Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc853f0e-819f-3dc6-8f7b-f9e52524cbba.roa
File:                     bc853f0e-819f-3dc6-8f7b-f9e52524cbba.roa (raw, json)
Hash identifier:          51cPmdjCTuL67C78u0bHDIALsNX2naCwDjcOJjFNCOI=
Subject key identifier:   B0:A0:78:3D:61:33:3D:86:78:9E:CB:66:13:80:11:D8:DF:0B:2A:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849912F3923DF7F8AC1DBC15C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc853f0e-819f-3dc6-8f7b-f9e52524cbba.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7922
IP address blocks:        96.109.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:39:23:df:7f:8a:c1:db:c1:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=71227545-f7e2-4af9-8257-4b4d049670f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:62:5e:29:84:79:fb:48:a0:c6:33:c7:f8:31:
                    a9:34:c5:98:ea:3a:21:0f:c5:e0:5f:1b:3d:01:1a:
                    1b:0f:de:fc:98:07:5f:01:94:14:cf:a0:6b:36:d5:
                    ba:23:c0:47:f8:cd:a8:2c:eb:68:5c:87:be:51:10:
                    2c:13:51:00:f4:c9:c7:b8:ab:b5:4e:06:00:d2:f0:
                    15:a3:56:7d:85:60:6b:38:39:9d:16:fd:95:9e:86:
                    34:46:73:7f:1d:95:d7:73:51:a3:56:70:76:2c:20:
                    78:6c:e0:99:65:ca:29:ab:f5:e6:e1:c7:f7:2c:f2:
                    ba:39:52:81:db:6f:41:5e:d8:fe:e5:ee:ea:7e:8f:
                    9d:8e:12:be:4a:f6:5a:39:ca:8b:03:ef:47:6a:ad:
                    e5:d4:6d:06:17:bd:0e:c5:39:b6:84:95:96:88:34:
                    6d:26:36:c7:1b:d5:24:73:99:cf:b6:c5:ae:65:d1:
                    7f:48:0b:32:48:a1:aa:d9:61:ef:c2:2d:bc:ca:70:
                    85:b2:77:fb:9e:23:9c:c4:68:32:e1:5e:17:58:ea:
                    58:ca:34:97:c2:ec:7e:b7:ed:dc:cd:97:2e:68:c3:
                    56:80:90:42:01:02:4a:49:81:c3:bb:7c:a4:46:5d:
                    18:a3:c5:ab:4a:47:12:67:de:35:6d:b1:46:28:b0:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A0:78:3D:61:33:3D:86:78:9E:CB:66:13:80:11:D8:DF:0B:2A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc853f0e-819f-3dc6-8f7b-f9e52524cbba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:62:ce:b4:eb:76:7a:23:e1:78:11:a4:fa:09:8a:79:9d:
         a6:94:6a:c1:bf:eb:23:14:fa:6e:b7:72:d7:7b:0d:f0:5a:73:
         24:64:bd:8c:9b:12:65:34:ab:4c:de:c3:e2:51:7c:01:c3:5c:
         d0:7e:c9:a5:8b:bb:d7:48:78:3c:31:78:b1:25:d4:9e:fb:df:
         ea:e0:74:98:74:4f:bb:5c:46:82:ed:fb:ba:01:87:df:7c:92:
         e9:3d:99:1e:a5:2f:9a:ca:72:70:97:14:09:ab:28:eb:77:23:
         ef:c5:54:c9:3a:80:c2:84:88:c7:9d:c7:fa:72:5b:7c:8c:ff:
         4a:a9:35:57:15:61:6a:2d:60:c0:60:e8:32:9f:b6:7c:8c:f0:
         61:ae:63:0c:16:4b:cb:9b:46:0d:32:d0:69:c2:ab:67:8a:cd:
         6f:ca:12:3b:05:58:9f:67:25:b1:33:db:52:b4:85:2e:23:4b:
         a5:42:79:04:b5:99:ca:47:de:da:97:60:32:e4:12:8d:3b:7b:
         a4:e2:2e:b2:38:f2:17:92:30:40:5d:d1:0a:b1:a9:35:26:7d:
         5e:78:83:b4:27:e0:ea:02:58:cf:d5:c7:24:47:17:73:1c:c3:
         95:b9:13:8e:e9:c6:15:2c:ee:3b:da:6d:1e:35:b8:0d:cf:94:
         6d:d2:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:56:00 2025 by rpki-client