Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/0b0b26ba-e1b8-32b2-ba27-05312c10602e.roa
File:                     0b0b26ba-e1b8-32b2-ba27-05312c10602e.roa (raw, json)
Hash identifier:          SsTTW5BBMjP8iHAGLPW6VlUwsi/h6dSjHkdTQ7mVAas=
Subject key identifier:   A7:58:A4:D1:AB:3F:5C:BD:72:A7:87:FF:91:4F:43:5F:74:03:8B:53
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F4328584A506AEEDDEE5B3825ED61D600
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/0b0b26ba-e1b8-32b2-ba27-05312c10602e.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     396982
IP address blocks:        199.47.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:ee:dd:ee:5b:38:25:ed:61:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=c8664aca-0c9c-4578-920b-58fd98fa6991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:10:84:1b:09:1a:a7:70:a8:ba:df:16:29:
                    21:7d:8d:03:75:85:1f:57:c9:c7:72:c5:aa:ad:6c:
                    45:ad:6d:e2:59:f3:c9:01:05:01:8a:74:53:c6:23:
                    fd:9f:0d:4d:21:94:1a:01:90:f8:5d:27:9c:fa:dd:
                    b2:25:94:39:49:db:98:fd:30:ae:16:21:84:f7:3d:
                    17:bc:3b:5a:2b:d9:03:c7:08:e1:7d:95:08:f7:4f:
                    1c:cc:e5:0c:18:44:94:d0:ba:4b:e3:c6:7a:60:ee:
                    92:1e:26:3b:1e:6c:09:b8:a2:2e:e3:5d:73:98:51:
                    2a:7f:cf:4b:14:00:42:62:12:67:c2:50:1e:e6:cf:
                    a4:12:b3:6e:f9:37:d5:6a:da:58:d7:6a:eb:22:d3:
                    3b:c8:35:1d:b8:81:d0:57:d9:28:2e:6d:0a:6a:f9:
                    63:f7:4f:ef:92:b8:85:7f:39:4c:1a:6a:48:21:0e:
                    b2:72:53:d8:58:30:60:e6:39:45:19:90:38:26:bf:
                    5f:77:76:77:a6:7d:f4:7e:b5:9e:00:a9:e3:e4:d1:
                    fb:c2:43:50:9c:6c:18:55:61:59:36:e2:1e:5c:0e:
                    6e:2a:be:53:33:82:11:bd:3d:d5:83:d2:e0:a5:a5:
                    b6:5c:8f:8b:a4:64:ab:58:ce:76:e2:19:74:11:3a:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:58:A4:D1:AB:3F:5C:BD:72:A7:87:FF:91:4F:43:5F:74:03:8B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/0b0b26ba-e1b8-32b2-ba27-05312c10602e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e1:b8:26:e2:cd:94:83:c5:aa:68:0e:25:29:21:96:73:5e:
         92:a0:fc:ad:3d:81:1b:15:02:1e:a7:78:b6:e8:48:a4:5f:30:
         89:5c:ca:aa:20:83:88:ee:8e:25:ce:6e:d9:85:f1:97:27:54:
         4c:1b:a0:fe:d9:44:b9:a9:20:08:72:b0:ea:b1:86:6a:cf:49:
         23:95:b0:7b:7f:6a:83:c0:bc:47:60:dd:2c:aa:ed:0c:06:f5:
         63:91:82:df:89:a9:e2:0a:59:45:b4:58:59:d4:a1:91:3f:5f:
         ff:6d:7f:f9:10:23:ce:6d:d1:99:03:77:4c:00:53:0e:3f:b2:
         df:d2:c1:6f:cf:13:f5:f5:03:90:a9:9a:ca:a7:71:82:4a:94:
         67:4e:8b:ce:64:db:fd:85:30:93:7a:81:d6:fe:42:1f:9c:96:
         17:98:7f:83:3e:a5:1e:03:f8:9a:04:47:7d:97:fb:99:f3:97:
         07:15:cf:e2:c5:79:76:dc:a3:88:5c:d8:f7:10:a9:99:19:92:
         05:c5:ab:a5:15:f0:98:3c:18:d9:6a:89:d8:55:e8:05:d6:83:
         90:ec:f3:50:46:05:12:38:66:3f:77:16:d0:68:c5:df:a8:e1:
         88:bc:53:6b:1c:d5:da:06:98:15:7d:d2:f2:19:e2:ba:72:de:
         76:40:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:19:45 2025 by rpki-client