Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/e27d0061-9d30-38aa-b201-f3054472799d.roa
File:                     e27d0061-9d30-38aa-b201-f3054472799d.roa (raw, json)
Hash identifier:          adCRtqIy4rplYBbLfeavHE3IrnnzMZwXsQF6Js5OTqA=
Subject key identifier:   96:25:12:58:BC:B8:61:B9:67:30:7D:3E:A6:E1:28:70:25:84:F7:60
Certificate issuer:       /CN=c052e455-8070-4e1b-8bd1-ae10e41d72a4
Certificate serial:       010D0C9F4328584AA874685AF8CCE0129EF0C080
Authority key identifier: CF:EC:30:A7:22:2D:1D:89:05:A5:D4:D0:86:CB:D2:3E:BA:BA:99:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/e27d0061-9d30-38aa-b201-f3054472799d.roa
Signing time:             Sun 27 Jul 2025 13:51:07 +0000
ROA not before:           Sun 27 Jul 2025 13:51:07 +0000
ROA not after:            Sat 25 Oct 2025 13:51:07 +0000
asID:                     32881
IP address blocks:        65.75.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:74:68:5a:f8:cc:e0:12:9e:f0:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052e455-8070-4e1b-8bd1-ae10e41d72a4
        Validity
            Not Before: Jul 27 13:51:07 2025 GMT
            Not After : Oct 25 13:51:07 2025 GMT
        Subject: CN=4945dc9c-020d-48d9-82bc-9c87190c308f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dc:52:18:72:c9:f0:2c:6e:49:4d:39:c4:72:
                    47:fb:38:27:8d:ac:62:2d:b5:5f:c0:ec:0f:fb:75:
                    d4:c2:34:2d:cd:a8:8a:32:9a:72:fa:86:91:3a:4f:
                    14:89:77:a6:b2:f4:03:43:29:92:62:da:1d:5f:2e:
                    c8:4e:e5:b4:ee:dd:1b:32:90:6e:72:27:75:05:c5:
                    74:26:19:60:dc:3a:1f:42:e6:14:2c:98:0b:97:ff:
                    b6:8e:ec:f6:13:38:06:86:e4:51:d3:00:96:9f:fd:
                    84:1d:f1:71:b7:5c:aa:6b:dd:ee:48:d0:be:c8:ec:
                    08:83:18:8f:d1:ea:89:02:be:49:34:0d:36:90:5a:
                    f6:63:01:eb:01:f9:64:87:c9:da:10:1b:6e:9e:d9:
                    66:55:30:3f:06:f0:c2:86:9b:04:67:8f:76:ee:c4:
                    ff:bf:eb:90:0e:b0:11:06:ec:2f:b2:83:c5:3b:1c:
                    c0:38:10:a6:5f:97:1a:1f:6f:3c:8e:fd:45:29:74:
                    45:d4:6d:62:2d:d1:dd:64:b1:85:da:07:81:61:a9:
                    8d:3b:7b:ad:09:79:85:ef:18:60:54:fa:cc:2f:4d:
                    18:e7:a0:4b:77:29:eb:29:ce:44:fe:a8:11:12:c7:
                    5a:a5:cc:6f:d4:e5:21:ea:b6:60:61:f3:6f:a8:80:
                    cf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:25:12:58:BC:B8:61:B9:67:30:7D:3E:A6:E1:28:70:25:84:F7:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/e27d0061-9d30-38aa-b201-f3054472799d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.crl

            X509v3 Authority Key Identifier:
                keyid:CF:EC:30:A7:22:2D:1D:89:05:A5:D4:D0:86:CB:D2:3E:BA:BA:99:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:38:f7:2b:5b:1f:3a:7a:10:8d:3f:68:d1:0d:b4:0b:30:bf:
         63:9e:dc:82:ed:e7:9a:5e:47:ae:6a:8c:38:6c:1e:3b:25:50:
         8b:e4:ab:5c:90:3b:d2:c3:ad:6c:90:69:e2:47:5c:22:63:23:
         df:3f:07:93:ca:56:90:47:2b:58:79:6b:8a:f2:81:e8:c1:c7:
         6e:d0:a4:b9:71:4f:6c:d6:20:0a:a4:a6:50:f8:83:1a:e4:ae:
         51:73:f2:ed:f6:0d:f4:ae:48:bd:7a:19:f2:4c:9d:2f:f7:64:
         c6:74:c6:0b:eb:dd:9a:30:7d:8f:6c:09:07:94:1a:21:5c:a9:
         68:a3:fa:cc:66:c4:aa:89:4a:79:d7:bb:44:6b:d9:60:b5:7f:
         c4:f0:0d:79:7f:5b:c1:02:5b:09:65:a0:f6:43:0c:3f:85:d2:
         45:82:d5:da:ca:0a:ff:24:ee:59:39:55:b5:b1:dd:cc:37:02:
         22:da:ab:aa:13:3f:5b:28:02:a8:08:7e:3c:90:dd:c9:27:07:
         7f:1a:7c:6f:15:34:66:3d:83:97:ca:15:06:10:be:be:f1:1f:
         58:b4:c9:7b:bd:97:7b:a6:da:86:97:5e:8b:a6:cd:1c:c2:b2:
         f2:02:ca:d4:fa:8e:a2:87:88:32:f1:d3:41:7c:e3:59:ef:81:
         9d:4e:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:49 2025 by rpki-client