Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f264bb1-6244-3a24-95c3-029c68614b2a.roa
File:                     7f264bb1-6244-3a24-95c3-029c68614b2a.roa (raw, json)
Hash identifier:          zgM2Q2CIynZNCtVEKaGfaRfuL5ZGdSVPf8v6VohcNTo=
Subject key identifier:   BF:02:5A:8A:47:48:6A:8B:04:E3:0C:6B:6A:F6:B2:A2:24:41:98:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD41B366C6585ED8D3C0E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f264bb1-6244-3a24-95c3-029c68614b2a.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7015
IP address blocks:        96.108.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:41:b3:66:c6:58:5e:d8:d3:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=e299058a-1194-488a-8523-2ee55d93c062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:91:d1:d9:fc:06:14:3f:0f:89:f4:1e:13:
                    b1:72:7c:7d:d2:7b:3a:0d:5a:cf:40:e2:e4:c8:f1:
                    2a:9a:77:63:52:78:43:2a:a3:1a:18:f2:92:d7:37:
                    c2:5b:25:8d:d1:0d:9a:40:18:2c:cb:6e:6d:8a:ad:
                    36:e6:2f:34:75:f2:dc:52:c0:63:70:8f:bd:d9:0e:
                    3d:7e:bf:5c:c0:0f:de:a3:0e:cb:c6:bf:7c:a5:3c:
                    e6:7c:12:30:bc:84:92:e7:24:70:8e:56:aa:c4:d9:
                    d4:fc:7a:35:20:a8:2a:60:8a:fe:71:89:37:95:a6:
                    cd:12:6b:3a:30:2d:fe:f4:5b:aa:a4:76:79:c9:1d:
                    b7:58:a3:3c:97:69:69:ee:99:97:46:bd:40:9a:df:
                    47:a1:37:7b:f5:f2:9b:7e:d9:d9:2f:ab:ff:57:51:
                    da:99:b3:86:ed:96:de:89:1e:89:5a:86:14:f8:52:
                    08:61:78:a8:b1:ac:f3:a7:f1:4f:53:10:90:12:f5:
                    fb:a4:73:ea:f8:2c:3b:80:d3:6d:a6:2b:28:0e:e3:
                    4d:55:e8:1e:e5:fe:37:44:c5:57:69:8a:96:3b:fe:
                    7a:75:fa:6b:14:98:f3:f2:92:e2:8b:e0:18:1b:6c:
                    b4:b7:79:18:01:6b:bb:fd:10:78:eb:89:04:95:78:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:02:5A:8A:47:48:6A:8B:04:E3:0C:6B:6A:F6:B2:A2:24:41:98:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f264bb1-6244-3a24-95c3-029c68614b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3d:00:c7:3e:33:7c:b5:53:a6:47:aa:05:5d:bb:88:61:c0:
         ea:ad:77:fb:c0:3b:6c:ef:f7:ae:88:85:c0:ab:8b:10:2c:71:
         e6:9f:48:04:a2:7b:41:b8:e0:a1:18:c1:d9:eb:f2:3b:7f:f1:
         6b:8f:f3:98:4c:5c:cd:72:88:77:b5:31:af:b8:0f:72:29:b5:
         0b:b5:ee:3d:8b:0b:69:dc:96:1b:51:ac:a1:ac:67:23:c1:b8:
         82:47:f8:55:d5:14:59:48:70:9c:be:33:71:70:15:fe:5e:17:
         83:53:a3:be:95:6a:3f:eb:92:85:9c:08:2a:4c:ef:ec:65:b4:
         c9:17:bf:cf:97:ac:26:13:0f:72:74:86:bc:03:92:58:ec:23:
         a7:22:d0:0a:4e:d6:d9:06:27:73:22:ed:c1:87:79:cb:13:54:
         b4:67:4e:50:23:86:0b:68:7c:6f:0b:d6:f0:ff:9d:04:fe:55:
         31:69:5c:9b:92:d6:da:87:c0:f9:33:ec:d8:f2:fb:2d:3e:3f:
         ec:7b:92:30:53:aa:6f:c2:0b:89:60:13:aa:1d:28:91:11:c9:
         2a:49:40:55:50:f3:10:6b:ae:e4:8d:90:59:ff:f9:07:50:d3:
         92:c5:30:6d:93:b0:8c:6d:bb:7c:4e:dc:63:6b:70:68:2d:56:
         e1:36:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:30:38 2025 by rpki-client