Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5761fa76-8827-3efb-a73c-c9acbfda61b3.roa
File:                     5761fa76-8827-3efb-a73c-c9acbfda61b3.roa (raw, json)
Hash identifier:          wnYBIQ4VkCs+T59GOagIdEtq4LvBOCU6a52vJmM40nU=
Subject key identifier:   7D:A7:CC:4B:02:D9:10:49:EE:93:8E:87:41:A0:34:FF:47:8D:B3:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584992949539C2AC75DA392376A5
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5761fa76-8827-3efb-a73c-c9acbfda61b3.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33651
IP address blocks:        96.114.65.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:95:39:c2:ac:75:da:39:23:76:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=18e86268-1209-4e8e-9258-632fbcafc3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b0:a3:bf:2f:18:80:6a:e7:0a:17:8c:56:09:
                    eb:5d:fd:ae:f3:e5:61:f2:f0:c0:d4:2b:e2:d2:b7:
                    0d:32:2b:b3:e5:b3:b1:0e:ae:4b:17:be:67:d9:37:
                    89:01:b0:9c:b0:a7:90:83:20:57:8e:d1:44:7a:d7:
                    3d:76:bf:9b:ee:aa:77:12:24:c9:b3:1f:85:28:5c:
                    6e:fc:c5:ed:e3:19:41:1c:a4:77:02:d3:6b:47:74:
                    b2:b4:cf:c0:d0:57:60:66:9e:c7:d9:ef:88:59:d4:
                    8c:60:5d:7a:00:86:e6:44:da:df:3a:90:6a:ef:68:
                    44:a0:27:10:45:9e:be:22:dd:94:13:3f:19:2d:ba:
                    fb:eb:a5:a1:28:81:56:eb:40:91:2f:89:c2:a3:d9:
                    2a:24:a9:71:8c:66:6e:cc:c7:1b:e4:67:0c:32:30:
                    b6:29:3e:aa:ee:f4:ad:70:87:26:24:04:5d:6f:50:
                    e1:1d:fd:32:a1:c2:59:c0:46:8d:b1:22:2f:41:5e:
                    cf:54:3e:aa:ed:b2:ae:f7:39:ce:93:e7:80:be:6b:
                    33:ca:db:25:c9:03:48:d5:f6:4b:8b:70:ef:6d:57:
                    a8:e7:64:15:8c:5e:3d:1e:72:f3:81:6b:0a:b0:7d:
                    b6:5a:b8:2b:99:ab:7d:56:c3:ea:a5:8a:d6:80:81:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A7:CC:4B:02:D9:10:49:EE:93:8E:87:41:A0:34:FF:47:8D:B3:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5761fa76-8827-3efb-a73c-c9acbfda61b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.114.65.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:bb:ec:70:7c:25:e6:ca:56:c8:77:49:f3:19:e5:39:7a:4f:
         b6:da:1b:90:36:54:65:2b:0c:3a:b5:16:7c:e3:9d:d6:b0:e5:
         f6:fc:11:34:40:bb:53:05:68:4f:f6:d2:13:e7:8e:84:e2:5f:
         c6:7e:a6:20:46:96:48:d2:c0:8d:a9:2b:84:60:3f:63:2a:54:
         dc:fc:ef:0b:d3:97:e0:15:80:6f:5f:a2:97:fc:37:a7:35:01:
         bd:f5:50:63:ef:dd:4a:21:4c:56:38:ed:61:ea:25:01:ce:5a:
         7d:57:27:c6:1d:ff:5c:be:5d:95:7f:4f:bb:d0:d2:64:2b:9a:
         c1:e2:f0:18:23:69:87:51:58:c2:ee:60:ab:fe:38:22:a9:94:
         cb:24:d9:d9:70:33:4a:bf:9c:db:69:ea:20:21:4a:f8:56:84:
         7d:b0:b9:55:7f:84:39:1e:ec:f5:02:5e:02:1c:07:40:a6:1c:
         9f:54:c2:38:09:bb:2a:81:a4:d2:97:fd:14:c7:76:32:18:4c:
         f8:72:18:3a:4d:36:03:b8:42:95:55:69:53:72:50:62:c5:86:
         22:68:f6:d8:a0:b3:40:39:fd:15:fd:a2:35:52:eb:e8:30:01:
         ed:fc:47:11:20:13:72:f6:ad:e8:3c:f2:4f:d0:5c:40:64:8b:
         24:4b:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:40 2025 by rpki-client