Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/001c5ff9-dc64-3c40-941c-d608964688be.roa
File:                     001c5ff9-dc64-3c40-941c-d608964688be.roa (raw, json)
Hash identifier:          cC5m6n7am2VT9wRWWDbvcSHAVkwDFqMYnf86t2r6Ogg=
Subject key identifier:   89:6F:8A:31:B8:96:DB:58:75:B5:92:9A:FB:A0:2A:19:B7:1B:9D:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FDAE3CA06D6475F396E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/001c5ff9-dc64-3c40-941c-d608964688be.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        96.247.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:da:e3:ca:06:d6:47:5f:39:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=80b30f00-94a7-49ef-8cc7-b3702b83d309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:e7:b6:aa:e8:5e:2e:ab:0a:97:78:a1:64:
                    0c:6c:51:e4:be:0e:61:66:2e:e7:fc:ba:da:47:68:
                    8b:85:2a:aa:d1:94:2c:77:d6:d5:51:27:b8:06:a2:
                    80:e9:3e:58:94:19:bd:ad:42:89:1b:21:a4:2d:72:
                    3b:32:29:8a:6f:8f:ce:3c:d9:b9:56:1d:cc:80:24:
                    77:24:ac:55:82:28:2f:23:44:29:30:42:a6:aa:16:
                    d4:95:6b:9c:b6:76:4a:dc:f5:70:6c:a3:78:72:1d:
                    ec:62:a4:35:6a:c4:08:0b:a0:1d:6d:42:9e:b9:ed:
                    cb:0f:58:f3:e6:d8:64:0c:ef:4e:24:90:06:b7:28:
                    60:d6:73:30:7f:4c:8a:9b:77:28:42:ec:e8:0e:ac:
                    03:81:30:e9:3f:9f:6c:45:a9:3d:2e:8a:fa:b8:66:
                    e8:03:30:c3:89:24:fb:7a:fb:53:c5:88:12:4d:9e:
                    2e:46:26:1c:e0:5a:e9:fe:f4:7d:66:01:82:ef:55:
                    41:34:d0:13:41:b7:d1:61:60:26:58:bf:4a:38:39:
                    02:74:94:db:aa:80:7d:f2:ff:15:3f:b8:b8:b2:21:
                    51:dc:e5:0a:ed:1e:08:d1:4a:7a:e2:9a:b6:1a:cb:
                    9f:16:64:bf:29:4b:95:7b:57:46:f2:6a:44:29:9f:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6F:8A:31:B8:96:DB:58:75:B5:92:9A:FB:A0:2A:19:B7:1B:9D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/001c5ff9-dc64-3c40-941c-d608964688be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.247.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f3:67:67:d1:fd:26:3f:77:28:f2:99:43:67:92:dc:23:dc:
         21:05:27:b8:3a:3c:1a:c3:76:62:ab:a4:fa:5f:0f:2e:4a:ec:
         e9:66:58:c7:89:19:e8:de:11:75:e9:68:25:27:4e:3d:5f:38:
         05:52:cf:98:8e:da:da:79:ad:90:b9:91:dd:81:20:e0:73:3e:
         ea:15:3e:3a:54:9a:14:3e:31:05:5c:56:5e:25:a3:2e:a2:e0:
         43:83:23:af:5f:02:9f:95:43:a8:2e:74:3e:43:ec:14:46:4f:
         33:63:2b:cb:e0:23:d2:6b:f3:f4:1b:f1:d6:04:d1:34:cc:98:
         4b:12:2a:f0:7e:84:06:af:82:33:f1:e0:d8:e4:98:89:90:ff:
         fb:5d:fb:68:67:34:80:fe:a1:4f:9a:61:5b:84:36:1c:86:c1:
         b0:ac:fd:28:e3:13:7b:8a:f0:af:d8:f3:7a:ee:e5:c4:38:ca:
         4f:ac:3b:bd:ca:8b:32:a1:e6:5e:b6:43:c6:82:25:04:52:87:
         7b:80:68:31:11:3a:7d:51:c7:5c:fd:9a:af:32:31:15:45:5a:
         3e:ed:71:c3:45:25:99:09:03:25:05:66:91:83:63:5d:b3:42:
         eb:2a:20:1f:8a:00:4b:17:85:fe:19:9c:d5:b2:c5:c7:48:6c:
         54:8b:31:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9rjygbWR185bgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
ODBiMzBmMDAtOTRhNy00OWVmLThjYzctYjM3MDJiODNkMzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HntqroXi6rCpd4oWQMbFHkvg5hZi7n/Lra
R2iLhSqq0ZQsd9bVUSe4BqKA6T5YlBm9rUKJGyGkLXI7MimKb4/OPNm5Vh3MgCR3
JKxVgigvI0QpMEKmqhbUlWuctnZK3PVwbKN4ch3sYqQ1asQIC6AdbUKeue3LD1jz
5thkDO9OJJAGtyhg1nMwf0yKm3coQuzoDqwDgTDpP59sRak9Lor6uGboAzDDiST7
evtTxYgSTZ4uRiYc4Frp/vR9ZgGC71VBNNATQbfRYWAmWL9KODkCdJTbqoB98v8V
P7i4siFR3OUK7R4I0Up64pq2GsufFmS/KUuVe1dG8mpEKZ9mPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIlvijG4lttYdbWSmvugKhm3G520MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDAxYzVmZjktZGM2NC0z
YzQwLTk0MWMtZDYwODk2NDY4OGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYPeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzzZ2fR/SY/dyjymUNnktwj3CEFJ7g6PBrDdmKrpPpfDy5K7OlmWMeJ
GejeEXXpaCUnTj1fOAVSz5iO2tp5rZC5kd2BIOBzPuoVPjpUmhQ+MQVcVl4loy6i
4EODI69fAp+VQ6gudD5D7BRGTzNjK8vgI9Jr8/Qb8dYE0TTMmEsSKvB+hAavgjPx
4NjkmImQ//td+2hnNID+oU+aYVuENhyGwbCs/SjjE3uK8K/Y83ru5cQ4yk+sO73K
izKh5l62Q8aCJQRSh3uAaDEROn1Rx1z9mq8yMRVFWj7tccNFJZkJAyUFZpGDY12z
QusqIB+KAEsXhf4ZnNWyxcdIbFSLMSU=
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:52:52 2025 by rpki-client