Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa
File:                     f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa (raw, json)
Hash identifier:          rxRBoi0g+1PXlZsQeI2Jbfs/5O8TZkLBRcxx5rC+cvs=
Subject key identifier:   3F:37:D5:A6:7F:C6:1B:3A:BD:CB:62:DC:C7:A6:89:08:3A:42:2C:E0
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584A497060A500F857038F068A00
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     62831
IP address blocks:        64.96.0.0/17 maxlen: 24
                          2620:57:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:60:a5:00:f8:57:03:8f:06:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=a56ef86f-5484-4025-872d-a09745cf8d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:f0:19:4d:92:6c:21:f4:62:b7:ce:c7:59:
                    32:db:a3:e5:2f:41:16:e5:bf:35:e5:b1:5b:c8:f3:
                    59:fd:e7:34:6c:ba:f7:44:6b:83:35:50:de:b0:09:
                    5d:24:2c:22:ed:b9:76:e2:ce:97:ff:1c:ec:82:d2:
                    a6:94:c7:a2:4c:88:32:9e:7a:6b:81:99:26:db:c7:
                    e4:12:4d:a4:4a:87:2b:bc:7b:07:92:4c:0c:67:16:
                    01:16:6c:93:57:05:6e:ce:fc:18:2d:33:29:46:f2:
                    71:e3:25:28:7a:1c:b3:b1:7d:88:01:a6:34:83:ae:
                    d7:fb:55:9b:fb:c7:36:79:2c:43:96:91:37:88:53:
                    7c:e6:37:76:9c:b5:36:1a:ec:bb:30:38:80:9c:1f:
                    47:94:54:a9:a2:8a:b0:e9:81:30:e8:5a:3f:cd:ce:
                    dc:aa:4d:dc:41:b4:c9:1d:4b:15:f6:31:08:99:43:
                    19:ab:ab:c1:72:5b:50:c2:b3:71:86:cb:7e:cb:d1:
                    ad:8a:9b:95:1a:80:04:ae:ad:2d:60:87:11:e4:09:
                    e7:7e:d8:75:a6:e5:3a:da:97:29:ba:20:f3:d1:4c:
                    67:1a:23:79:9a:c0:64:78:ae:71:e2:fd:44:96:91:
                    da:07:d8:68:c0:66:22:4b:3f:78:66:18:65:d4:1e:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:37:D5:A6:7F:C6:1B:3A:BD:CB:62:DC:C7:A6:89:08:3A:42:2C:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.96.0.0/17
                IPv6:
                  2620:57:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d0:f8:0a:43:b6:91:32:71:9e:02:5e:da:68:a1:fe:b4:9f:
         88:84:fd:f8:a0:68:85:03:4e:2d:50:96:79:80:61:c7:ea:e6:
         eb:2b:a0:a2:de:20:4a:38:00:6e:11:7b:87:9b:2c:ed:c8:a1:
         0a:b0:e0:e9:df:37:08:35:55:4c:5b:c7:07:57:13:a3:ff:54:
         19:38:1f:42:f2:bb:2b:c2:be:0b:43:a4:26:c4:f2:18:16:48:
         bf:45:21:64:6f:fa:8b:d6:1a:42:98:a8:c0:46:cd:70:7d:ee:
         e0:67:95:f7:20:d4:dc:a1:3f:32:ea:c6:67:3f:89:39:44:1a:
         b7:3e:f4:c8:bf:ed:9f:03:e3:5f:46:24:a3:dc:c2:20:a6:be:
         1d:c2:75:90:7f:f2:80:70:dd:6f:1e:e8:bd:75:78:9b:cf:94:
         b5:0d:ce:75:05:44:50:a0:41:4a:07:8b:c4:15:86:c1:04:77:
         2f:de:95:76:73:a4:dd:c4:b4:48:7f:72:19:4f:3d:31:13:cf:
         37:e4:d1:a3:e8:90:00:89:20:c6:67:fc:12:89:16:ec:42:73:
         f8:cd:a8:9c:ca:fb:da:1b:69:24:8d:c2:3d:24:ea:0b:e9:de:
         30:ed:fd:9e:e3:b2:ab:d7:c2:ed:80:b5:83:3a:30:87:75:a9:
         62:6b:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:01:13 2025 by rpki-client