bf:e2:61:c3:dc:a5:
         24:10:bf:a1:46:34:3b:7e:1b:d7:75:29:3a:8d:b1:72:25:41:
         35:75:e0:08:ce:ee:d5:81:24:25:dc:d4:7b:59:ff:3f:30:d6:
         26:70:27:c2:e4:ab:4b:18:64:cd:fc:b6:d5:c0:d9:54:4f:0e:
         48:b5:e1:ac:e3:8c:40:01:a9:76:4f:67:e1:62:28:f4:b8:ca:
         aa:7a:e4:9d:e3:48:91:e3:58:29:eb:5a:78:aa:f1:96:8c:e3:
         d6:ab:57:f2:a0:a9:a0:f3:bf:ba:4a:d5:1b:80:b8:9d:57:a2:
         bc:9b:26:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:21 2025 by rpki-client