Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/13c6b53a-104b-36e7-96f9-31f9849d1099.roa
File:                     13c6b53a-104b-36e7-96f9-31f9849d1099.roa (raw, json)
Hash identifier:          iD/cpvrA0bLOKkF3gxdXaE5qcqamvVmK93+Np3t6iKQ=
Subject key identifier:   F1:7D:06:13:AF:35:B8:6B:94:25:60:B1:0D:77:45:00:51:A2:35:A4
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AA85B995D207314F756A505C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/13c6b53a-104b-36e7-96f9-31f9849d1099.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     23473
IP address blocks:        96.63.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:99:5d:20:73:14:f7:56:a5:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=73c7fb43-1d7f-48ed-8ac9-f027723a4f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:81:dd:f0:b5:7b:f1:62:60:a6:98:58:f5:
                    42:1d:73:26:16:e3:ba:72:5f:63:10:56:cf:58:fd:
                    72:0f:3a:98:ee:38:c4:e7:a2:b9:32:1e:86:a4:ab:
                    61:68:99:de:74:b1:12:28:b1:fc:d8:e2:31:67:7f:
                    2d:c8:ee:b6:9b:ad:4f:94:67:a3:06:4a:d7:16:c6:
                    b8:53:61:d5:4d:4e:87:85:08:62:35:4e:54:ec:19:
                    4c:88:38:e5:d6:18:ab:8f:64:28:81:8f:5e:79:ab:
                    4b:7b:34:12:a9:e5:b6:6f:fa:f6:5a:e0:9b:eb:14:
                    28:2e:28:76:b5:b2:ca:5a:d9:bd:ae:43:15:4c:9d:
                    d1:de:d0:dc:72:63:b6:2d:80:99:3a:c5:fc:d0:51:
                    a2:e1:54:06:0a:1a:8d:35:ab:2f:12:c4:5a:e5:22:
                    39:d4:3a:d0:a6:41:0e:45:9b:4c:ed:a2:b6:df:fa:
                    0e:01:31:41:65:0f:da:f5:1f:c5:96:8b:ec:d5:c0:
                    c2:3e:4d:3e:c2:7f:d6:93:91:f7:56:9f:c0:a1:a2:
                    5d:a1:ff:48:d7:3d:5f:ea:3d:af:2e:ad:41:59:be:
                    35:61:80:93:43:0a:35:01:61:3a:ee:46:1e:5f:b9:
                    15:22:a8:1c:2c:df:d9:24:b6:c2:ba:98:07:56:6c:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7D:06:13:AF:35:B8:6B:94:25:60:B1:0D:77:45:00:51:A2:35:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/13c6b53a-104b-36e7-96f9-31f9849d1099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:c4:a6:3d:90:27:2a:11:5d:22:f3:97:0a:63:c4:00:04:
         a7:f0:cf:9e:ec:73:d3:e9:64:69:22:fa:76:cc:c6:84:7e:92:
         1f:d9:27:65:dd:37:56:0f:96:3c:8d:b1:61:0f:7b:64:b9:36:
         73:ac:d5:61:cb:39:d7:42:1f:e7:ac:f9:9b:01:da:6f:2b:2c:
         05:bb:ae:8c:cb:53:94:b9:b5:79:ee:97:6a:cb:8b:0b:17:4a:
         25:85:13:de:35:d7:b5:40:82:9e:cd:52:79:d5:bc:1c:eb:b6:
         0c:3d:cf:12:c7:ae:19:5f:10:3b:d9:4d:a6:a8:d2:1a:b2:b6:
         e6:a6:0a:b6:2b:37:1b:62:04:e6:33:1f:4e:ab:cb:19:9d:c8:
         77:86:5d:e6:aa:41:cf:3d:74:31:d6:78:73:05:c9:b7:82:e6:
         a2:1c:32:05:40:b3:34:06:85:2e:92:e2:b5:55:52:ac:9a:b1:
         ec:18:cf:7a:c4:cb:66:f5:94:22:92:e0:19:56:e6:50:f5:22:
         ea:17:53:61:5f:4d:aa:d4:92:78:c8:3e:7a:d5:58:bb:16:5a:
         27:dc:0f:bd:0a:e9:7e:0d:ff:d5:16:ff:3a:f7:5d:a0:75:0f:
         59:7d:77:8c:96:f9:3c:b6:71:83:97:df:ef:fd:ba:44:f7:b0:
         1f:e3:38:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:57 2025 by rpki-client