Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0928039f-70ef-3408-8cb8-b2a0bb59eddc.roa
File:                     0928039f-70ef-3408-8cb8-b2a0bb59eddc.roa (raw, json)
Hash identifier:          WIT8vrHp360Rh3uokqRPizox/NifbHu2VTAMMCmvD0M=
Subject key identifier:   79:AF:EF:F8:72:E9:08:66:CD:86:E1:C0:D6:C1:03:40:34:2C:A1:4B
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584A4970680B1BD04E8275380E80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0928039f-70ef-3408-8cb8-b2a0bb59eddc.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     39122
IP address blocks:        64.96.3.0/24 maxlen: 24
                          2620:57:4003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:68:0b:1b:d0:4e:82:75:38:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=6c0bbbfb-dabf-4488-9113-fe932ee9c732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:ca:f1:b8:c8:db:62:87:38:18:e5:71:f8:
                    c8:48:32:7f:7a:3a:94:87:fc:4b:a0:a8:71:9f:8a:
                    bb:7c:1c:c4:bd:d2:68:59:b4:47:7d:90:52:71:1b:
                    43:17:cf:21:67:5d:26:e3:ad:55:da:fe:65:73:a9:
                    63:21:69:5a:f9:e6:dc:ff:e4:79:f9:c0:dd:d0:58:
                    2c:87:80:f5:29:88:03:85:a8:5d:4c:95:fc:b3:c3:
                    aa:f2:c5:a8:88:c5:85:b5:80:1e:6a:37:d4:17:95:
                    59:28:c6:61:d2:1c:60:5d:6c:df:85:8f:b1:69:05:
                    8d:a8:fb:79:11:09:ac:28:e5:20:f5:04:9e:09:98:
                    cb:d0:94:67:87:bc:13:8d:93:ac:0e:3a:29:9e:c2:
                    2a:f7:59:78:b9:11:75:52:72:c6:39:64:1f:bf:55:
                    1b:d4:94:5f:93:4b:5a:72:a0:05:e9:fc:8d:24:c6:
                    19:d8:fb:3c:59:4b:88:d3:e8:5d:a2:12:ed:6b:58:
                    ed:2e:35:e1:ee:1f:ee:04:bd:8a:39:67:10:bd:b4:
                    e3:27:5a:65:9b:c5:43:24:0f:9a:f4:3c:e3:f4:85:
                    7b:1d:db:58:89:01:62:d6:83:2a:c0:c8:69:75:13:
                    dd:5a:5c:6c:a2:87:d7:bc:15:69:bc:62:10:d2:f3:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:EF:F8:72:E9:08:66:CD:86:E1:C0:D6:C1:03:40:34:2C:A1:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0928039f-70ef-3408-8cb8-b2a0bb59eddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.96.3.0/24
                IPv6:
                  2620:57:4003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:80:70:15:5e:86:a4:82:bc:19:95:6a:9d:53:17:e8:11:
         a3:de:54:87:4b:0a:8f:1f:50:be:56:7b:bd:17:94:63:20:4b:
         d3:b5:da:11:b5:48:f2:c3:a4:52:2d:28:bc:1c:ee:ef:fa:f0:
         61:ce:14:97:07:a6:02:fe:3f:65:75:e1:b5:38:d7:a1:d7:c9:
         27:8e:8f:47:da:31:76:70:5d:74:af:2a:e6:19:cf:55:c3:e4:
         d6:54:33:c9:82:14:2c:73:ec:c5:01:be:d3:2a:f6:09:23:ce:
         c6:58:8d:ae:66:2f:f0:9c:17:4f:6f:13:e8:19:76:e4:0d:6c:
         bd:45:8e:41:d2:9c:15:aa:9e:b3:4a:02:5c:56:81:e4:ab:48:
         84:d2:ea:05:db:f8:9c:89:bb:8d:9e:e9:43:31:ad:33:31:a4:
         2e:d0:63:59:ca:f7:ca:43:66:6c:53:71:8e:87:d4:56:b8:d5:
         6b:57:15:86:d7:8e:94:10:b1:77:ce:bd:6e:95:3e:a4:52:28:
         26:d7:3d:c3:e9:ae:61:32:26:47:d5:79:0c:18:e0:5f:5f:88:
         77:cd:03:7f:68:63:4f:b3:9b:53:fb:49:3f:e2:7d:e8:ee:04:
         fe:24:8e:f8:1f:e3:9c:ec:c3:ee:4d:27:bb:00:6c:a4:1c:47:
         cb:e2:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:40:42 2025 by rpki-client