Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc13a3a3-d557-311b-a7c4-052d75a784ae.roa
File:                     bc13a3a3-d557-311b-a7c4-052d75a784ae.roa (raw, json)
Hash identifier:          kazI6gEL5PW48ou8PGrcSgKfrkBfhoN05FMXiXdq/BY=
Subject key identifier:   0B:53:CD:CB:22:8A:50:5B:C7:EC:0D:5B:E1:97:D8:D3:3E:1C:D3:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8527CAB06AD3A653F52550
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc13a3a3-d557-311b-a7c4-052d75a784ae.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        96.238.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:27:ca:b0:6a:d3:a6:53:f5:25:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=c6a6252d-a410-4c51-b5c7-b04199f0f667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:40:5f:e1:7b:5d:04:2d:b8:d5:9d:89:38:5e:
                    11:22:72:d2:15:2b:30:f5:11:00:0a:9e:a1:90:dd:
                    c1:23:33:91:0a:1a:1f:34:db:42:8d:d4:9f:d9:7b:
                    28:5a:71:c7:69:0b:53:40:f1:42:11:02:f2:c5:3d:
                    34:c5:95:5c:d0:ea:26:c6:11:c2:31:c3:be:66:fc:
                    52:4b:f4:d3:5b:90:35:a2:7e:08:36:c6:96:cd:3b:
                    b6:27:08:b9:85:a8:d3:86:f2:79:2f:63:c9:d3:da:
                    92:ba:af:54:d0:6a:ab:5d:56:9a:03:e9:45:b7:3a:
                    c1:e0:06:e4:c8:f9:c4:f5:bb:4e:bc:42:55:4f:f4:
                    bf:50:b7:75:26:52:71:30:5c:5f:a3:92:c3:f6:46:
                    4d:29:e6:d5:10:b8:69:f1:76:64:20:02:9c:29:85:
                    45:c7:75:3b:10:9b:6c:c0:bf:e4:96:b4:c8:17:ac:
                    67:e5:ea:73:88:01:da:18:e3:d2:c0:95:56:4c:57:
                    6d:c6:12:c6:6e:eb:a8:65:27:6a:66:56:96:44:71:
                    fa:f9:4c:ac:5d:e8:b0:5b:88:00:b2:25:a6:c1:ef:
                    d0:d8:38:43:a4:56:cd:12:93:89:64:f5:6e:61:ca:
                    9c:d1:c5:e1:fb:f3:e1:d9:36:4e:c3:29:16:bc:f7:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:CD:CB:22:8A:50:5B:C7:EC:0D:5B:E1:97:D8:D3:3E:1C:D3:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc13a3a3-d557-311b-a7c4-052d75a784ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.238.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:47:f0:eb:84:d1:94:9c:ca:ed:47:8d:c7:3a:df:22:4f:da:
         0c:47:ba:b8:6d:9e:c2:6a:d2:23:c1:d1:29:b6:60:d4:0a:57:
         47:de:81:ff:7d:9c:47:ad:36:45:f7:ca:a2:db:78:e4:23:0d:
         d6:20:b1:77:f8:94:ab:42:99:77:c8:3c:d7:1a:46:5b:b4:07:
         af:08:2d:94:e7:d3:18:e4:b0:6f:e1:48:68:55:79:dc:d5:15:
         ea:19:39:14:d8:f3:71:43:61:3c:dc:ac:98:9b:a2:87:32:9b:
         86:1c:b7:9c:40:e3:b4:8f:57:4c:f7:55:05:a0:fc:f0:25:a0:
         ee:58:24:cd:67:ef:25:56:00:e2:dc:91:ba:42:92:6b:bd:d6:
         d8:04:f9:63:f8:47:10:9b:aa:2e:ef:f3:52:4a:f0:b2:93:df:
         5a:67:c8:bc:f7:7f:35:a6:6b:0a:9e:8d:41:11:99:16:cb:01:
         45:ae:49:48:bf:e0:af:ef:c1:cb:2b:e4:34:57:90:b9:db:60:
         f5:12:b6:26:75:aa:ae:ca:17:38:94:53:87:2e:7e:00:51:9c:
         93:bd:c3:bf:a9:fb:b6:d5:db:97:ec:c5:f8:07:ec:30:53:7c:
         f5:88:f6:86:b8:84:f9:ce:21:8d:c1:c9:36:e7:fd:ad:58:a5:
         62:2c:6e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:51:25 2025 by rpki-client