Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/8d3f8e31-e0e0-3eb4-84fd-6c92a8027c7e.roa
File:                     8d3f8e31-e0e0-3eb4-84fd-6c92a8027c7e.roa (raw, json)
Hash identifier:          ue98+zg/IMkr3EWtTDmbGW5UdJQige6jQZ/D/g7TYwU=
Subject key identifier:   D6:1C:53:CF:48:E9:E3:17:8F:17:E1:6E:4C:05:86:28:D9:1F:F2:BB
Certificate issuer:       /CN=5f350da0-4db1-4f5b-9169-6795ba566bd1
Certificate serial:       010D0C9F4328584A744830F82D586154A4B23B00
Authority key identifier: C9:73:31:6A:79:E3:68:18:8A:7B:E9:8E:A9:1E:D9:BF:0F:53:12:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/8d3f8e31-e0e0-3eb4-84fd-6c92a8027c7e.roa
Signing time:             Tue 08 Jul 2025 21:19:59 +0000
ROA not before:           Tue 08 Jul 2025 21:19:59 +0000
ROA not after:            Mon 06 Oct 2025 21:19:59 +0000
asID:                     397926
IP address blocks:        64.66.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/5f350da0-4db1-4f5b-9169-6795ba566bd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/5f350da0-4db1-4f5b-9169-6795ba566bd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:48:30:f8:2d:58:61:54:a4:b2:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f350da0-4db1-4f5b-9169-6795ba566bd1
        Validity
            Not Before: Jul  8 21:19:59 2025 GMT
            Not After : Oct  6 21:19:59 2025 GMT
        Subject: CN=f9a97573-5118-476e-84f2-5af79307a9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:06:03:7e:ad:3f:a1:ca:8d:19:82:11:f4:
                    c0:aa:18:96:cc:5e:fe:24:2f:e5:fe:06:21:00:e5:
                    dc:75:89:af:a3:16:11:53:d8:4d:68:7a:ca:23:dc:
                    ab:31:05:41:ea:b0:12:16:fb:d2:99:c8:d3:35:5e:
                    ac:17:44:df:2d:ed:19:ba:13:d5:56:81:f4:08:ec:
                    40:63:25:95:39:75:2a:8a:e0:04:32:3e:f7:64:e4:
                    31:80:8f:d9:94:4b:e1:a9:20:39:ae:c0:71:4e:6b:
                    71:4f:9c:ef:07:f7:cf:3a:10:59:ea:54:fe:1a:56:
                    da:05:8f:44:35:34:0b:db:7a:94:40:da:59:45:21:
                    91:fa:f0:ba:1a:3f:56:50:01:29:08:22:1f:b7:02:
                    88:9e:52:ea:b4:46:54:ec:07:42:b5:55:04:ba:91:
                    54:d8:cd:85:33:27:6c:80:7c:27:a7:7a:14:43:c2:
                    71:81:c1:a8:b3:c9:42:9f:b5:c9:03:b7:8c:19:0a:
                    61:da:74:02:4e:a3:b4:23:22:4f:72:04:11:64:4b:
                    8b:48:8b:30:60:13:a9:3f:e5:62:d2:9c:ff:42:39:
                    c8:ef:69:f9:1c:46:7a:98:f0:6a:40:69:ba:73:3f:
                    8d:78:8f:d1:69:e8:d5:32:d6:b7:79:7f:38:d3:37:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1C:53:CF:48:E9:E3:17:8F:17:E1:6E:4C:05:86:28:D9:1F:F2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/8d3f8e31-e0e0-3eb4-84fd-6c92a8027c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/5f350da0-4db1-4f5b-9169-6795ba566bd1.crl

            X509v3 Authority Key Identifier:
                keyid:C9:73:31:6A:79:E3:68:18:8A:7B:E9:8E:A9:1E:D9:BF:0F:53:12:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f0:61:a7:bd:26:e9:b4:da:c0:a6:64:39:95:75:53:4a:de:
         c7:45:ea:8f:77:7d:eb:59:b4:2a:14:7d:7e:b6:c7:18:95:d7:
         a3:01:08:5b:3f:0c:0f:bc:ba:a9:fa:82:2e:1e:b4:b5:44:cd:
         6b:73:35:07:84:c9:6c:20:56:82:57:7e:e1:d2:f2:07:21:bb:
         b6:c7:9b:f2:06:52:be:98:3f:cf:0d:28:ff:14:64:73:c2:0f:
         a2:82:5a:90:ff:fc:60:93:8d:00:a1:85:6e:bd:e1:b4:4e:61:
         5e:a4:b1:c3:02:47:1a:0b:fa:c6:ca:33:3a:fe:59:83:14:38:
         aa:b7:e5:12:4f:58:9c:fa:6f:d7:cc:fd:c3:d7:78:51:3b:88:
         ed:ce:b6:7a:16:ae:e9:fa:f0:24:2d:34:5f:a8:4e:f8:ee:5f:
         12:55:b0:4a:3d:30:d5:d3:b0:7b:5e:f7:6c:b9:43:9b:ce:45:
         28:62:86:63:22:7d:07:57:83:ca:61:f8:94:fd:91:01:83:55:
         50:92:ea:dd:42:c8:c6:46:eb:0b:20:4b:36:f2:ac:39:03:ae:
         7d:c0:34:81:81:3e:6e:80:99:1b:31:f0:b8:5b:06:3f:18:cd:
         58:75:44:c2:6f:56:ca:67:da:e1:45:15:5e:8e:a7:e2:f6:d8:
         b4:7e:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:46:30 2025 by rpki-client