Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/ebf9bf9c-6863-3975-8cc1-95e388ed0031.roa
File:                     ebf9bf9c-6863-3975-8cc1-95e388ed0031.roa (raw, json)
Hash identifier:          Te6lesbGSRFx+C5Tdr22Sko0lJk8zqInm081GntYYzE=
Subject key identifier:   1B:06:A1:83:70:A7:64:9E:78:1C:01:43:F6:47:47:BE:75:E8:8F:F8
Certificate issuer:       /CN=792c5c41-497a-4325-83ea-87d8b3dfdae9
Certificate serial:       010D0C9F43285849B9A9FD4493C7C62164ABDD00
Authority key identifier: 7D:74:25:41:9A:38:20:93:7F:60:CF:32:9F:5B:D6:B8:E5:B6:31:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/ebf9bf9c-6863-3975-8cc1-95e388ed0031.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     397412
IP address blocks:        143.109.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:fd:44:93:c7:c6:21:64:ab:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5c41-497a-4325-83ea-87d8b3dfdae9
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=ed892cc9-f025-4b45-99d3-5428c9334914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:ee:b5:df:49:c2:96:19:38:50:85:67:14:
                    94:e5:b6:8e:a6:86:cd:45:af:7d:43:cf:4b:30:9a:
                    47:a9:aa:8b:06:32:b4:4f:38:ae:63:eb:3e:ee:d2:
                    62:51:37:28:66:9e:8d:36:a8:81:dd:cf:9e:6e:7e:
                    7a:f4:2b:00:03:d1:96:67:33:8a:13:d0:c2:e3:a3:
                    ef:86:b4:c3:48:a9:a0:f2:5e:dc:53:9c:99:77:bd:
                    6e:90:de:20:27:ce:2b:91:b3:5e:0d:27:16:f4:cb:
                    fb:c9:54:51:d2:34:17:7f:29:f1:ab:ef:5b:77:8d:
                    07:09:fe:c5:3c:a5:8e:52:b9:10:eb:b1:0c:20:be:
                    4a:74:53:da:2c:f9:ff:ef:e7:e0:ce:0e:8d:18:cd:
                    04:e7:c9:8b:f8:d5:d6:62:3c:6a:9b:d5:a8:5c:ee:
                    5a:54:2a:b1:95:ea:6e:3b:d7:70:a3:0e:ca:db:18:
                    f0:16:b0:ab:8c:a9:70:62:88:9c:d3:a5:a1:a4:a6:
                    f3:fd:9d:fd:26:53:97:79:a1:c3:02:b4:2c:54:55:
                    bb:e0:e5:46:97:25:55:ef:50:a9:0b:35:c3:76:8a:
                    42:6c:27:7c:f6:ba:4e:1c:ba:cd:cf:48:23:d8:8c:
                    3b:ca:f8:52:18:1f:cb:84:1b:c6:f2:9b:b8:b8:e7:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:06:A1:83:70:A7:64:9E:78:1C:01:43:F6:47:47:BE:75:E8:8F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/ebf9bf9c-6863-3975-8cc1-95e388ed0031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.crl

            X509v3 Authority Key Identifier:
                keyid:7D:74:25:41:9A:38:20:93:7F:60:CF:32:9F:5B:D6:B8:E5:B6:31:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:64:d0:9d:bf:36:b1:1e:58:1b:1a:11:f7:6e:56:22:be:
         3b:89:cf:9f:f6:b8:f6:21:76:7d:bd:12:c8:27:86:61:5c:6b:
         ac:3a:81:64:09:c6:4b:f6:e0:9e:9d:73:47:05:2f:0d:84:1c:
         29:b0:90:c5:09:5a:ca:8f:6b:57:33:49:3f:1b:ae:44:6d:26:
         32:d9:e7:f6:de:88:06:d4:6f:fe:15:2c:b1:8e:54:0c:b2:2e:
         ff:34:c5:48:a8:35:bd:38:16:a5:4b:98:f4:d4:e5:73:47:0c:
         5e:ac:0f:13:ca:ce:80:73:a3:5b:b8:9f:56:db:91:25:13:74:
         7c:12:94:7b:3b:af:d6:2c:64:62:9a:39:1c:cc:b9:0d:f7:09:
         8c:b1:2f:89:58:e8:8c:ae:6f:5f:e1:3a:5e:43:47:5d:1b:c6:
         59:60:23:bc:25:c5:98:61:43:e1:7c:ff:38:f0:98:0a:71:5b:
         a3:89:51:4d:7c:0c:07:5f:9b:d3:69:ff:6c:55:11:ef:e1:32:
         3f:fa:97:5a:41:f4:8b:d4:07:d6:63:2c:ae:52:ae:d2:93:3b:
         9c:40:a2:81:67:7b:07:e6:c4:a2:91:a3:b6:f6:20:52:a4:f8:
         21:99:e2:f1:fb:86:2c:c9:35:6a:30:bd:b8:2a:14:2d:a9:15:
         37:25:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:12:14 2025 by rpki-client