Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0be0ed06-09f1-3fd2-8ded-0916e700ebb5.roa
File:                     0be0ed06-09f1-3fd2-8ded-0916e700ebb5.roa (raw, json)
Hash identifier:          pb9G/gFlDdE+2RXC4Oy9tt8I1zHoiDSVXgXSpO5n/OQ=
Subject key identifier:   E3:D7:A5:2E:4D:DE:E0:34:42:97:59:9B:70:D6:56:3B:0B:1D:25:2C
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F432858496A199B89B6EE927B735A0C80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0be0ed06-09f1-3fd2-8ded-0916e700ebb5.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     15348
IP address blocks:        64.99.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:9b:89:b6:ee:92:7b:73:5a:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=69588426-49ea-406f-bac7-bbf088caf24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:8b:b3:47:7e:d6:6f:f8:4a:61:a6:e0:56:
                    fc:46:de:03:27:7f:86:10:e5:19:2d:03:b6:d4:d3:
                    5a:53:ad:37:d2:0f:8b:6d:27:5e:19:08:76:f9:76:
                    69:ba:ea:56:c0:5d:9c:dc:03:78:17:42:76:2b:6f:
                    54:aa:a6:79:a5:0c:62:6b:e3:4e:0a:e0:38:cb:c2:
                    a2:a5:06:e5:17:0b:39:71:2f:af:f9:58:bf:ed:30:
                    e0:fb:76:58:ec:5a:4e:97:11:bc:74:27:3d:c5:28:
                    1d:17:cf:99:4d:4f:8a:ca:22:00:f5:cb:95:3f:5d:
                    0e:03:0a:cb:55:f3:c7:41:80:92:34:ed:dd:61:d2:
                    c3:83:2e:47:fc:9e:59:55:da:2e:f6:28:a5:9d:4b:
                    3a:45:21:21:5b:ff:20:99:79:6c:81:e6:49:a5:df:
                    18:5e:e9:d3:13:32:7c:aa:e1:82:2f:5b:a3:0c:3d:
                    e1:e3:de:1f:1a:13:e9:8d:aa:9f:ac:e1:0a:59:a2:
                    b1:94:88:ec:b1:db:2e:b5:b9:cf:7b:fa:f1:6f:20:
                    1d:bc:5d:f6:03:90:6d:a5:1f:08:19:31:8f:3e:84:
                    bc:fa:3b:21:89:9e:cd:73:cf:1c:1b:3b:be:5a:bc:
                    ce:e7:d7:b1:fe:35:b9:a1:b8:7d:ef:f8:5a:41:0f:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D7:A5:2E:4D:DE:E0:34:42:97:59:9B:70:D6:56:3B:0B:1D:25:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0be0ed06-09f1-3fd2-8ded-0916e700ebb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a3:80:33:cb:97:32:3f:10:1e:4a:6f:99:e3:ee:83:b5:66:
         46:c1:98:1f:1d:3d:22:ab:cd:a4:45:77:46:20:b4:60:2d:23:
         ab:bb:04:5c:c2:0b:d6:53:cf:fd:8f:b2:0d:a9:57:08:8d:ab:
         8f:a7:f1:6c:8a:36:9c:8a:1d:c8:0d:6b:5c:be:f9:f6:36:cf:
         8a:74:3a:1a:ff:3e:d4:27:cb:1f:ce:fb:46:b7:78:4c:78:5b:
         ca:76:8d:be:e3:b8:37:b8:81:fa:fc:c8:c9:f6:be:12:06:22:
         fd:68:50:b9:e7:37:df:62:9b:b4:d0:32:2a:c0:dc:00:38:81:
         7d:e0:fd:44:58:ef:95:16:08:1d:d5:3e:b9:dd:dc:84:6b:a5:
         ab:56:34:b6:25:05:56:cb:42:52:b4:64:79:53:df:be:c3:09:
         88:c1:20:1f:f1:f2:eb:88:2f:8c:b4:46:e5:fc:89:d4:42:77:
         0d:72:56:81:15:62:13:65:5e:ab:a3:11:2e:5e:d9:5f:b2:3d:
         b9:6c:46:d2:8c:e7:c8:6d:92:9d:22:99:03:ac:ea:12:9e:08:
         2e:c1:ff:d6:ce:d0:26:69:d1:f0:cc:5d:4e:fa:38:f6:95:17:
         96:58:bd:75:89:07:a9:2f:9b:87:67:02:5a:78:29:3c:8f:9a:
         3e:05:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:05 2025 by rpki-client