Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9975d9b2-d6e1-3919-b14b-84beb9033819.roa
File:                     9975d9b2-d6e1-3919-b14b-84beb9033819.roa (raw, json)
Hash identifier:          ybVyIl8m9byWz5H+a6pQ6e6UnaTEQ0QNqCxByc+ijY8=
Subject key identifier:   3C:11:EF:EB:4A:3B:A8:7D:0B:6C:11:60:FC:AF:F5:64:5B:47:AC:11
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3C0F473E0B486085200D64F8
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9975d9b2-d6e1-3919-b14b-84beb9033819.roa
Signing time:             Wed 18 Jun 2025 18:00:03 +0000
ROA not before:           Wed 18 Jun 2025 18:00:03 +0000
ROA not after:            Tue 16 Sep 2025 18:00:03 +0000
asID:                     65010
IP address blocks:        24.248.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:0f:47:3e:0b:48:60:85:20:0d:64:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 18 18:00:03 2025 GMT
            Not After : Sep 16 18:00:03 2025 GMT
        Subject: CN=b0f06c69-433c-4916-9d26-16d0826e4280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:c6:ac:ea:48:8e:76:2b:52:ed:2a:05:68:
                    ba:79:f2:91:23:d8:8a:9f:bb:b0:ba:fc:0b:d3:2e:
                    87:ca:99:e8:ba:e5:91:6c:f8:2a:36:93:4d:4d:82:
                    36:72:89:91:a0:59:33:0a:f0:f9:2d:94:e2:90:11:
                    e7:06:aa:1f:6d:fa:a4:7c:e7:1f:ca:dc:c6:cc:86:
                    2d:23:04:7f:76:d6:3a:4e:d5:f6:44:13:cf:df:6c:
                    00:59:50:a1:12:bd:7e:4d:9f:45:ac:89:ee:c1:c3:
                    e1:1c:ec:18:8d:68:45:71:4a:4b:e9:97:1a:1f:22:
                    e4:ba:2a:2e:e4:79:54:76:ad:b2:33:85:09:10:66:
                    6b:2b:30:dc:30:94:e6:d7:c8:b1:52:56:0c:7d:06:
                    08:a6:99:cf:cb:c1:ad:bf:cb:c2:7d:e6:70:dd:b8:
                    d9:17:8b:36:68:1d:c8:11:f5:29:54:58:92:4f:e9:
                    cc:d9:c3:52:9f:40:1d:a1:c2:93:bc:77:54:3a:f7:
                    53:4d:50:9e:84:c1:41:0b:76:ad:68:1b:41:ea:3c:
                    d4:7f:0f:fa:e3:4c:17:55:26:f3:f8:11:33:a3:4e:
                    55:9a:70:12:2b:d0:d9:49:ce:a0:12:fc:ff:1a:0d:
                    8c:ca:c8:75:a2:8d:cc:18:5a:37:22:1e:ac:d0:7e:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:11:EF:EB:4A:3B:A8:7D:0B:6C:11:60:FC:AF:F5:64:5B:47:AC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9975d9b2-d6e1-3919-b14b-84beb9033819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.248.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:72:08:91:c0:ae:51:a0:fd:3a:48:d4:8d:73:ee:aa:7a:cf:
         7b:bb:77:f0:78:0d:19:e0:8e:dc:ba:39:6b:33:53:0e:94:72:
         51:67:7b:bc:e3:d7:c9:29:a9:53:c0:5b:fd:33:c2:43:e8:dc:
         85:4d:30:48:65:d6:b0:f4:e3:68:91:8f:ef:95:09:51:3a:e5:
         0e:6a:76:a8:a9:f5:7f:2d:fe:14:0c:dd:62:2e:6a:a2:ee:90:
         19:7d:b7:ed:52:b1:02:3f:63:11:f5:25:7a:00:7b:44:a2:8a:
         f1:fc:ff:83:54:ca:3a:e7:46:95:cc:1d:1a:ee:2a:be:5b:b2:
         ca:2c:81:5c:a9:25:ae:76:1d:86:d6:9e:6a:dd:3b:46:ac:97:
         06:66:88:1e:60:4d:2c:27:8a:40:4b:0c:b0:a8:cf:cf:03:b3:
         d8:99:2b:82:a1:ad:5f:07:f5:6d:ac:6c:36:12:17:13:3f:d6:
         5b:56:c8:81:45:bc:e2:d3:e7:d1:d5:b2:b2:96:c5:b6:7c:15:
         ac:8f:e7:87:eb:27:2f:71:8c:e6:fa:8d:b3:bc:7a:15:e0:ab:
         94:8f:27:62:ef:71:9f:72:17:5b:1d:30:cb:16:74:92:43:41:
         1f:6b:f1:f4:e1:fd:9a:c0:33:84:3a:6c:a1:27:71:9d:f7:26:
         60:df:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:53:07 2025 by rpki-client