Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc5531e9-9cf0-3fb7-8665-3f48c30da9eb.roa
File:                     dc5531e9-9cf0-3fb7-8665-3f48c30da9eb.roa (raw, json)
Hash identifier:          VkaFiwiLVcDfoNtqsiTEg6nctoE2mYMAGp4Re6kj7T8=
Subject key identifier:   F0:8D:9D:23:D7:1C:ED:2B:F6:C6:9D:AB:B0:92:32:84:34:9C:F5:04
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1616291EF57C9D5DC741680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc5531e9-9cf0-3fb7-8665-3f48c30da9eb.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        96.39.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:62:91:ef:57:c9:d5:dc:74:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=f5fd6997-089d-4f9e-a2ec-b45deef05700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b0:99:d4:55:83:9a:62:09:5a:cc:1f:79:8a:
                    e0:8f:3b:09:ea:ce:47:7a:56:cd:5f:bd:bc:8d:62:
                    19:c4:61:06:72:7d:26:27:e2:06:cf:e0:98:19:be:
                    2d:3f:f1:b4:8a:a4:c0:6b:14:ae:06:49:86:ab:97:
                    16:c1:b2:8b:88:0d:74:9f:4c:b3:f3:04:fb:9f:32:
                    f4:07:72:0e:fa:cc:81:7e:75:ca:44:81:cb:2b:a6:
                    0d:85:bc:97:b8:21:ed:9c:a9:00:c0:b4:38:73:38:
                    18:f2:a2:bf:07:54:66:d3:fa:4c:e5:a2:bb:89:ed:
                    c5:5f:f0:f2:70:40:73:59:aa:d4:82:81:cf:0c:16:
                    b9:45:ba:a1:a2:1f:64:ee:ee:ce:76:a7:42:e4:6c:
                    57:b8:a2:d1:52:ef:21:db:7f:41:b1:80:ba:23:fb:
                    52:f2:df:ab:5d:0f:5e:74:4d:af:e6:e5:e4:78:d4:
                    e1:08:e1:ae:64:db:32:ac:ad:e5:5f:9b:03:fc:97:
                    9a:e0:eb:ce:21:5f:ae:fd:13:31:ac:b7:94:93:62:
                    f3:dc:9e:7b:f4:f7:d2:b7:32:54:b4:d4:01:92:98:
                    1e:ad:b5:ba:e9:5f:25:5d:20:78:02:e6:12:ab:c4:
                    98:1b:a3:b1:f0:de:b8:3f:ea:9e:35:98:0a:24:d3:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8D:9D:23:D7:1C:ED:2B:F6:C6:9D:AB:B0:92:32:84:34:9C:F5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc5531e9-9cf0-3fb7-8665-3f48c30da9eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.39.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:41:a5:7d:67:e9:f2:01:6e:65:ab:8f:de:98:d9:53:8a:f0:
         27:75:9c:b5:de:a3:e6:8f:b5:36:00:bd:8c:2b:ce:ff:cb:38:
         ce:37:a2:cc:65:2d:df:71:b4:e4:37:5e:99:ad:ca:10:22:7c:
         ed:4e:9b:88:47:2c:a6:f5:6f:a1:e8:32:98:d6:b8:74:de:03:
         e8:f0:84:41:53:96:28:a1:75:9d:0b:c6:c1:f8:8b:b4:cf:e7:
         e8:b1:a9:66:cf:c8:7e:83:23:81:57:c0:8b:23:89:f5:b0:78:
         14:74:16:46:a0:84:e2:45:5c:d8:91:d1:53:b9:ba:b6:a7:7d:
         f6:5b:42:43:06:97:c6:e6:66:fc:fe:f2:95:fb:4d:4e:58:14:
         0b:ba:cd:c8:3f:a5:8d:c2:ba:b8:87:5f:86:7f:7a:ee:36:ca:
         d7:94:a3:4d:b3:7f:a3:34:ca:10:25:a8:b7:4b:26:3c:ca:a3:
         d1:c4:d4:f2:8f:64:78:27:e9:bc:11:6c:5a:71:11:03:7b:95:
         f2:61:d8:a3:92:10:a0:68:88:71:16:c4:9a:46:5b:49:e7:d5:
         1c:e8:14:01:a4:98:9e:47:ac:1b:c6:94:53:79:51:16:e4:1f:
         1b:16:ef:39:3b:a7:f7:d1:99:a2:14:17:fa:1a:4e:b8:58:ad:
         5a:9b:98:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:45 2025 by rpki-client