Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/9340415a-b246-30dc-8a39-0dacd6789e49.roa
File:                     9340415a-b246-30dc-8a39-0dacd6789e49.roa (raw, json)
Hash identifier:          Jyd5zWHMiQdXpbLGo/2My69hnznzuu0PHVfzN4nR57k=
Subject key identifier:   A7:42:C4:4E:0F:FB:70:80:6B:42:D6:59:6B:7E:38:C2:D9:9E:CD:81
Certificate issuer:       /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Certificate serial:       010D0C9F4328584A3CE029DDAE674668FACC0900
Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/9340415a-b246-30dc-8a39-0dacd6789e49.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     2055
IP address blocks:        96.125.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:29:dd:ae:67:46:68:fa:cc:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=1cdaf674-3061-4933-aaad-a6d0fcef8a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c7:c3:37:b1:ae:28:78:0b:47:11:b8:67:24:
                    83:bb:a0:d8:8a:43:b9:92:7b:4d:13:b7:a2:9a:fe:
                    8b:89:e8:16:7f:31:0d:51:2e:02:b8:34:e1:44:a7:
                    ba:0f:ed:bf:a6:44:56:58:e5:11:85:3b:47:7f:af:
                    69:1a:c0:c7:83:bc:15:2e:f6:14:b4:5f:e0:f1:4f:
                    1c:72:b5:54:e9:c8:05:69:34:30:7f:67:a2:0e:e4:
                    6c:e3:40:ac:98:c2:be:a2:bc:05:c3:1a:2e:16:1c:
                    72:66:6f:d1:15:79:2b:29:44:ae:5c:c2:9a:b3:a4:
                    be:c1:4f:dc:fc:59:56:2d:37:0b:e8:1e:6e:5a:a3:
                    42:99:c3:46:d8:22:09:db:81:9c:9c:8e:4e:9b:2f:
                    eb:73:0c:07:87:41:74:26:19:cd:bb:d3:5f:c6:d4:
                    5f:94:fd:6c:3d:21:15:45:81:09:50:ba:7e:3a:cf:
                    5b:e9:cd:16:6c:11:da:ec:04:f9:7f:60:fd:ae:1e:
                    c9:c6:1f:7f:6b:96:2e:81:ea:ff:ed:f5:c0:d6:1b:
                    35:d6:2d:cc:17:fb:a1:d5:01:c7:f5:4b:79:bc:a7:
                    e4:b5:7f:bc:ab:44:4f:4c:85:43:de:53:f4:9c:99:
                    69:be:f0:e2:ee:dd:3b:21:5f:28:20:05:54:f8:12:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:42:C4:4E:0F:FB:70:80:6B:42:D6:59:6B:7E:38:C2:D9:9E:CD:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/9340415a-b246-30dc-8a39-0dacd6789e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.125.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:88:b9:67:3f:90:66:05:9f:fa:62:0d:07:65:5c:6f:2c:d9:
         6c:b4:9e:fb:6d:0a:0e:ca:a5:d4:8d:60:2d:eb:da:f0:ef:f9:
         b4:82:1f:1a:2d:4f:ad:73:28:c3:e5:06:9c:63:6a:65:26:b8:
         61:a8:2f:8b:33:b8:36:4f:b8:68:0b:60:41:be:3b:29:f1:92:
         3e:b7:b0:b3:34:27:f2:c6:f8:80:cb:95:3c:11:b0:e8:0f:49:
         2b:ee:ad:f0:b8:8e:a6:9b:81:86:ed:29:c9:d8:6c:e8:4f:74:
         14:ad:cf:5c:1c:ba:f0:8a:c7:fd:96:92:e8:f9:4c:64:8c:cd:
         82:38:c7:44:1c:ba:cd:46:a7:5d:1d:9d:5b:ee:be:8d:f8:e3:
         e8:21:a7:55:20:02:7d:75:a4:0f:e7:79:c0:1d:f3:6f:a2:75:
         48:8d:aa:c2:e7:67:17:9a:3a:5e:41:1f:92:fb:d3:76:73:84:
         0e:57:1f:6d:a8:2d:84:45:eb:6b:b6:3f:df:f9:52:80:17:ae:
         ac:ef:0f:73:ab:94:4b:3a:59:6c:fb:52:48:d9:1c:82:34:25:
         db:4c:09:87:d3:b0:38:73:42:27:18:47:bc:d3:ef:c7:0f:1a:
         2e:9b:09:8e:1c:70:95:cb:bc:fb:fb:7f:4c:71:6a:40:10:95:
         0d:07:54:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:53:54 2025 by rpki-client