Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/93b9cdf3-2c0a-39c7-9ba7-78e1abb22020.roa
File:                     93b9cdf3-2c0a-39c7-9ba7-78e1abb22020.roa (raw, json)
Hash identifier:          GoIqsVx6soYZhpSuWC82+ttm6dVP2RXwZC3pD63Dlpk=
Subject key identifier:   90:18:53:74:33:9E:09:80:AF:5C:F2:39:6F:1F:91:36:9A:BA:B8:5B
Certificate issuer:       /CN=19eb256a-4db0-45f5-95c3-26a618298e21
Certificate serial:       010D0C9F4328584ACB40E27E37CDBF70301774E0
Authority key identifier: D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/93b9cdf3-2c0a-39c7-9ba7-78e1abb22020.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     13728
IP address blocks:        63.143.16.0/20 maxlen: 24
                          68.66.16.0/20 maxlen: 24
                          97.107.80.0/20 maxlen: 24
                          2604:f200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e2:7e:37:cd:bf:70:30:17:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19eb256a-4db0-45f5-95c3-26a618298e21
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=5f8fff97-bcc3-4bc6-b91d-b93a2dc317b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:7a:d3:45:2b:b7:35:f3:15:84:7f:f3:d0:
                    29:f9:2a:5c:80:9e:75:1d:fe:60:b2:1f:a7:ca:c6:
                    7f:1a:6f:57:f7:2c:49:a3:14:27:b1:98:c4:63:ca:
                    55:bf:24:85:16:a8:c7:c0:4c:82:8d:e7:85:9c:91:
                    1d:8a:92:78:df:13:f2:a6:54:05:fa:30:21:34:75:
                    33:79:c4:57:52:67:9f:71:37:56:ca:d3:d7:fe:db:
                    2f:52:ea:82:e7:72:a8:87:a0:f4:04:a3:af:64:2e:
                    a9:ed:ba:04:35:9c:8e:45:9b:b3:f9:21:5a:68:0c:
                    9c:49:36:62:a2:49:3a:32:8b:9c:47:07:cf:9c:f5:
                    b2:fd:1c:44:1b:ee:32:e8:fb:ca:2c:b8:26:8e:f5:
                    f0:18:ce:24:c0:7c:3c:60:84:aa:d6:0d:48:b7:c2:
                    8c:ed:73:f1:a9:22:54:e3:38:d9:c7:32:fd:fa:2d:
                    77:37:fa:f8:9a:c2:d7:56:52:ae:e4:48:1a:74:42:
                    b9:df:08:c6:47:3d:37:c9:e4:1e:7e:c4:1d:42:02:
                    50:54:d3:b6:ed:c8:5e:9d:05:84:29:f1:f4:31:89:
                    ba:70:24:dd:6b:40:c2:b3:3c:d2:63:96:b5:9a:ab:
                    00:96:2f:d5:f6:d3:59:b0:de:5c:70:79:1a:1b:52:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:18:53:74:33:9E:09:80:AF:5C:F2:39:6F:1F:91:36:9A:BA:B8:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/93b9cdf3-2c0a-39c7-9ba7-78e1abb22020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.16.0/20
                  68.66.16.0/20
                  97.107.80.0/20
                IPv6:
                  2604:f200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:93:f7:98:fb:fe:c8:65:11:08:eb:45:79:26:f9:6c:c5:
         00:37:36:97:45:5c:07:f9:0a:0a:71:3b:57:db:07:8b:6f:ac:
         96:52:0c:81:71:23:91:0c:20:94:4f:3e:ff:a6:81:02:8b:87:
         6e:49:79:13:b2:0b:9d:ec:cb:b3:58:1b:3a:ea:d4:1e:bc:69:
         32:04:be:59:00:f9:c7:a6:b8:20:6e:ec:0c:e3:7a:be:81:90:
         f1:05:c7:46:82:d1:cd:93:e8:85:2a:36:29:23:1c:a1:60:3d:
         8d:fa:27:b8:ec:46:bf:c1:18:95:5b:4a:37:cb:ff:9e:c2:ed:
         b9:dd:e6:65:00:e9:62:1a:cf:62:c2:0d:f1:1c:46:22:fc:4c:
         f3:50:8a:27:2c:fa:55:c2:10:f7:c7:3a:74:63:d0:c7:64:41:
         ce:d8:d4:94:a3:41:f5:45:fb:02:22:d4:0b:04:b6:aa:32:34:
         09:ad:91:79:21:2d:97:05:98:4a:37:e1:42:4b:55:db:72:04:
         42:fb:66:2d:bb:33:2f:8d:e3:28:c0:9e:f2:b7:4b:3f:c4:f3:
         65:3f:53:d8:09:ca:12:5c:bb:11:a9:69:6c:ec:d9:cc:1d:39:
         61:6d:e8:84:79:25:46:b7:63:7b:db:12:98:10:0a:63:7c:15:
         19:76:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:26 2025 by rpki-client