Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1bb0f6c9-d48c-352e-8365-579ab0d5cb60.roa
File:                     1bb0f6c9-d48c-352e-8365-579ab0d5cb60.roa (raw, json)
Hash identifier:          JXwEJYYn7kLSr54zIePTFjuYKs6ow2mM3+x9BWZ3IHU=
Subject key identifier:   29:BC:D5:77:4A:BB:74:BC:80:6E:58:52:37:C0:EF:13:21:0D:DE:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196AB376A1DF9DED2726100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1bb0f6c9-d48c-352e-8365-579ab0d5cb60.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        96.12.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ab:37:6a:1d:f9:de:d2:72:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=d38975a4-4e1f-4486-95c1-28557b01bf1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:cf:19:f1:bf:8b:47:71:fb:01:6d:0f:3b:
                    02:c9:13:54:e4:7a:76:8d:6e:32:87:1f:6e:17:c5:
                    37:8c:8b:2a:f1:31:82:83:ef:d5:22:f2:32:b9:6b:
                    be:28:8d:c8:3a:75:df:6a:d3:8f:bc:b7:d4:e6:ca:
                    dc:ba:73:14:e4:f3:de:f1:9c:dc:af:23:62:c3:a1:
                    cc:db:19:75:03:06:0a:e1:58:db:c7:40:97:32:b3:
                    36:c1:9c:65:25:28:c2:61:93:a9:05:ed:90:c6:3a:
                    24:a4:67:72:a4:52:38:56:21:4b:08:2f:74:39:7a:
                    da:41:6e:8d:0d:ff:46:06:dc:42:07:83:bd:48:47:
                    80:7f:ac:0f:ce:3e:12:52:07:d3:a2:85:43:51:f3:
                    8f:26:0a:74:ac:59:34:b6:08:cf:27:f0:60:c6:27:
                    fa:05:77:ce:ed:e3:9b:a6:93:fc:af:c3:2e:b5:c7:
                    3a:14:bd:3d:18:64:26:e2:7a:28:4d:3d:26:72:fc:
                    c2:bd:c2:3b:d6:4e:40:58:1d:54:a9:14:0d:c6:f3:
                    36:82:0b:c3:d8:e4:13:2f:5d:0d:c7:33:66:0a:5b:
                    77:94:6a:f4:8c:06:5a:d8:78:2a:38:98:be:d4:4e:
                    64:e4:7b:f3:f7:68:b2:d0:c6:4c:8b:89:bb:be:d1:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BC:D5:77:4A:BB:74:BC:80:6E:58:52:37:C0:EF:13:21:0D:DE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1bb0f6c9-d48c-352e-8365-579ab0d5cb60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.12.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a7:af:5f:3e:96:45:5f:06:34:a4:93:0d:0b:42:2d:fc:c9:
         d4:0e:f7:d0:53:68:90:b1:97:4b:af:3d:5e:e3:bf:65:09:04:
         31:3f:ea:c3:e5:78:3a:74:0a:a7:f4:d2:bc:9d:e6:1b:b5:ce:
         4a:2a:ad:54:8c:18:de:99:e5:92:6d:ae:68:26:86:32:6d:8c:
         ec:25:c2:1a:46:c3:7a:1a:f6:3a:d1:9b:48:8f:19:77:41:53:
         5e:c4:a0:14:83:bb:4a:8b:0c:21:2d:53:8b:41:ee:d1:fe:bf:
         16:7b:49:7e:76:9c:1d:25:00:9d:5a:ba:ce:d6:13:7e:67:65:
         be:2c:1f:c0:dc:bf:c7:2e:f7:83:07:98:6e:6a:1e:f1:30:eb:
         09:d1:41:ce:73:3c:95:02:6d:8e:f6:c9:af:cf:5d:96:1a:84:
         07:53:d4:f8:f2:80:a6:86:40:09:59:b9:c8:39:da:03:01:50:
         ea:c4:6d:20:9c:21:06:40:b5:c6:30:e3:57:0d:ab:24:f9:9d:
         ea:c2:2a:03:5d:7c:4e:14:e1:29:4c:84:e5:21:0c:04:44:1b:
         d1:f4:df:e4:78:53:81:47:92:34:ef:de:a5:08:78:26:7e:29:
         91:d9:70:d0:6e:7e:23:9c:4f:2c:fb:44:c3:25:5d:77:5e:44:
         a9:b6:47:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:11:30 2025 by rpki-client