Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa
File:                     e62e48d2-4883-349d-8f20-db0ec148275e.roa (raw, json)
Hash identifier:          F+o5g8T/Q65ysB+HALmI9DFBaXW0BqTyKglkofmO5rk=
Subject key identifier:   3B:C2:35:82:B1:49:1C:D8:51:40:33:8D:6F:F4:5E:64:A6:1E:28:12
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BED0F6850865B1F4E2610
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     394993
IP address blocks:        64.62.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ed:0f:68:50:86:5b:1f:4e:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=49cdf299-9425-48f8-9953-b3b262a321ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5c:11:a5:8b:d9:41:3d:de:f1:38:a4:fb:b5:
                    44:f6:f4:b1:d9:6b:fb:ab:30:b2:8b:9d:25:8d:08:
                    48:6a:e3:1a:d5:93:68:18:77:7d:d3:a3:8e:72:25:
                    8f:d7:bf:6c:2d:46:cb:f0:19:fd:6b:02:88:78:e3:
                    79:ab:c9:93:00:c4:37:d0:fe:a7:29:10:02:8f:c0:
                    5a:6d:39:f4:bc:9a:bc:e5:e0:32:f6:59:fa:c9:b2:
                    63:d2:89:1c:21:67:c6:2b:a0:6c:d8:84:ab:da:5f:
                    69:77:fa:ae:3f:f4:82:29:69:88:d3:3c:ed:7a:e6:
                    c8:ea:99:5d:55:af:16:fe:9b:43:9a:a9:d8:71:ed:
                    1b:b6:49:f1:e1:99:62:24:83:75:ce:f6:a4:c4:d5:
                    50:c0:9d:60:72:5d:dd:4f:9d:8a:da:43:1d:87:b8:
                    d6:08:f9:2e:47:65:b5:08:93:af:f0:21:f7:5c:73:
                    cb:36:b9:62:e5:8b:10:59:bd:0c:06:53:97:ab:ca:
                    0f:35:7c:00:6b:74:78:8f:ce:4a:98:78:9a:65:20:
                    bb:c1:0e:e5:ac:fa:3d:4a:b1:75:f2:8a:80:c7:8d:
                    49:02:ee:bd:12:82:c8:7d:35:07:af:9e:6d:e0:f8:
                    83:65:4b:a5:63:cd:26:0a:d4:05:c9:dd:b6:07:f2:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C2:35:82:B1:49:1C:D8:51:40:33:8D:6F:F4:5E:64:A6:1E:28:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:72:93:a3:43:89:55:82:f4:7c:a5:46:41:b7:c5:39:27:50:
         1b:9d:b0:e0:ef:5a:cd:4b:05:a0:e3:db:c5:06:e2:28:82:c3:
         33:fb:98:a0:f0:d8:c3:04:68:09:0c:72:c4:93:8a:6e:c6:09:
         6b:4e:6a:91:b7:6f:1c:40:98:e9:e7:4d:ee:ba:88:7f:02:c8:
         cf:54:77:c3:6c:ec:f0:cf:05:ee:5c:90:a5:3b:88:2c:de:73:
         ed:c1:00:96:5f:a5:25:96:19:03:23:6c:6f:67:df:21:a7:51:
         01:90:af:e0:dc:de:60:aa:93:0a:6d:5f:f1:3c:63:f8:8e:79:
         38:c8:3e:8b:8a:13:3c:00:56:ac:7f:b6:91:92:5e:66:34:ec:
         a4:ed:bc:03:ad:4e:61:6e:29:ca:e6:c8:0c:ad:58:c5:7d:ad:
         8e:fa:55:c6:4f:b2:23:f4:e6:f7:c1:31:35:a3:a8:91:2b:7d:
         78:d9:c7:6c:37:ae:dd:bb:13:92:b0:b3:72:ff:c9:5c:0a:ce:
         c2:d6:d1:11:6e:d9:0a:40:8f:d9:bc:c7:86:7d:f8:63:50:a0:
         33:a7:94:12:6e:4c:35:9c:a3:78:f5:11:20:27:3f:15:4a:34:
         e8:f3:b5:f3:c3:b1:15:b3:37:6b:ec:be:97:7d:7a:27:15:34:
         3e:1d:cd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:40:25 2025 by rpki-client