Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/5c42f3e0-4d06-30ad-af0a-7e2c5e562233.roa
File:                     5c42f3e0-4d06-30ad-af0a-7e2c5e562233.roa (raw, json)
Hash identifier:          u9BETJV57mh8IPwyMY3ASBFXNn7QbfAX6A+qt/VZnYA=
Subject key identifier:   AC:9B:CC:B8:DD:34:EC:63:D3:EB:6D:AD:18:E1:C5:A6:EE:28:6C:A2
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584AC5ABB12B67D521EDC918A040
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/5c42f3e0-4d06-30ad-af0a-7e2c5e562233.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     20055
IP address blocks:        63.135.48.0/20 maxlen: 20
                          63.142.208.0/20 maxlen: 20
                          65.49.136.0/21 maxlen: 21
                          66.172.96.0/19 maxlen: 19
                          74.116.180.0/22 maxlen: 22
                          96.46.16.0/20 maxlen: 20
                          104.193.236.0/22 maxlen: 22
                          136.143.144.0/20 maxlen: 20
                          140.106.224.0/20 maxlen: 20
                          141.164.112.0/20 maxlen: 20
                          162.118.0.0/20 maxlen: 20
                          166.113.32.0/19 maxlen: 19
                          173.209.160.0/20 maxlen: 20
                          199.36.88.0/21 maxlen: 21
                          199.114.208.0/22 maxlen: 22
                          199.181.247.0/24 maxlen: 24
                          199.204.200.0/21 maxlen: 21
                          199.244.28.0/22 maxlen: 22
                          206.130.128.0/20 maxlen: 20
                          2604:e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:b1:2b:67:d5:21:ed:c9:18:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=9dea0217-b8ee-416b-b723-61fcbbad4b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:4c:e5:26:42:f8:dd:0c:81:a2:09:49:e7:
                    54:4c:d3:8b:ae:4a:35:83:15:ac:60:78:48:b7:69:
                    a8:36:74:96:1a:15:56:9b:56:d6:de:43:2a:d0:af:
                    bd:05:11:d6:4a:d7:cc:db:1e:71:23:7c:71:75:5d:
                    9b:b3:23:cb:54:85:8e:07:9b:fc:94:2a:5d:d6:cb:
                    7b:69:30:c0:05:df:50:73:11:75:6b:2b:34:df:6d:
                    1e:a3:98:da:b4:48:86:60:e9:bd:69:a2:af:da:aa:
                    2d:8c:76:6f:4e:e3:71:36:5c:a4:12:f1:f3:29:fd:
                    1f:3b:46:89:9c:a7:d9:51:e6:83:b9:be:40:e7:f2:
                    b4:52:15:e2:ba:e9:ed:31:0e:f6:b5:de:6c:90:81:
                    db:2b:bd:f2:8f:8e:18:b0:3b:db:c8:82:98:14:89:
                    b1:b4:48:ac:38:8c:84:bd:ae:c9:30:00:90:1c:53:
                    7b:25:6d:0f:2a:6d:01:b8:c5:f4:da:20:87:b6:ad:
                    cf:c7:6d:14:50:dd:d4:c5:bf:63:c6:e2:01:0b:f2:
                    5b:87:95:f5:00:1a:45:0b:1d:25:6f:77:a1:46:85:
                    bc:b8:ce:2b:b1:c4:90:01:aa:b3:75:65:22:91:b4:
                    89:38:1c:75:10:24:95:40:e8:0b:9c:fc:16:a7:76:
                    35:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9B:CC:B8:DD:34:EC:63:D3:EB:6D:AD:18:E1:C5:A6:EE:28:6C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/5c42f3e0-4d06-30ad-af0a-7e2c5e562233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.48.0/20
                  63.142.208.0/20
                  65.49.136.0/21
                  66.172.96.0/19
                  74.116.180.0/22
                  96.46.16.0/20
                  104.193.236.0/22
                  136.143.144.0/20
                  140.106.224.0/20
                  141.164.112.0/20
                  162.118.0.0/20
                  166.113.32.0/19
                  173.209.160.0/20
                  199.36.88.0/21
                  199.114.208.0/22
                  199.181.247.0/24
                  199.204.200.0/21
                  199.244.28.0/22
                  206.130.128.0/20
                IPv6:
                  2604:e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:95:05:b9:0d:02:4b:2d:c6:6f:32:97:8d:f9:15:bd:33:
         cf:46:7f:41:aa:29:5d:a8:32:7f:68:d2:87:b9:1a:b6:38:1b:
         e6:28:8e:ef:a1:a0:56:17:e5:74:8b:63:20:a2:b5:01:0a:62:
         27:f0:9b:57:c3:8d:b3:52:de:a9:ac:f6:20:e5:5c:db:0b:a2:
         5e:85:6a:d3:15:be:e8:22:9e:02:de:cb:96:6f:58:ed:53:12:
         a9:e7:ee:3c:db:7e:9a:3c:cb:47:fa:db:40:33:08:a8:6e:41:
         d8:cf:90:da:6c:ed:a9:13:3c:99:53:ed:57:20:19:80:7c:0f:
         cf:f2:9a:32:90:f2:8a:68:81:7a:02:bc:a5:5d:c8:76:17:46:
         01:28:b6:af:9a:a8:f5:57:95:d7:d9:e7:29:58:f7:14:34:86:
         6f:bd:3c:b9:00:67:35:de:3d:23:32:1f:33:dd:0e:42:88:2c:
         db:d3:2c:e8:28:1c:19:6a:1d:2d:99:41:18:1a:ba:d0:90:7f:
         eb:a9:56:e4:96:48:c9:82:8f:df:0b:e3:ec:13:df:22:13:57:
         15:56:ca:34:ba:2c:10:bc:ca:a2:1a:a9:80:7c:a5:df:5b:97:
         81:1f:e8:cb:dd:2b:6c:67:8a:1d:87:7a:96:2d:97:f2:a7:0f:
         61:cb:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:58:21 2025 by rpki-client