Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/3f13f3ae-f958-37b6-b60a-87e8736eb1be.roa
File:                     3f13f3ae-f958-37b6-b60a-87e8736eb1be.roa (raw, json)
Hash identifier:          XRUTd2CrMtXRhz29VYr5L8gcYKUNd1g4uXieysjlImE=
Subject key identifier:   DE:CF:EF:9F:57:C8:B3:8F:34:6D:FA:63:C5:25:AF:A8:DA:50:94:2C
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584A15CA8E1E6EDA61D30536E460
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/3f13f3ae-f958-37b6-b60a-87e8736eb1be.roa
Signing time:             Thu 05 Jun 2025 01:00:51 +0000
ROA not before:           Thu 05 Jun 2025 01:00:51 +0000
ROA not after:            Wed 03 Sep 2025 01:00:51 +0000
asID:                     22351
IP address blocks:        64.88.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:15:ca:8e:1e:6e:da:61:d3:05:36:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Jun  5 01:00:51 2025 GMT
            Not After : Sep  3 01:00:51 2025 GMT
        Subject: CN=a7bbf0cf-0319-430a-9762-438b14e3a639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cb:ae:7e:f2:f5:36:b5:93:c1:ce:10:c9:69:
                    7e:92:9e:06:ae:50:c8:78:c9:09:8b:e9:9a:bc:35:
                    30:5a:ca:6c:30:3f:a5:70:2d:72:39:1e:17:42:c9:
                    49:35:cf:73:fd:5b:b8:59:00:0e:da:e7:77:ed:c8:
                    82:d1:6f:14:cd:96:9a:6f:d9:7b:cf:24:75:cc:86:
                    b4:14:52:89:4f:67:2e:ed:21:3e:21:a5:4f:6c:df:
                    d2:2b:66:43:fd:07:c8:d9:e2:71:ee:ac:0d:d9:8a:
                    0f:24:c5:f8:3e:5f:05:70:51:5d:53:ae:36:a8:11:
                    54:9d:a5:86:fb:4f:6c:34:dc:7a:94:1e:f9:bc:f8:
                    18:f2:bc:47:d9:45:03:81:11:17:ab:1b:33:6b:37:
                    c5:f8:72:0c:da:29:ae:bc:a4:1c:80:cd:a8:70:1b:
                    3b:88:d9:9a:5b:dc:d5:48:f9:a8:06:ac:41:dd:98:
                    87:65:b3:70:37:7b:6f:f7:48:c8:53:85:5b:67:77:
                    8f:df:83:94:db:11:40:f2:0d:f7:52:cb:f4:e4:70:
                    22:91:3c:14:d4:90:57:86:01:93:84:2f:1c:4d:e1:
                    e1:f4:36:78:74:4a:89:cb:88:53:af:fd:17:c9:14:
                    6b:0b:ec:09:8c:0d:e9:70:cf:5b:14:e4:9a:b1:3a:
                    3d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CF:EF:9F:57:C8:B3:8F:34:6D:FA:63:C5:25:AF:A8:DA:50:94:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/3f13f3ae-f958-37b6-b60a-87e8736eb1be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:97:4b:e1:6f:e0:f8:22:74:37:3b:6f:bf:62:19:a1:53:d1:
         20:71:d1:35:f9:9d:dd:03:57:57:cd:75:60:88:79:cb:75:0c:
         9a:b5:df:46:8c:12:bb:df:fe:65:fc:e5:5f:05:54:b1:45:4e:
         cb:af:3a:42:5e:aa:6a:02:ed:e1:e7:b6:95:94:fe:11:34:c9:
         47:27:48:9e:0d:61:1c:ba:0b:a3:53:99:f3:9c:38:5a:bd:9a:
         cc:41:11:9e:cd:8d:72:4f:a9:f0:e9:f9:78:42:d1:9d:68:cf:
         30:be:fe:29:d7:56:ae:f5:78:a2:30:c1:f3:7e:f0:84:ad:87:
         9b:7b:54:8a:74:a9:16:f2:22:43:4a:bf:2f:b2:8e:df:d0:ed:
         17:b0:bb:45:f4:b3:f6:94:4c:e6:ca:fe:f7:3a:6c:8f:28:56:
         52:18:da:03:5b:10:e3:7a:69:dc:33:be:99:70:86:97:d7:98:
         ce:4a:05:5e:fc:2e:b9:d9:4a:fe:71:20:ac:07:0f:8d:8e:25:
         f2:66:0e:07:bd:a1:2d:d7:f5:3b:1d:88:e4:73:f3:b6:fe:78:
         76:78:57:8a:01:ea:5a:db:56:0c:d9:bc:1c:34:c8:ac:68:84:
         22:1d:39:7e:dc:01:c9:e1:60:fb:2d:49:9d:57:86:17:ca:d5:
         ee:60:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:58:02 2025 by rpki-client