Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08502cad-2070-3d0f-bab3-0490ef48bc2a.roa
File:                     08502cad-2070-3d0f-bab3-0490ef48bc2a.roa (raw, json)
Hash identifier:          sbMB/5VdJizi0VZnS4v15Wmjc+g614TBCxdriFLHwXM=
Subject key identifier:   85:DB:98:4C:4D:0C:20:78:81:A1:A2:1A:9D:19:61:B4:63:58:37:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A14658608039E34030CA8C650
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08502cad-2070-3d0f-bab3-0490ef48bc2a.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     35994
IP address blocks:        104.96.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:86:08:03:9e:34:03:0c:a8:c6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=76270bf2-df96-41de-904a-35f786515737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:6e:4e:c5:95:26:03:79:05:c0:cb:f9:ca:
                    e5:ea:1d:fb:d9:4c:ae:df:02:cb:87:1d:f0:ef:61:
                    a7:79:78:eb:e5:b7:48:c0:20:53:61:09:a4:05:07:
                    c5:a4:da:b3:6f:2d:53:35:f3:ec:7e:db:f6:ce:31:
                    34:ff:1f:5b:36:59:22:27:4c:10:c0:98:1b:83:1f:
                    73:87:6e:9f:b1:a1:f7:05:38:e3:b2:40:91:4e:35:
                    58:04:f9:8e:1d:95:ef:64:f6:05:38:6e:42:58:9d:
                    50:0c:b3:d8:ff:3c:fa:7e:9c:b0:b7:14:ed:a4:d4:
                    d4:83:b6:d4:80:18:68:1c:e7:68:c6:a3:73:91:65:
                    72:05:42:e4:80:ba:f4:5b:25:d4:32:ea:77:b5:dc:
                    93:dc:76:c0:d7:8b:f7:a9:cc:86:dd:e1:dd:cc:75:
                    8c:36:82:5e:8c:fb:11:0f:8c:e3:a3:d1:85:dc:8b:
                    89:7a:69:00:a3:c2:24:92:00:2b:77:c1:36:98:68:
                    22:ca:2b:03:b4:17:b0:42:92:07:8c:08:99:e6:f0:
                    e9:f8:57:59:8e:e2:10:e1:30:d6:de:51:e0:22:c9:
                    27:80:91:b1:ef:14:7f:1e:4d:49:b0:ac:74:27:7e:
                    00:df:5e:be:43:c1:3a:28:0b:8a:c8:2e:dc:71:bd:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DB:98:4C:4D:0C:20:78:81:A1:A2:1A:9D:19:61:B4:63:58:37:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08502cad-2070-3d0f-bab3-0490ef48bc2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.96.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:53:2b:73:22:dc:f9:ec:0d:c2:aa:9e:0f:44:b0:73:5d:85:
         09:bb:da:14:8e:32:e0:d3:e8:4d:a8:8f:6d:18:85:fe:a5:80:
         ad:69:b4:a1:2b:7f:94:e2:ed:3a:f0:96:56:94:a2:54:f6:ff:
         1f:27:d2:3b:23:a7:30:af:72:5c:aa:0c:18:d3:b2:51:70:5e:
         b7:37:00:95:e9:31:2e:7a:91:6d:fc:87:62:05:38:d7:16:1d:
         f6:7d:0d:00:4a:ae:27:07:37:42:07:0f:9e:a3:18:02:f0:c4:
         a0:ec:cd:2d:1c:0f:91:96:7b:38:a7:8c:e0:c1:9e:a5:97:fd:
         7a:10:4f:bc:ca:a8:2f:f4:f3:85:cd:fe:75:d1:76:4d:46:50:
         1d:b2:70:5e:b8:e6:12:6b:2f:28:56:a1:9e:d5:3f:ee:6e:96:
         95:54:c3:02:84:8a:ca:35:05:a9:57:ed:1f:37:2e:e2:b4:56:
         1e:cb:c5:79:ef:1e:fb:6c:d2:f9:a9:85:4c:03:90:e7:2e:cc:
         13:a6:4b:6f:90:28:24:48:2e:08:62:9d:83:73:64:aa:b9:53:
         f5:8b:47:33:d8:56:f4:0d:c7:ae:a9:18:3d:84:b7:06:ef:78:
         db:74:b9:fb:9a:b8:b2:f3:de:b8:76:2e:f3:ef:96:88:d2:41:
         97:c8:86:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:41:16 2025 by rpki-client