Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6253032c-ea62-3976-b4c4-df1f90e5e677.roa
File:                     6253032c-ea62-3976-b4c4-df1f90e5e677.roa (raw, json)
Hash identifier:          q7ehEznhK1pvzEy/4Z/hev97mOgCwo/qvLq82FTfzDQ=
Subject key identifier:   07:B8:B3:E6:A1:08:55:1B:CA:08:FF:86:99:EC:75:74:BB:A0:A3:5C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849674EF88708D1A2B155A15470
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6253032c-ea62-3976-b4c4-df1f90e5e677.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     7018
IP address blocks:        172.96.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f8:87:08:d1:a2:b1:55:a1:54:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=9bd25e85-0a03-40a6-ad05-3070d1a18fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:75:f9:7c:00:33:6b:cc:ba:19:8e:22:21:
                    9d:ca:6e:d6:26:30:bd:2f:88:f4:54:8f:ec:5e:08:
                    b5:83:46:e1:77:33:5d:47:35:66:85:35:08:dd:ca:
                    c8:92:25:a1:57:e6:6b:41:3e:5e:0b:25:12:77:ee:
                    f3:18:c3:5e:4c:dc:a0:94:17:e2:6a:c7:a5:98:39:
                    4f:12:fa:3c:b5:54:0c:54:f1:92:eb:da:c3:29:ca:
                    ac:30:52:72:73:9b:1f:a9:1a:42:da:32:df:5c:9e:
                    d4:c6:b4:23:4e:f8:67:03:27:5a:5c:8b:4d:19:45:
                    ec:9f:f9:ac:a8:7d:10:d8:80:d2:a6:00:2a:79:68:
                    b3:f6:38:cf:da:1e:1f:0c:20:47:1f:cd:6c:93:f2:
                    71:bb:19:3e:c8:af:c8:f8:2d:63:ef:28:7c:70:da:
                    41:1e:11:45:4f:cc:6f:58:b9:5b:04:d4:e0:c9:27:
                    56:25:51:19:5a:16:5a:e3:54:73:22:9a:52:c6:a2:
                    c8:d6:ba:59:a6:14:4e:8e:d3:14:49:1f:63:10:f1:
                    00:8a:d6:df:7f:78:2c:69:ea:2b:f7:40:ec:e0:62:
                    2b:49:f2:4e:4f:69:de:61:59:d7:d6:a9:9a:0f:0e:
                    02:67:15:00:90:5e:cc:4c:cc:2f:34:f6:24:5b:1e:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B8:B3:E6:A1:08:55:1B:CA:08:FF:86:99:EC:75:74:BB:A0:A3:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6253032c-ea62-3976-b4c4-df1f90e5e677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8b:e4:bf:aa:ab:0a:5f:44:93:5b:0c:8b:82:d0:13:d9:36:
         52:5e:a8:9c:1d:50:95:2b:d6:61:fc:9a:f9:b3:bd:2a:57:9d:
         14:d9:d6:ed:4a:4b:cd:3b:13:45:4d:db:8e:9f:6b:d1:c0:b8:
         cb:52:77:41:99:1c:02:b2:ee:60:36:5a:23:32:19:b6:15:37:
         f0:e7:f0:d2:2b:fa:a8:8a:14:c7:68:b9:a0:78:aa:17:4f:4e:
         03:76:f5:49:c7:36:65:79:c8:80:60:76:84:61:d3:7a:ce:49:
         69:3c:ae:12:d1:d6:53:48:99:cd:6f:54:01:ae:4a:ce:59:d2:
         ed:c9:da:cf:72:f0:73:f2:64:69:73:c0:b5:58:3e:65:d9:3b:
         6a:6a:5e:95:69:6c:78:9e:86:42:36:62:00:9c:00:43:b5:15:
         ea:63:10:64:d9:b0:e8:fb:c8:ff:d7:85:60:ad:19:55:96:30:
         cf:1d:f5:10:17:50:c5:5a:c0:d0:41:2f:5e:34:d9:2a:15:ed:
         59:1d:e9:d8:7a:76:2b:76:c6:b3:fd:ed:35:17:39:c0:f3:84:
         dc:d3:bb:af:6e:da:ce:3f:0e:d9:62:72:e2:6c:a8:3d:d1:85:
         d5:16:0d:84:4c:12:8a:d4:3c:98:ed:d8:48:7f:4d:a5:02:41:
         1b:bc:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:15 2025 by rpki-client