Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7b3f76a3-3035-3dff-9b54-a28ee3f2dabd.roa
File:                     7b3f76a3-3035-3dff-9b54-a28ee3f2dabd.roa (raw, json)
Hash identifier:          KWWNhohGedUG742AoTaDLTaGS8Uy/OR8lvhpwBp+/XI=
Subject key identifier:   E5:84:DE:57:8B:2B:8A:AE:B0:52:B6:A9:EE:40:70:CE:95:1D:F6:51
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A9E979A2232FC48384C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7b3f76a3-3035-3dff-9b54-a28ee3f2dabd.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        97.93.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:9e:97:9a:22:32:fc:48:38:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=b75754f5-6fa0-419b-b19d-23ec7a625897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:4f:18:73:c5:2f:a6:c5:c6:ce:2a:b6:9f:
                    e8:bd:39:2f:ca:27:61:d1:dc:8d:ab:c7:ad:a5:7e:
                    2b:a5:c3:b4:27:ea:9a:54:a5:74:1b:12:e1:11:b9:
                    96:87:bf:6e:67:6f:f8:61:44:de:f9:cf:59:11:21:
                    98:c2:4d:47:62:36:76:18:d9:6f:05:ee:f9:33:cf:
                    91:99:10:d6:c0:37:b5:8a:c7:b7:89:87:a0:fd:b2:
                    22:82:61:e0:0e:8b:99:3e:95:5f:1d:8e:4b:43:7b:
                    d7:d1:84:94:77:2a:4a:b8:9e:27:57:cc:5f:fa:70:
                    12:f4:e4:3d:0a:6a:0b:61:e5:22:a3:56:48:dc:61:
                    94:55:c0:3c:03:50:79:b5:d8:36:1a:9c:1c:72:22:
                    9d:d0:f2:0e:a5:53:16:2b:40:76:3c:14:be:45:84:
                    42:31:2c:94:50:b5:bf:af:f7:0c:8c:06:5c:e9:10:
                    c4:3f:50:a0:67:9c:3b:a2:3e:45:77:46:18:2e:a7:
                    c3:84:6e:5b:17:71:8a:e6:6c:8e:4a:b5:9d:cd:95:
                    05:3d:9d:12:c4:8f:b9:c5:0a:dc:4d:ca:6c:7d:27:
                    43:3f:b0:5a:9c:a2:ce:65:6a:07:18:0c:41:9b:45:
                    bb:de:e3:57:2e:0a:9a:27:56:19:eb:a2:1f:c9:55:
                    b8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:84:DE:57:8B:2B:8A:AE:B0:52:B6:A9:EE:40:70:CE:95:1D:F6:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7b3f76a3-3035-3dff-9b54-a28ee3f2dabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.93.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b5:bb:02:63:40:f1:54:f6:f8:a4:9d:ae:1f:90:48:e2:3b:
         2f:8d:76:ac:44:5d:de:a2:33:7c:9a:8f:14:37:c5:f5:86:1c:
         35:25:48:16:fc:7e:cd:e8:08:01:4a:f6:43:bc:d1:4b:3f:f1:
         ce:cd:c9:cc:96:3f:34:b1:33:6d:32:de:52:4c:58:65:0c:ca:
         6b:88:9e:0e:ea:f0:eb:ad:70:85:c5:73:90:6c:67:3b:f5:f3:
         a4:c0:10:c5:d0:0a:68:2c:e8:8d:43:2a:52:ee:e0:56:79:9a:
         71:fd:c5:7a:1b:c2:ae:ff:2b:87:ce:ba:e3:ad:68:ed:89:e7:
         54:6d:bb:de:0b:cc:3f:23:b1:a4:4c:7a:b5:f7:1b:02:ef:a1:
         de:97:f2:4c:64:3a:5f:3b:67:06:57:04:29:32:b7:14:61:51:
         45:45:32:80:91:0a:32:c0:b8:9a:04:5c:75:1c:4c:66:62:fe:
         9c:17:25:85:08:6c:15:fd:6f:91:f8:dd:9c:e0:12:2f:d1:22:
         a5:04:fb:1f:e4:aa:8a:67:18:5f:44:46:6f:d7:a3:e0:1d:f2:
         97:6b:1b:32:03:c5:09:6c:d5:22:f5:48:2b:33:3d:25:9b:ff:
         82:f2:9d:73:67:5e:c6:b5:b2:4b:b8:c8:1b:64:3a:b0:27:24:
         9b:f0:98:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:09:13 2025 by rpki-client