Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/12e8f2aa-b31f-343f-ae06-06df3af584f0.roa
File:                     12e8f2aa-b31f-343f-ae06-06df3af584f0.roa (raw, json)
Hash identifier:          bQj/Zvrw/7B8xPrBHTuzhE9SujMEtxOPseRv08bhdKo=
Subject key identifier:   0E:15:9B:EF:E5:B2:F8:91:11:CB:0B:09:DD:FF:D4:AF:5D:01:8D:D8
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F43285849E7BA7729D00161C0C8C73400
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/12e8f2aa-b31f-343f-ae06-06df3af584f0.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     396998
IP address blocks:        141.193.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:77:29:d0:01:61:c0:c8:c7:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=3d5018e2-3a78-47fe-acac-702b854c5c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:48:ec:fe:2c:81:82:ad:f8:7c:27:e0:fd:
                    22:64:b7:5c:ae:69:36:7b:03:4f:ae:b7:d6:70:61:
                    e2:a1:91:82:9d:fe:ad:d3:3e:ca:f1:de:8f:13:d5:
                    67:90:3a:8b:e7:36:2c:9a:12:1c:03:95:9b:ae:7b:
                    71:ed:e1:a6:97:4b:4e:39:15:a8:bd:2a:57:5a:2d:
                    38:3a:c9:03:0f:87:46:60:1f:38:d2:e8:eb:6c:36:
                    91:d0:3d:6b:73:7f:d6:38:1e:96:a0:8c:56:63:5c:
                    9f:7c:80:d2:b0:67:28:e1:30:cb:d1:47:9a:c9:29:
                    a2:cc:a1:29:8d:b3:ff:1e:7b:37:db:27:ab:0d:ad:
                    f3:a1:b6:dd:ab:5b:08:53:92:e2:78:bc:63:fd:24:
                    7c:5d:68:4e:ee:ca:51:49:b5:d1:e7:a0:9a:59:8e:
                    8d:f0:6b:fe:b5:75:f6:a8:e9:bd:94:8f:40:5d:a9:
                    0b:ce:a5:62:e6:22:55:65:06:bd:4b:71:bd:8d:83:
                    dc:39:0f:74:a6:ab:96:37:71:a5:bc:a8:c2:52:db:
                    13:1d:eb:4b:11:40:69:e9:e2:e0:5d:42:a1:3a:1f:
                    e0:62:64:68:fe:91:f7:4c:b3:7e:e2:47:b8:c7:54:
                    71:26:1f:11:cc:3d:72:20:3a:c2:7f:aa:16:91:10:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:15:9B:EF:E5:B2:F8:91:11:CB:0B:09:DD:FF:D4:AF:5D:01:8D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/12e8f2aa-b31f-343f-ae06-06df3af584f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:11:8b:22:5d:92:cd:24:b0:a5:25:fa:34:f7:c9:17:81:
         e3:12:35:9a:ba:03:96:6a:a4:56:cd:89:0b:46:5f:7b:f4:9e:
         f0:f1:47:e6:3e:cd:7e:cd:e5:3d:f9:65:b6:4f:9c:a4:ba:5b:
         9c:f6:df:90:92:9b:4e:d4:73:91:30:c1:71:71:79:72:e8:1d:
         e2:01:18:65:0f:38:20:d2:53:58:5a:67:12:5c:29:e1:83:eb:
         b6:02:5b:14:7e:0f:d2:d1:ae:fa:f4:d1:1b:28:2a:5e:23:52:
         b6:57:f7:be:11:65:83:6d:24:e9:45:a9:18:9d:00:e1:78:7a:
         17:c5:2f:48:21:ed:7b:4d:d1:af:82:01:68:c6:ce:6d:ad:44:
         bc:28:c3:38:22:44:1d:84:dd:94:98:fd:b9:09:7d:e8:40:a9:
         9b:7f:ca:99:46:9e:a5:08:e5:2d:fa:cb:86:c3:93:49:e6:30:
         50:6b:cb:f2:2f:9f:df:3d:78:d6:4b:f7:3b:be:e2:ac:7e:30:
         d3:2a:ab:c5:42:db:ee:a6:f7:ca:11:0b:b0:3a:93:e7:9e:09:
         b3:8b:98:c7:33:43:57:96:aa:1a:50:8b:0e:b1:64:98:be:58:
         78:c0:59:e1:ef:7a:81:38:49:ff:32:4e:66:d3:58:61:f6:3f:
         e7:76:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:54 2025 by rpki-client