Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc13a3a3-d557-311b-a7c4-052d75a784ae.roa
File:                     bc13a3a3-d557-311b-a7c4-052d75a784ae.roa (raw, json)
Hash identifier:          qZadLMBqYq4hp/9s4YtE+4/1GE4n9qnnVDxfQgb5rY0=
Subject key identifier:   20:32:E1:6C:BE:29:AE:D6:FE:53:91:1A:37:58:FE:31:E8:1A:4C:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB40F3FD15D7432BF0213E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc13a3a3-d557-311b-a7c4-052d75a784ae.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        96.238.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f3:fd:15:d7:43:2b:f0:21:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=7e20ae13-40c3-4d9a-b83b-a79f7a8cdc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f4:e5:5c:a2:2d:44:52:95:c2:38:1f:29:af:
                    85:7d:61:15:41:e0:54:8f:7e:07:61:99:d5:05:6d:
                    19:9b:5a:24:23:e6:1d:24:94:68:1d:ff:3a:ba:1a:
                    d4:08:8f:35:f4:25:33:a9:60:5e:c4:2a:47:0f:37:
                    50:c7:94:a4:3d:b9:1b:22:a9:af:cb:f8:9a:b2:83:
                    ed:a6:27:6a:53:ed:8a:b4:cf:aa:3e:4e:f2:8d:5c:
                    3c:97:10:74:4c:d6:90:3a:67:3d:ba:c6:3a:bb:78:
                    cd:f2:08:c2:45:96:92:01:df:28:80:52:64:c6:5d:
                    27:b8:8b:f8:2f:09:7a:fd:fa:39:b2:59:63:f9:d2:
                    7c:03:8a:4b:06:c1:9f:fe:91:46:d8:c9:e5:53:33:
                    58:2c:30:a5:b0:cd:f5:e3:41:97:67:f7:43:31:e8:
                    61:2c:71:68:b3:82:52:89:36:ec:2f:13:f6:30:68:
                    ef:dc:83:42:24:0d:ba:a7:7f:51:01:30:e4:b6:b6:
                    78:37:21:40:4c:18:34:77:b3:c8:1a:8d:a9:8f:15:
                    27:f3:93:a9:9d:3e:41:0a:7e:64:bd:e3:97:a7:2b:
                    01:ac:d1:2d:c1:30:85:a1:07:9b:88:1f:a3:9a:87:
                    a9:2f:4f:67:78:be:c3:6d:e1:24:72:44:98:f1:dc:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:32:E1:6C:BE:29:AE:D6:FE:53:91:1A:37:58:FE:31:E8:1A:4C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc13a3a3-d557-311b-a7c4-052d75a784ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.238.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:ea:b1:84:ac:32:09:48:ef:c5:f4:1b:ba:98:60:06:9d:
         74:4e:43:60:9b:54:39:45:30:18:00:fe:bd:e7:f3:43:0c:ac:
         15:79:bb:71:2a:86:d1:34:b3:37:a1:72:d4:29:ec:a6:db:be:
         f4:c1:3c:e6:d1:ce:17:3f:0e:21:ed:49:9a:87:41:89:cd:fa:
         9a:c1:f2:06:6e:bb:fb:00:3c:6b:69:2a:52:7c:22:ef:75:d6:
         c3:83:64:56:9d:71:01:fc:4a:d2:9b:08:98:5d:93:ca:ae:bd:
         77:78:50:03:22:24:32:21:6c:a5:24:2a:21:10:7b:97:3f:2c:
         03:5c:88:aa:29:06:5b:4a:02:f8:18:1c:cb:e2:dc:b0:7b:ea:
         a2:d5:24:b6:c0:2b:ce:2b:fb:94:c0:41:39:0f:73:76:ca:67:
         05:d8:83:cd:23:4a:95:7b:49:65:8d:99:68:06:3b:10:fb:a7:
         32:ff:88:99:e1:3e:bd:f4:5c:b5:76:68:a5:20:36:7a:5a:d2:
         80:b5:d2:7f:26:19:a4:2d:54:6e:d7:d4:6a:b1:a1:57:e0:bb:
         e8:06:97:07:38:43:bc:05:62:c1:9d:06:f6:86:9b:59:f1:93:
         c3:bd:04:fc:c0:38:9f:88:e9:87:a5:e8:77:b6:c3:f2:43:5e:
         3a:0a:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:18 2025 by rpki-client