Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/a3ae0793-ea93-36d7-86bc-789ec9359ea7.roa
File:                     a3ae0793-ea93-36d7-86bc-789ec9359ea7.roa (raw, json)
Hash identifier:          74j2GzX5sZGiL2K4bDjTmJn6borv8N0zoqKkY2I9HpU=
Subject key identifier:   D0:A4:D0:D9:B6:E0:3F:54:8C:84:BA:6D:15:98:0C:2C:EF:01:83:D9
Certificate issuer:       /CN=560b4c54-bd35-46e1-8698-aff50195e1b4
Certificate serial:       010D0C9F43285849F31ED524C6F9CBA16C0EFF00
Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/a3ae0793-ea93-36d7-86bc-789ec9359ea7.roa
Signing time:             Fri 23 May 2025 14:57:23 +0000
ROA not before:           Fri 23 May 2025 14:57:23 +0000
ROA not after:            Thu 21 Aug 2025 14:57:23 +0000
asID:                     396163
IP address blocks:        64.58.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:1e:d5:24:c6:f9:cb:a1:6c:0e:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4
        Validity
            Not Before: May 23 14:57:23 2025 GMT
            Not After : Aug 21 14:57:23 2025 GMT
        Subject: CN=b98d64d4-613d-4281-a529-89c7975a4eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:0b:d2:cc:94:34:bc:c8:da:48:f8:62:54:
                    2c:4f:30:7b:0f:da:35:f8:69:27:03:4e:60:b2:e6:
                    93:1c:e2:6e:ae:f1:0d:ea:27:9d:c8:33:3d:5c:e1:
                    81:2e:27:c8:e9:90:20:21:33:9b:4f:3c:8d:4e:65:
                    a1:e9:cd:f9:dc:01:26:95:f7:a5:07:65:9c:96:67:
                    9b:ab:8c:a5:eb:eb:ab:2f:c6:d5:0b:a9:94:76:d7:
                    79:a6:22:91:03:c5:cf:88:b9:d5:d1:a1:df:d4:cd:
                    be:2a:fd:36:6c:65:d1:b2:44:e1:cf:cf:aa:9a:dc:
                    66:8c:81:93:39:13:af:b1:84:15:0d:8b:ce:5f:d5:
                    9f:60:e0:66:90:f7:ef:7d:48:2e:65:40:3e:36:cb:
                    63:30:d0:ff:15:49:d6:9e:a0:f5:43:e3:ef:16:f2:
                    43:4e:12:59:00:7d:4e:f2:fd:65:4f:6c:1e:e0:d1:
                    02:b2:3b:8c:82:9b:e9:5f:47:3c:7f:10:cf:05:7f:
                    3d:0c:19:2e:52:20:66:35:4c:e3:af:81:d8:f3:19:
                    24:67:21:4c:62:29:1f:f0:1f:f5:41:34:18:d0:73:
                    7e:f1:c3:bc:dd:1d:13:7d:5d:ff:8d:17:6c:70:76:
                    8a:9e:b2:7e:3c:e7:48:a7:d4:f9:5c:6b:a3:20:f4:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A4:D0:D9:B6:E0:3F:54:8C:84:BA:6D:15:98:0C:2C:EF:01:83:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/a3ae0793-ea93-36d7-86bc-789ec9359ea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.58.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:35:a5:50:42:2a:e5:11:d1:4c:25:c2:5b:f0:0b:18:08:04:
         f0:9a:de:a3:c4:29:5f:73:01:40:b4:cb:4e:0e:6a:65:f5:f0:
         0a:ab:0f:fa:c3:ad:86:73:1f:bf:30:9a:6f:0d:3c:2d:05:88:
         60:e7:86:df:af:fe:d6:06:1d:1d:8b:3d:97:4e:b9:78:1a:5d:
         e5:bf:90:0c:d2:5a:c1:82:56:fa:b9:d1:c8:1c:06:a3:ef:be:
         27:d5:2b:c3:72:32:92:7c:7a:05:c9:66:ec:55:33:53:14:0e:
         01:84:00:ef:1a:f1:b5:09:d6:b8:21:63:b1:97:39:11:37:56:
         40:21:04:9b:cc:a3:dd:b6:b2:44:e6:82:0f:f0:10:11:32:bf:
         02:a2:5c:60:08:b0:c8:ac:26:be:12:31:7c:99:32:c7:91:ff:
         96:a7:33:b4:76:8a:04:ab:68:82:49:25:8b:d6:6e:13:54:bb:
         0c:ee:9b:ef:80:5d:bf:8c:57:de:f7:f4:e5:90:02:7a:c0:2b:
         27:7e:f5:84:f6:92:06:aa:e9:2e:1d:b5:0c:66:d3:51:16:e8:
         ff:2d:f3:dd:98:ec:57:0f:8c:47:ae:92:60:14:c3:10:33:61:
         6f:b5:09:32:82:8d:4c:9d:f9:47:86:02:f3:47:a2:1b:82:f6:
         9a:4d:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:54:58 2025 by rpki-client