Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1d5e3841-1cb1-334f-b205-139cba20034a.roa
File:                     1d5e3841-1cb1-334f-b205-139cba20034a.roa (raw, json)
Hash identifier:          vKcd1s5Q4xX+I4A96Gcs2m3+IiVMvA3VMhr4P0V2XuY=
Subject key identifier:   5F:0B:65:FA:8B:DA:0D:F2:2B:9B:5C:B3:B6:F0:C9:43:75:94:8F:81
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A506AEE0628BA784A88473880
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1d5e3841-1cb1-334f-b205-139cba20034a.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     395075
IP address blocks:        207.96.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:ee:06:28:ba:78:4a:88:47:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=ed78f8fc-2184-4f14-a30d-281cd53e351b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:2c:ed:cf:1b:63:ac:03:b7:e8:a1:b7:d8:
                    3e:b2:16:b4:e4:b3:f7:12:49:20:ba:e7:13:b5:c7:
                    88:70:ef:80:72:a9:87:4a:cf:c1:77:df:3f:45:d5:
                    f7:12:ff:3e:67:5a:a0:e8:e2:17:7b:74:48:e9:f9:
                    fb:a0:34:b6:ad:51:b3:1b:b2:8c:d9:19:4e:fd:04:
                    7c:1a:06:1f:49:ad:c3:66:fa:13:46:75:92:d3:98:
                    80:c9:4c:78:d5:b8:7e:d7:c8:82:b2:41:cf:57:65:
                    18:ed:09:9d:09:1b:19:7e:95:a5:72:d4:97:62:6d:
                    ac:eb:31:c0:ad:d8:70:67:c6:10:47:51:03:f0:d6:
                    9e:74:cc:31:a8:50:18:96:09:99:bd:93:b1:84:1a:
                    30:b5:e3:38:13:bf:60:68:d7:f4:3f:74:79:be:3e:
                    79:60:4b:ab:c6:b8:25:a1:32:d6:fe:60:ad:43:09:
                    c8:f4:6d:a9:3d:ad:7b:98:aa:5a:0e:74:93:7b:e7:
                    47:1e:1d:6a:7f:9f:ad:d1:53:1c:8e:0c:e3:98:f9:
                    7a:fc:70:1b:f9:9a:17:6f:f6:99:29:9a:52:29:91:
                    02:79:8c:bc:56:77:d9:14:11:7e:74:78:f5:62:d2:
                    c1:67:1c:29:b4:33:72:73:42:f5:72:aa:4d:40:85:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0B:65:FA:8B:DA:0D:F2:2B:9B:5C:B3:B6:F0:C9:43:75:94:8F:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1d5e3841-1cb1-334f-b205-139cba20034a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:72:c3:7d:67:ce:6c:45:cd:12:08:2e:85:37:4f:e9:08:
         e7:09:95:1d:de:da:ee:f1:cc:b0:46:98:8e:12:25:2d:12:ea:
         de:2d:96:61:0e:11:d2:53:cf:91:66:56:02:13:76:6d:97:9e:
         73:cb:0f:30:13:bc:0e:32:92:af:08:b1:9f:c9:0b:61:13:2f:
         38:27:14:ed:5d:c4:c2:12:7f:66:cc:fd:b4:03:f8:a1:97:6a:
         d8:65:45:ea:b0:4b:c0:10:32:0f:79:a8:63:7c:b1:82:fd:61:
         7b:9f:de:43:7e:e8:bd:56:10:83:8e:df:37:6b:af:e9:11:82:
         24:39:91:fd:52:dc:4a:ba:0b:06:cc:2b:90:b5:4c:e9:8d:79:
         7d:1d:2b:3d:79:cc:ab:8b:c5:29:60:66:76:9b:eb:0a:ef:8c:
         5b:0e:16:5c:cf:71:8f:b0:fb:79:6c:3c:8b:d1:a2:f7:a2:93:
         21:ca:00:fb:38:08:73:63:8f:1c:35:1d:06:89:e4:c4:98:41:
         09:e8:6b:c8:e0:53:47:10:03:0d:39:9f:03:5f:3b:36:91:9a:
         6f:38:e2:4f:29:85:66:aa:7b:73:71:11:65:5e:a4:2c:af:56:
         88:1e:f4:62:9a:d2:b2:b2:ba:28:0f:70:ef:27:24:56:f6:62:
         62:a3:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:57:01 2025 by rpki-client