Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2246db1e-d55d-35eb-94a8-fe1832072ae4.roa
File:                     2246db1e-d55d-35eb-94a8-fe1832072ae4.roa (raw, json)
Hash identifier:          wBNpmt7nW2GHTxn9zoaEF91WM+AzYlYbIOHJJX/eT8A=
Subject key identifier:   E1:A6:3E:76:02:40:F4:50:AA:02:65:88:09:3A:84:F4:12:A0:16:B0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA162092DED0ECA75D17BCE00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2246db1e-d55d-35eb-94a8-fe1832072ae4.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        96.36.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:09:2d:ed:0e:ca:75:d1:7b:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=cb0582b5-961f-463e-8351-51918b228ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:87:e1:4d:fc:f9:f3:0b:0c:82:bf:4d:72:
                    6c:8b:c0:9f:15:6c:1b:d6:03:94:46:9f:37:f5:b7:
                    38:62:8b:a2:16:c9:ab:bf:99:b6:d6:a7:21:2a:ec:
                    f7:c4:f5:fe:5e:1a:71:36:36:53:42:5e:66:a1:ec:
                    f8:46:61:97:68:48:6b:da:f3:a3:0d:5b:14:dd:08:
                    e5:02:4f:a0:5d:e9:88:d0:70:bc:c7:f9:5d:99:f6:
                    09:a6:82:ee:3e:36:c1:28:58:47:c3:65:f8:19:1c:
                    54:ef:8e:bc:d6:5a:79:a7:2f:6e:1d:bd:7f:e0:49:
                    88:ec:78:6c:d6:fe:00:c8:4e:9c:8f:35:cb:42:2d:
                    10:ba:0d:cc:7d:68:b3:64:aa:f6:ba:07:a3:68:4d:
                    31:f3:b9:d1:5c:68:ca:40:f1:39:c5:04:f8:bb:9c:
                    7a:d3:98:e0:e8:c8:45:2f:dc:f4:07:5f:e0:15:91:
                    26:8f:2e:4a:51:d7:25:c8:44:12:2b:76:97:c9:50:
                    d7:f5:a0:93:ed:27:5c:12:93:5e:dc:ed:27:e2:45:
                    6e:08:8d:73:d8:fc:ff:b1:2a:3e:1f:6d:c1:00:a8:
                    bd:77:e5:0f:26:ce:b1:ba:e0:fa:51:e9:7b:a4:a9:
                    ef:1f:5b:d2:2d:0f:b8:d9:0d:82:70:95:e8:fc:ef:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A6:3E:76:02:40:F4:50:AA:02:65:88:09:3A:84:F4:12:A0:16:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2246db1e-d55d-35eb-94a8-fe1832072ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:4c:48:2f:d3:49:16:54:ba:19:9a:01:a3:86:33:f2:01:dc:
         99:5e:7e:97:26:0c:85:2c:f4:71:5d:5b:bf:8f:c5:0d:2a:33:
         9e:13:a3:7d:3f:10:d8:c1:66:2e:3e:e5:aa:0a:95:33:04:f9:
         43:d5:d8:d9:c1:69:ca:59:36:c6:04:9c:f9:1c:66:f6:3e:bc:
         fe:06:b1:1b:7c:5e:c3:3d:5c:ea:f1:30:2a:93:73:2c:7d:98:
         23:43:ff:4a:7f:6a:88:5a:be:05:69:76:e8:e3:4a:cd:62:ff:
         42:54:83:92:c0:14:24:c9:d9:07:43:6c:c4:a9:3b:e4:b7:21:
         4c:fa:44:02:5a:8c:a5:69:1a:56:b1:9a:a2:3f:a1:4b:03:75:
         a0:bb:0e:24:ca:db:3e:22:15:d3:88:64:13:d2:15:b7:e6:35:
         1b:3e:22:53:8b:d2:ea:8a:92:33:68:32:21:4c:c2:44:d4:61:
         a1:11:88:02:62:37:ba:f2:27:d9:3a:75:cf:5e:74:77:d0:2d:
         5c:37:32:82:10:32:96:e9:28:69:4b:21:f5:8f:73:98:8c:88:
         64:90:36:3c:38:a1:8f:c3:dd:19:bf:cc:3c:07:b0:33:7f:f0:
         8a:78:d3:4d:bb:19:cd:6e:1c:74:e1:11:ca:17:2a:23:93:2c:
         33:6a:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:48 2025 by rpki-client