Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9e7dcf10-d0b4-3718-b74b-b863f0e56ac7.roa
File:                     9e7dcf10-d0b4-3718-b74b-b863f0e56ac7.roa (raw, json)
Hash identifier:          EiQ83Pi6p1zYBY58BPeFpq6QCNSItJyA0XyLCoqevTk=
Subject key identifier:   70:DB:B2:44:37:53:11:EB:5B:92:9A:D8:53:52:A4:1F:F1:24:5E:1E
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A3FAAD7D873B8C05F545D4C00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9e7dcf10-d0b4-3718-b74b-b863f0e56ac7.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     397573
IP address blocks:        184.95.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d7:d8:73:b8:c0:5f:54:5d:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=f14d6fbd-6fd4-4168-b7c8-e87db6885664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:94:83:a4:10:13:7d:5e:10:87:2d:12:2b:
                    4d:56:61:56:c9:b1:d0:c8:b5:37:85:3d:67:c8:f7:
                    43:49:17:b5:f3:1b:fb:b0:6d:c8:25:46:c8:14:a8:
                    ad:1d:02:29:99:de:48:8c:3c:98:c4:5e:3e:5e:22:
                    da:bd:01:62:9f:3f:da:cf:47:5b:f7:8c:a9:62:20:
                    5b:ec:0c:bb:f1:c4:ca:7a:f2:83:34:8c:8a:89:81:
                    1a:73:a0:17:b1:ad:bc:d9:99:b3:3a:5d:8d:4f:38:
                    45:ec:6f:f8:1d:7b:4b:33:c0:9f:f7:d6:75:d1:49:
                    fe:bb:f3:61:2f:1f:e9:96:a2:7e:34:06:6d:43:85:
                    65:8f:06:75:fe:17:de:04:9c:02:27:23:2b:70:9f:
                    d5:30:7d:fa:e1:b8:65:c3:49:17:99:84:9b:7c:f3:
                    36:ce:a1:f5:3d:64:81:d9:a7:1a:93:42:6a:8f:6c:
                    6b:af:f7:d9:5e:51:e4:18:43:5d:86:f6:c8:cb:3e:
                    8a:ca:71:18:cd:41:77:44:24:02:7c:1e:42:e2:9a:
                    73:e7:b9:26:f4:82:76:25:0e:c1:45:63:73:95:cb:
                    5d:03:ea:b1:96:1b:63:31:5d:cb:ea:f3:e0:d4:68:
                    16:9a:69:5e:33:32:b1:c3:d5:7e:aa:d6:57:89:a2:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DB:B2:44:37:53:11:EB:5B:92:9A:D8:53:52:A4:1F:F1:24:5E:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9e7dcf10-d0b4-3718-b74b-b863f0e56ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:a1:5c:4c:81:51:30:25:8c:4a:ed:54:1b:02:ee:4e:f2:
         19:fa:94:82:c9:7d:00:93:14:bd:e5:93:43:fb:32:ae:41:26:
         fa:7f:50:d9:5a:9f:09:2c:f5:70:63:9c:ed:7e:62:72:f4:d1:
         2a:e6:e6:ee:6a:0a:55:ba:2d:d4:71:14:c9:8b:37:aa:9a:5c:
         87:0d:95:f8:d8:04:e9:39:34:1c:a7:09:26:90:00:16:91:84:
         ce:b4:5c:23:9d:c8:6f:70:e4:d4:10:61:fb:9d:9e:ba:d9:7f:
         86:03:77:bf:c5:c8:6f:d8:79:c3:3d:81:77:03:ec:2e:37:72:
         a7:31:c9:1c:81:eb:34:2c:aa:68:42:75:f0:73:16:be:c1:48:
         5c:f6:35:a9:1b:d1:57:2d:ba:56:09:6f:1f:8a:9b:4e:3e:36:
         be:bd:ff:69:c3:94:60:19:46:ca:13:87:4d:e8:7c:72:ac:32:
         1d:cc:ff:24:8c:c2:34:31:11:21:60:18:6b:5c:39:72:ea:bc:
         08:0c:57:d8:d9:8c:e8:7c:cb:bc:1d:1d:02:9e:92:ff:ea:f9:
         55:dc:bb:fa:b4:fb:1f:8d:52:10:77:50:06:b6:c4:7b:07:db:
         fd:f4:e0:6c:e1:0b:ee:bb:23:68:fc:2d:74:df:af:c9:fd:3c:
         d1:40:34:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:42:51 2025 by rpki-client