Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/3db5303c-2046-3381-ae82-3790929b1c77.roa
File:                     3db5303c-2046-3381-ae82-3790929b1c77.roa (raw, json)
Hash identifier:          eNT3MUBCZNsFd5rkuimPVKJmKM5E+8E+QMT64UvITJ4=
Subject key identifier:   B9:08:1C:55:2A:4A:76:FC:92:F0:D3:89:7C:AD:AD:44:68:60:FA:C0
Certificate issuer:       /CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Certificate serial:       010D0C9F43285849B6DF4EE72382FA207DCEB500
Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/3db5303c-2046-3381-ae82-3790929b1c77.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        64.69.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:4e:e7:23:82:fa:20:7d:ce:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=e85f5a66-5a07-4380-9d3f-29e0d5246398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:ed:7f:42:13:76:ef:db:11:8a:72:04:81:
                    5d:49:95:15:1c:2f:9b:be:33:10:bd:3a:11:69:5d:
                    d9:7d:27:15:92:63:c2:ed:c9:bc:10:99:b9:71:32:
                    1e:36:db:c7:71:f1:95:11:cf:ff:9a:b9:a5:2d:20:
                    b1:d3:6c:95:29:64:8d:45:00:a8:04:18:ae:d0:ac:
                    15:da:15:90:25:7b:bb:e0:83:a7:23:2e:0d:6a:5d:
                    09:42:1a:71:53:ba:14:61:3c:16:12:27:19:31:49:
                    f8:95:38:9c:19:3f:91:25:ab:34:96:2e:d7:86:81:
                    91:4c:6c:4d:02:d0:1f:94:c7:be:d5:48:01:42:5d:
                    72:01:b3:66:2c:49:f2:8f:64:4b:61:dc:3b:cc:34:
                    48:0c:03:b2:5c:d3:70:4e:ad:1a:3a:3e:f9:74:87:
                    b1:b0:a5:13:0d:94:bc:42:7c:75:40:c2:93:6b:b0:
                    59:6f:8b:2d:b1:2e:e1:23:d3:13:83:68:b9:e3:08:
                    0f:25:c5:07:6a:21:c0:52:88:66:64:79:97:05:ef:
                    18:d0:1b:37:a1:e0:25:15:aa:74:29:0e:b8:79:fa:
                    54:62:de:39:26:31:85:b4:94:6b:85:5a:70:52:84:
                    66:55:d3:0b:e8:5b:b4:8b:07:ac:f7:00:02:b8:ec:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:08:1C:55:2A:4A:76:FC:92:F0:D3:89:7C:AD:AD:44:68:60:FA:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/3db5303c-2046-3381-ae82-3790929b1c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:e8:3a:5c:8c:38:a5:8b:33:75:c7:5b:57:41:72:5d:13:
         38:6a:af:7e:90:f0:7c:ae:09:23:01:5c:1a:61:67:81:7e:a3:
         df:a0:a0:56:c0:a0:d8:98:bc:37:0b:3e:fd:c6:6f:5a:e6:eb:
         38:c7:72:b2:f6:03:21:73:81:ce:9c:af:70:5b:9a:56:d7:25:
         a4:f9:b4:6a:6b:09:1f:64:01:8b:b9:eb:c4:c0:7e:c7:f6:81:
         aa:11:0e:6b:d2:4f:ba:94:2d:61:5b:88:a0:b0:f1:ba:df:8c:
         5a:3f:cc:41:af:08:9b:73:8b:94:57:52:8d:d4:35:21:1f:a8:
         19:3e:29:61:b6:50:bc:59:76:f0:47:48:68:fc:95:7d:49:7c:
         40:14:0a:d6:3f:f9:50:25:65:69:c5:06:48:c5:0e:f5:05:23:
         94:21:32:0a:c7:4c:8e:5b:59:1f:b8:35:cf:fa:b3:09:0d:e7:
         ff:30:83:aa:1b:29:00:47:9f:3f:1c:79:b1:3c:3d:9c:10:97:
         71:0c:ab:07:d9:03:d8:21:95:ac:6d:38:06:47:6a:86:67:fe:
         f4:95:d6:61:74:6b:9d:7b:21:bf:f6:b3:f4:e1:5b:80:0d:dc:
         95:0c:d5:33:31:28:ed:2e:23:ff:4a:1d:25:7f:34:b1:ba:7d:
         98:be:c1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:26:22 2025 by rpki-client