Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
File:                     97a9023c-3b6e-3158-89d8-efe63001f64e.roa (raw, json)
Hash identifier:          4rPcd+7oF1vMhFw8C5SrdKfKJrpUNCvSN5Q5A1K+b+c=
Subject key identifier:   69:B2:E8:E4:F3:37:F1:87:A6:3D:47:A5:28:BD:3B:48:F5:19:F0:7B
Certificate issuer:       /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
Certificate serial:       010D0C9F4328584A5765CA9509DF5C4E54BD7540
Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     62516
IP address blocks:        23.140.104.0/24 maxlen: 32
                          2604:4940::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:ca:95:09:df:5c:4e:54:bd:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=3df3386d-3f47-4e9b-a1e8-61562e2b1073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:19:f9:ff:04:f3:ef:ae:96:43:f1:37:8d:
                    96:34:7c:64:b8:4d:74:5e:ad:70:67:45:1d:fb:10:
                    d3:54:84:22:ad:42:a8:6c:85:a1:24:1a:16:c7:ee:
                    45:63:ef:81:08:8e:9a:85:e5:2e:b8:15:71:49:0c:
                    c0:42:a9:62:14:48:e6:f1:a4:23:12:16:30:43:e5:
                    b7:97:d4:a8:00:f7:4e:dc:a9:1a:48:a4:58:5c:71:
                    ce:9c:8b:e2:c2:c0:90:2b:a6:e5:d6:3d:e8:dd:72:
                    e8:39:a3:26:eb:fa:b8:7d:b4:d3:8f:ef:e9:49:94:
                    be:f2:9c:42:0d:55:bb:69:9e:f9:4a:57:89:44:f2:
                    3e:27:0b:bd:12:71:91:98:1a:c0:50:01:00:4e:ae:
                    fa:e9:41:15:41:7c:3a:36:9d:35:79:63:25:10:96:
                    e8:9a:fa:67:62:e8:a9:4b:4a:2c:bd:0c:46:fb:52:
                    e1:f6:39:31:13:4a:94:11:8e:74:6e:0a:6a:a5:e9:
                    f3:f3:51:de:8e:fe:72:fe:72:d0:50:41:59:5f:0a:
                    cb:99:6f:f3:97:54:09:09:d3:68:9a:a0:8d:3f:4c:
                    36:5a:56:d6:1e:40:80:01:17:92:83:27:48:d2:3e:
                    2d:c7:16:1b:fb:b1:2d:6a:ce:29:50:bf:a8:d7:71:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B2:E8:E4:F3:37:F1:87:A6:3D:47:A5:28:BD:3B:48:F5:19:F0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.104.0/24
                IPv6:
                  2604:4940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e0:13:3d:5f:5b:b8:43:b5:5c:ae:72:d7:ad:0e:8d:f5:23:
         a7:75:ca:ff:4f:c0:70:70:6a:5e:cf:3d:b4:74:a2:df:34:85:
         4f:aa:d4:b8:e9:7a:5a:d8:ee:bc:67:b1:43:59:45:df:55:d7:
         e4:f7:27:59:ea:fa:c8:cb:a5:35:2d:dd:04:1e:70:46:89:d3:
         31:a7:19:a5:9d:67:06:c2:a1:bf:8d:a6:9d:9e:2a:e5:60:de:
         4c:45:64:42:76:de:3e:15:7c:53:89:20:e4:bb:98:0b:3a:06:
         30:73:4d:43:fc:19:a5:5e:3c:ca:a9:bf:72:e9:e2:0e:22:23:
         9d:86:13:f3:18:bd:e2:0a:23:09:6d:a5:86:bf:62:aa:8f:35:
         cd:b9:7f:06:09:f1:f2:12:44:f0:57:66:06:7e:4d:60:5c:19:
         ee:ae:d4:53:03:b9:23:89:1e:7a:48:93:bb:05:36:bd:53:95:
         e1:28:72:f8:9f:9a:fe:90:d5:e7:c8:35:f1:0c:3a:ab:fa:0b:
         c2:5b:fd:2d:a9:0d:af:01:b7:64:18:01:7d:17:a9:40:08:69:
         4d:d7:ae:ee:91:42:e8:fb:bb:59:e5:6e:6b:da:11:68:7a:b0:
         8c:0a:59:59:6d:ef:33:ba:84:99:6b:53:5e:36:ba:8a:59:61:
         a8:73:cd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:18:20 2025 by rpki-client