Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa
File:                     c6f25adc-65f3-3187-9117-8c56465b1980.roa (raw, json)
Hash identifier:          wtkrHe5wh2+8e4CgoSPQ/7MvyheIvS+FC9NdCC6XfcI=
Subject key identifier:   7E:7C:A3:23:FF:9C:A7:BF:04:BE:BF:BB:24:05:9B:89:B6:CA:A9:9B
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584A374AC5FD4ED7A77E8D2B0800
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     395540
IP address blocks:        96.8.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c5:fd:4e:d7:a7:7e:8d:2b:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=5c987da2-4d5d-45c7-b5cd-b6a1b866f748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:02:94:e6:68:54:8f:6b:86:47:a9:6f:58:
                    0d:c1:ed:31:97:09:1e:1e:9b:84:29:60:78:a3:ad:
                    4d:3d:04:f7:06:9f:40:d2:bb:fa:5b:6f:4f:c0:ba:
                    2b:26:1d:8c:dd:93:db:5a:8a:b0:94:db:a9:9f:db:
                    c0:6c:87:cc:96:1a:c3:19:00:fc:1b:b9:4e:50:b0:
                    c8:6d:81:41:8f:2c:17:6a:c7:ef:79:f2:c7:e8:74:
                    2d:25:d8:b2:1f:c3:f8:fc:20:ea:01:29:1e:be:c8:
                    49:5e:d8:41:30:3e:05:da:9f:18:c1:25:1d:bc:30:
                    4a:a6:9b:41:96:59:9c:84:bf:db:33:62:23:01:97:
                    7c:44:6b:e0:23:53:54:c2:a2:53:99:23:a5:32:14:
                    b7:97:1e:bf:25:8d:a9:76:3f:7a:32:3c:6c:f7:9e:
                    09:2f:5b:a5:60:e4:2b:91:46:6b:bd:d8:2d:a1:e4:
                    dc:68:ea:3d:97:b2:ec:69:7f:9d:c7:24:e0:8d:58:
                    cf:21:d1:cd:c0:60:ba:51:11:14:ca:42:35:82:ad:
                    e0:d7:f0:aa:08:2e:f3:25:d8:47:c4:d0:02:f4:36:
                    35:ec:b7:90:09:8e:a5:95:73:e3:3f:1e:8c:74:ca:
                    20:82:6a:19:1b:96:3c:f9:a6:e7:76:ca:0f:1b:4c:
                    8b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:A3:23:FF:9C:A7:BF:04:BE:BF:BB:24:05:9B:89:B6:CA:A9:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/c6f25adc-65f3-3187-9117-8c56465b1980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.8.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:ef:1d:1e:c4:d9:b5:9e:3c:7f:fc:2b:fc:63:6a:3c:64:
         52:98:b6:f8:17:9d:a2:81:93:55:cc:30:f0:b8:9b:e7:d5:ba:
         2b:7b:74:ba:64:6f:00:9b:50:61:33:1d:21:2f:cc:b2:b0:d1:
         74:66:f2:52:0f:f2:87:7b:9b:d5:b2:1a:50:5b:23:1e:33:37:
         75:c8:fd:59:72:ae:63:e3:5d:d9:4c:98:f3:d0:0f:15:37:2e:
         ad:51:a7:b7:31:2e:1d:07:c4:e4:7c:9f:4e:e0:db:ab:15:48:
         9a:c6:fa:d8:f2:cf:df:31:76:9b:06:bb:c0:f6:f3:78:02:ab:
         3d:82:6e:24:6d:3e:40:f0:09:d7:ba:dc:f8:0a:70:54:c9:8a:
         7b:06:a8:fd:ea:82:22:36:34:4b:fa:19:a0:cf:1b:40:13:ad:
         9b:10:fd:64:84:c2:d8:b5:c3:15:4c:e6:09:b2:e4:24:5e:00:
         6f:8e:c9:83:93:f2:57:04:30:90:3d:03:d4:d0:b2:1f:ee:2b:
         4d:0d:0f:bd:76:bc:05:bc:23:94:c5:af:b7:9a:2b:21:c4:f8:
         b4:75:5c:f4:a2:b9:55:e8:d8:ed:cc:59:13:30:bc:b3:4f:59:
         81:0b:9a:d6:7d:2f:e0:8f:28:20:9e:21:93:cb:a1:53:c4:e9:
         9f:06:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:41:12 2025 by rpki-client