Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d19258a0-dd62-37bd-a99c-991b014ea84d.roa
File:                     d19258a0-dd62-37bd-a99c-991b014ea84d.roa (raw, json)
Hash identifier:          ztLZprSyax58qVj+TyWRf2lfUsKSO40s6UTHKjzju10=
Subject key identifier:   4E:54:A5:FD:48:51:F8:76:24:30:31:46:CE:43:A7:FC:BB:E9:E6:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849218415FE56153C2D75A44080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d19258a0-dd62-37bd-a99c-991b014ea84d.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     33655
IP address blocks:        64.139.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:15:fe:56:15:3c:2d:75:a4:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=bd10e4f1-6b60-46a9-ad54-38ef6fc1398b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:56:36:5f:63:16:89:e6:b8:01:9c:e9:8d:38:
                    4c:06:10:14:4c:76:f4:c6:08:08:1e:6e:75:da:17:
                    46:ef:0f:88:c8:d0:b3:5e:a6:e6:ab:22:87:c6:1e:
                    79:fb:4f:d9:ca:34:dc:5e:de:cb:ce:fe:50:83:36:
                    c6:62:ce:ce:af:e2:a0:9b:9e:33:b6:c7:58:92:46:
                    c5:90:fe:7f:29:99:bc:1d:b5:3e:c9:e0:8b:60:fe:
                    6b:77:ba:96:59:95:95:bb:db:3e:6b:b1:af:88:9a:
                    e4:8e:94:1c:ad:f6:a6:4d:cc:17:f2:d7:fa:d6:f4:
                    1a:04:0e:66:a2:45:7f:f5:87:60:8b:55:05:35:21:
                    9e:8d:61:df:0b:3c:7a:26:37:e1:6f:fc:91:ec:7b:
                    aa:49:34:97:2f:75:d4:1a:06:18:7e:b3:c9:ee:cf:
                    b1:63:14:61:9a:fd:88:7d:29:98:90:56:9a:43:4f:
                    d7:cc:10:30:f1:62:da:53:be:ad:71:56:2e:f5:97:
                    3b:84:5c:ff:73:a1:31:8d:5a:63:0d:1b:f8:9a:bc:
                    26:7a:c9:38:cb:9b:bd:13:71:75:22:9f:00:dd:82:
                    72:d0:cd:4f:68:aa:d7:ad:55:42:ec:82:79:aa:3b:
                    b8:12:a0:d3:70:75:51:ea:2a:0e:3f:ca:f2:12:93:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:54:A5:FD:48:51:F8:76:24:30:31:46:CE:43:A7:FC:BB:E9:E6:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d19258a0-dd62-37bd-a99c-991b014ea84d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.139.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:78:4c:ea:2e:3d:a4:ce:f9:ef:d7:b9:86:1b:f6:c1:42:80:
         65:66:44:d7:6f:d0:95:e4:ba:66:87:29:32:7c:6f:af:7a:1e:
         09:12:da:d2:4a:b6:81:fd:12:3b:7e:53:07:14:af:ec:d3:d5:
         20:74:c2:6b:13:a9:80:4b:f0:30:9c:7a:a1:c6:89:60:17:72:
         2f:79:71:ee:48:41:5f:7e:1b:f5:24:6c:9c:81:9a:27:4e:82:
         a1:75:db:e4:9f:77:84:64:27:3a:3b:95:58:0f:1b:e9:4f:2d:
         0b:86:64:39:3c:06:2c:ec:02:bc:5c:f4:02:03:d0:44:bd:28:
         79:e5:98:42:2f:33:01:42:67:92:90:d9:97:3d:67:fc:3e:fd:
         05:dc:1a:cd:31:3c:46:1e:c9:e7:f1:13:35:d5:e3:e2:75:bb:
         82:b5:e3:cc:fe:f9:10:d7:cf:56:a1:7f:13:b0:42:2c:65:0e:
         38:1c:fa:21:03:39:91:08:5d:6c:bb:88:e0:5b:81:5d:db:da:
         09:2c:25:d8:ba:25:51:a5:0e:00:04:9f:9b:19:35:b4:c5:d3:
         99:1a:19:c7:8a:b2:02:26:4f:a2:d2:c8:e1:f7:31:01:f1:dc:
         c4:d8:f9:26:8c:1c:45:41:65:c3:84:a5:40:bb:a2:bc:f5:a5:
         96:12:92:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:06:39 2025 by rpki-client