Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/412ca72f-9edd-3e5b-9c01-bafb60c17755.roa
File:                     412ca72f-9edd-3e5b-9c01-bafb60c17755.roa (raw, json)
Hash identifier:          oBFgjQQMaqKUNBwklTk3oCUBZqcrBn6Xw5jCn3UZwcU=
Subject key identifier:   63:E6:02:D3:E9:EA:B3:92:CA:4A:2A:95:B5:C1:68:4D:F8:58:B6:27
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A3CE027BABB11BE53F664C780
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/412ca72f-9edd-3e5b-9c01-bafb60c17755.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     22652
IP address blocks:        75.98.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:27:ba:bb:11:be:53:f6:64:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=32d899dd-24f2-46b3-ac7f-94d333b861f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:50:23:9b:00:cd:0d:ee:25:53:cd:0f:c7:
                    9b:fb:4d:73:c7:12:20:f4:8b:5a:3a:cb:37:f7:fe:
                    08:e8:fe:9a:f4:f7:ee:3c:7e:40:57:3d:99:55:58:
                    0b:96:3d:26:8b:b0:93:ca:c8:66:ab:9e:62:90:a1:
                    8a:65:0d:e8:71:0f:6e:47:02:f5:e6:f5:0c:16:20:
                    d0:63:40:9e:59:e4:dc:84:f3:b1:a5:00:63:57:44:
                    ef:d1:e9:b3:db:4d:60:3f:42:e5:b4:3f:91:98:c6:
                    54:28:0d:ee:23:22:68:d9:9a:3a:19:a6:68:e1:04:
                    23:6a:53:65:4c:f8:3e:08:58:87:40:a6:ea:72:fb:
                    4b:e3:65:ae:c3:d9:c6:80:e4:80:ba:ad:b6:0d:cd:
                    0d:df:da:48:ad:90:4a:3b:14:f1:e3:7c:d4:40:53:
                    ed:e1:58:df:df:e3:87:cc:43:30:75:ad:f9:f5:6d:
                    5c:ac:b1:20:71:96:04:a8:ff:ff:3f:3f:c8:53:9f:
                    b1:0e:41:f5:f3:c9:a6:ca:fb:75:0b:99:c5:2d:f0:
                    ea:bc:9e:39:38:68:19:cf:9a:ab:24:28:dc:ae:d7:
                    42:5a:f3:1a:a6:aa:bb:da:6f:c5:bd:24:2b:1b:be:
                    7d:b8:65:c6:52:c8:2c:18:ba:12:a8:de:d8:ae:ff:
                    db:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E6:02:D3:E9:EA:B3:92:CA:4A:2A:95:B5:C1:68:4D:F8:58:B6:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/412ca72f-9edd-3e5b-9c01-bafb60c17755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:b1:55:e0:ae:fe:ee:c1:b8:7f:8d:a1:96:5b:71:cc:11:
         ad:e5:7c:80:b7:29:39:0a:01:17:aa:8d:8d:d0:e0:2d:db:5a:
         aa:28:3e:ce:8d:0b:c8:36:8f:8b:25:a5:2f:fd:a7:fa:b4:4d:
         7c:64:a5:80:5d:5b:28:11:60:73:4c:04:b4:11:9e:b5:ef:e1:
         d0:63:5e:a1:34:2b:51:ca:4e:0d:b4:c0:da:11:74:b9:a9:2d:
         62:1c:d9:49:e9:f4:b0:56:1b:b7:20:13:6f:b6:39:ca:d1:83:
         e7:e9:63:57:06:d8:0b:bb:c4:1f:b6:7f:1d:01:7f:0d:78:f8:
         03:23:e0:aa:f8:93:b4:06:19:90:d9:9c:d3:51:e9:07:f3:cb:
         99:f8:9b:bf:ec:ad:20:0a:1d:5b:86:75:18:86:d7:40:52:a1:
         d4:de:12:4e:d5:d3:7d:50:dd:ba:49:99:28:9f:d4:0d:51:b2:
         67:2b:62:29:56:c5:30:45:e3:32:cc:f1:94:19:71:55:c8:ca:
         56:dc:6f:d8:34:a9:2b:92:68:55:11:2f:8c:e6:9f:fa:1a:e1:
         ba:c1:84:81:9c:1a:05:bf:ed:f0:ac:b4:6d:0a:25:c6:ee:df:
         2e:41:4d:00:7f:0c:1a:15:43:f8:94:ee:66:b0:9a:0c:74:cd:
         12:33:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:45:33 2025 by rpki-client