Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b9aea98-d5df-3494-9b07-2c5af950e2c1.roa
File:                     6b9aea98-d5df-3494-9b07-2c5af950e2c1.roa (raw, json)
Hash identifier:          14jeHnuYV5Xy1oN/XrNDJ6aTH0J4iFF0V3Ywc78CLOI=
Subject key identifier:   40:44:D9:40:18:1E:CD:BF:29:EE:E7:1F:A5:90:15:88:E2:84:20:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD04D54B93D0B9DE51B680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b9aea98-d5df-3494-9b07-2c5af950e2c1.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33490
IP address blocks:        96.85.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:04:d5:4b:93:d0:b9:de:51:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=5cfd83f2-549c-4542-9ac4-18e2570db5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:bc:ab:a4:63:bd:22:8e:1b:39:64:ac:7d:
                    73:81:a8:17:7f:6e:a1:38:d8:dc:30:a9:a5:b1:cd:
                    1f:5a:a4:5d:3a:0b:d7:67:a4:3b:c9:47:7c:e4:12:
                    be:a3:80:04:f6:9f:30:0f:55:ef:5f:de:1b:70:4c:
                    fd:0b:1d:67:fd:61:8a:8d:c7:46:a3:bc:51:0a:a0:
                    1f:6c:8b:cf:4e:62:ad:42:54:d5:13:34:70:85:d8:
                    c3:c4:f0:a4:af:93:65:c7:22:80:19:54:da:c9:3f:
                    8c:97:a5:f9:8c:bf:e8:b5:57:66:d4:5f:c6:35:12:
                    34:ca:b0:3d:2d:3d:e1:46:cc:52:d0:69:2d:c4:c6:
                    a3:21:50:3d:9d:19:04:ea:af:9d:1a:eb:6f:32:45:
                    35:3c:db:b6:02:43:93:6d:79:f8:e0:ec:51:54:05:
                    3c:0a:3e:c5:34:0e:50:a6:29:a7:9d:eb:34:cc:ce:
                    76:7c:fe:e3:ca:79:db:d9:cb:d9:73:da:7e:5e:6d:
                    38:9d:6f:c4:21:f0:52:2c:2f:e2:4d:3e:c1:4b:7c:
                    c4:ab:09:de:15:09:1e:65:91:a1:86:9e:44:2c:57:
                    36:b7:1e:1f:cd:08:aa:1f:db:86:0d:58:d5:cd:c1:
                    68:2a:4f:fc:f0:94:6e:eb:c7:9c:58:86:1f:5e:2c:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:44:D9:40:18:1E:CD:BF:29:EE:E7:1F:A5:90:15:88:E2:84:20:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b9aea98-d5df-3494-9b07-2c5af950e2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.85.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:08:31:6d:d9:61:5c:d3:14:eb:10:a2:06:96:97:e0:11:c3:
         4d:4e:6b:76:d0:1b:6a:d7:e2:53:42:c8:ba:32:53:c7:41:75:
         72:6a:7e:28:80:6a:b3:8f:3f:72:59:26:ab:36:fd:e8:19:a0:
         9a:51:1c:5f:55:6d:74:27:2f:0a:e5:3c:b2:7c:ad:2f:d5:d5:
         ea:b7:54:eb:9c:80:28:24:24:1a:7f:7c:0b:7c:cb:f9:12:d3:
         3f:2c:fa:e9:45:5a:d3:fc:27:9c:25:e0:8e:a6:7f:6b:3b:4a:
         21:a0:69:2a:5d:ba:55:61:02:6e:d6:ff:d1:0c:d9:cf:5d:09:
         9c:b8:b9:55:90:3a:ab:47:da:92:bd:d8:64:29:16:10:f9:85:
         bb:6e:a9:35:90:12:d3:9e:65:18:72:68:16:fc:1f:c9:2c:61:
         13:29:0e:82:a4:18:c4:b6:97:3f:78:ce:82:f2:92:c9:26:62:
         b0:7e:90:40:95:36:a6:1e:74:b5:16:80:16:b9:62:a2:5f:a5:
         da:bd:a2:78:e9:69:91:ca:c8:07:22:98:51:55:c0:63:5c:af:
         17:f5:98:00:68:b6:78:67:e4:55:8e:0d:48:8a:ab:f5:b0:68:
         37:60:17:04:52:56:29:3c:ee:6d:ab:b3:69:52:ac:c6:84:bd:
         21:6d:ff:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:48:51 2025 by rpki-client