Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/502a3674-0e36-3798-abca-7d75118b83fd.roa
File:                     502a3674-0e36-3798-abca-7d75118b83fd.roa (raw, json)
Hash identifier:          0BeMXDTDK36u5X9mfK5kG7ZEAUaqQ5xsNVUkhtLFPjk=
Subject key identifier:   8D:92:73:82:98:A3:28:01:0F:85:F8:5F:B0:54:0D:B0:53:A7:BD:3C
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584A96368963119986A23055E8B0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/502a3674-0e36-3798-abca-7d75118b83fd.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     396253
IP address blocks:        97.64.52.0/22 maxlen: 22
                          97.64.60.0/22 maxlen: 22
                          104.225.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:89:63:11:99:86:a2:30:55:e8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=24969e8e-6075-4c13-89ec-c3442a09866a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:15:e5:f4:c3:ec:d9:ff:70:23:0f:4f:48:
                    ea:89:e1:82:1f:e3:21:32:4d:2c:17:1a:3e:c9:11:
                    00:8e:0d:2e:c5:40:09:fd:d7:d3:c9:fc:19:61:5e:
                    27:ff:9a:86:3e:b9:d2:08:09:98:32:fb:86:a9:d6:
                    02:9e:0e:d3:52:cc:96:10:b7:e3:77:5f:92:fe:a9:
                    38:12:4c:3b:83:b6:53:f5:0d:a5:36:89:5e:14:19:
                    6b:c2:26:1d:87:bf:fb:4a:f7:6c:98:d9:b9:88:92:
                    c9:d5:90:f2:98:9f:82:a1:9c:10:6d:72:7d:0e:9d:
                    9f:9b:d2:08:f5:88:c6:98:14:03:d1:91:e3:e0:5b:
                    72:ec:44:c6:ce:1e:c8:07:b0:d3:a3:f7:63:12:90:
                    32:eb:2f:48:d4:3d:bd:26:70:4d:72:bc:70:fb:f7:
                    3d:46:e9:4a:5d:12:9e:05:b3:5e:c2:e9:3f:f9:06:
                    57:67:e7:a6:9c:79:39:28:98:db:92:5d:bd:4c:51:
                    db:ce:aa:b6:e1:92:99:dc:2c:8b:f7:e9:b7:64:c4:
                    da:8a:45:80:8e:aa:5e:b6:5f:fd:a2:22:70:63:e5:
                    46:1e:4f:e0:ed:17:05:53:af:e9:f6:1a:82:65:3e:
                    8d:59:ce:51:52:62:6c:19:17:82:b7:fc:1f:64:12:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:92:73:82:98:A3:28:01:0F:85:F8:5F:B0:54:0D:B0:53:A7:BD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/502a3674-0e36-3798-abca-7d75118b83fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.52.0/22
                  97.64.60.0/22
                  104.225.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a4:65:7f:db:82:33:cd:c8:28:dd:04:c4:54:d5:82:4d:f5:
         4c:61:e3:1c:bc:85:d7:f3:77:2b:87:ba:a6:9e:c4:69:2b:b3:
         40:47:1e:90:13:95:25:b9:5d:97:17:f2:91:ed:ba:f0:6f:56:
         e3:f1:9c:65:62:68:e3:b1:3a:48:09:2e:a2:3e:51:b7:70:59:
         53:31:0c:f3:e8:ae:82:85:84:ef:b1:b3:c9:d4:f0:5f:39:86:
         47:73:3d:eb:be:89:28:1a:5e:ed:cc:37:54:9a:c0:b0:13:f2:
         87:63:a7:6d:e8:17:1b:8c:3d:03:c3:d0:c9:d1:7a:77:9a:3a:
         ca:d8:00:0a:5b:62:b6:c6:f6:1e:aa:0c:7f:70:f6:c2:45:59:
         97:94:f7:47:0f:71:a0:75:98:90:2b:75:01:9e:e5:9e:48:b9:
         45:51:2b:ca:cc:d5:c5:71:d8:26:e8:0a:be:75:eb:ba:d7:c1:
         db:3d:80:f7:49:df:21:5e:dd:43:82:b5:d2:83:5b:1f:fe:d4:
         47:3d:45:4e:ba:01:b6:f6:66:a7:3d:e6:7b:e2:b4:57:ad:85:
         a9:17:e7:ab:89:95:ec:d7:de:18:50:3f:47:53:dc:93:74:c8:
         57:42:bf:eb:3f:a3:89:40:99:66:42:a7:9c:31:e2:9e:f6:59:
         67:ac:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:38:27 2025 by rpki-client