Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c5828a31-c5bd-3eb4-b4ea-9b70bdad1706.roa
File:                     c5828a31-c5bd-3eb4-b4ea-9b70bdad1706.roa (raw, json)
Hash identifier:          wqNjlntvftOpf0WnhHUFNEVDot/Dui3KQRDtJf6daso=
Subject key identifier:   77:F2:2F:F0:57:C8:96:42:46:C2:B4:2D:5D:7F:2A:A3:97:85:8E:0D
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F432858496A199BB0397CF6F995534580
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c5828a31-c5bd-3eb4-b4ea-9b70bdad1706.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     15348
IP address blocks:        64.99.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:9b:b0:39:7c:f6:f9:95:53:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=e84c0b6c-6c77-4882-b5b0-5d095406bef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:34:82:aa:ec:fb:c7:ea:55:20:f9:61:8b:
                    5b:32:fc:ae:e4:4b:ab:16:9e:6f:4a:8a:65:65:17:
                    6a:1b:48:39:f5:f5:8e:4b:20:40:fa:96:c4:59:58:
                    cf:9f:71:a4:1c:6e:6b:96:8d:e9:f2:e1:04:80:45:
                    c7:a2:f0:e7:a3:ad:b8:bd:47:24:87:f9:7b:98:67:
                    ea:e7:87:cf:7e:7d:12:4d:c0:d5:81:58:c9:bd:4e:
                    44:90:33:6c:37:c9:0e:11:4c:3f:e4:d5:ae:bb:78:
                    c2:26:7a:ba:44:b4:bc:21:1d:0c:36:05:ed:eb:e1:
                    00:74:d6:88:f0:68:94:b5:af:3c:54:5c:d5:be:32:
                    a2:b7:8f:8d:7c:2a:5e:96:b9:e9:7e:6f:d1:1c:50:
                    2f:b5:1a:e3:5a:84:30:2a:55:1b:9e:55:0f:7b:8d:
                    ff:53:79:c0:2b:e2:d4:28:dc:d5:d7:a5:b1:8e:0f:
                    18:1c:74:0d:50:75:81:77:ea:e5:a3:48:11:90:be:
                    f1:bc:09:94:ac:b4:c4:af:7b:94:a2:2d:c3:b7:1b:
                    ff:e2:d2:f7:87:f3:ca:6b:a9:0a:a4:ef:54:95:0e:
                    2a:7f:3e:7d:ed:01:30:16:c9:07:de:5d:e3:53:ce:
                    b3:20:b2:42:4d:cd:07:80:08:f7:8b:8a:a1:35:d7:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F2:2F:F0:57:C8:96:42:46:C2:B4:2D:5D:7F:2A:A3:97:85:8E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c5828a31-c5bd-3eb4-b4ea-9b70bdad1706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:dd:a6:30:b2:a7:f4:47:39:87:f4:dc:19:98:6e:96:5c:26:
         99:94:14:78:8e:5e:7e:5c:d0:77:50:52:5c:17:ac:39:70:98:
         71:d1:02:11:0a:16:9e:bb:e0:b5:22:52:05:65:b5:2b:b9:f0:
         ca:b1:1a:eb:0d:7a:94:d9:f0:a4:5c:89:02:b6:01:cf:49:06:
         e2:c3:1b:af:cb:9a:3b:9b:e3:51:43:75:d6:3d:91:df:57:41:
         24:3f:cc:81:ed:49:87:ec:da:ae:1d:ab:58:af:47:40:48:39:
         b8:0c:29:c9:75:31:f9:f4:c1:2b:c0:8d:06:2a:6a:74:73:f7:
         a9:f8:ff:56:24:53:57:8f:4e:99:f9:a1:dc:ea:de:26:0b:46:
         f7:ea:2e:54:cb:40:49:ea:6e:23:81:88:8f:90:36:16:50:13:
         50:2f:94:7e:b2:a4:f1:66:44:8c:b9:bf:f9:62:03:a6:7d:73:
         8a:a2:39:ca:f5:e8:dd:35:7c:53:e5:b6:a5:65:8b:be:8c:25:
         fb:6a:22:db:25:7c:a6:5b:7a:45:3a:65:b1:ca:b9:d9:e5:0f:
         bc:8a:a7:a6:29:3d:e1:7d:94:a8:d4:36:44:78:12:31:ea:12:
         49:4f:ba:13:33:14:9d:76:27:32:ea:1e:81:eb:16:51:6b:82:
         4e:df:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:02 2025 by rpki-client