Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa
File:                     e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa (raw, json)
Hash identifier:          XOVqucjmlL8QyTR9B/KOgcSwOL7gVlqUkspyIBNwhvY=
Subject key identifier:   F4:7F:52:77:81:67:44:77:C3:C2:DE:C7:D7:88:AB:3F:46:89:C3:ED
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB410D93CD79B0EBC6AA5100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        96.224.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:0d:93:cd:79:b0:eb:c6:aa:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=47ee7e96-e94e-48ee-a323-44fce8fc849d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:97:8a:3f:6c:9a:9d:25:48:80:2c:79:cf:5a:
                    c5:7f:37:b8:af:62:39:3a:97:eb:41:0e:b0:21:40:
                    4c:38:04:5f:6f:85:92:cb:8c:29:38:cf:0b:34:7d:
                    e4:8e:11:84:fc:63:a8:73:94:cf:a1:48:5d:da:43:
                    0d:58:51:bf:c1:1c:27:c2:b0:91:3b:f9:d3:b1:52:
                    d8:f9:00:c6:c9:3a:49:42:ae:64:c0:9b:6f:71:f4:
                    8a:62:75:8a:08:05:3f:b9:12:0b:1d:14:15:33:bc:
                    24:23:f3:46:59:10:14:5e:ac:8c:87:ff:47:db:db:
                    22:56:e4:b9:24:cd:0e:49:f8:58:2a:c3:43:f1:6d:
                    50:aa:80:17:30:03:64:6b:a8:0e:ac:43:28:d1:13:
                    35:70:26:75:54:b6:2b:97:09:c8:57:48:29:95:d1:
                    f7:d7:61:71:fd:3a:53:5e:fe:72:60:5b:e3:ed:49:
                    c2:6a:8e:7d:61:9d:98:af:8e:63:d3:73:63:38:c8:
                    84:a5:e6:1a:dd:f5:24:db:96:78:81:5c:07:b3:98:
                    1c:35:30:4c:8a:72:c7:c3:7a:db:f1:23:59:d4:8b:
                    ca:68:9e:21:6b:55:5c:25:21:1b:0a:c7:78:37:de:
                    e5:29:e1:57:58:c1:90:dd:d6:46:6f:06:71:d0:b4:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:52:77:81:67:44:77:C3:C2:DE:C7:D7:88:AB:3F:46:89:C3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.224.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e8:04:5a:3b:6c:3e:6a:49:85:0b:f2:36:f4:38:ec:d3:42:
         f9:49:b2:a0:a7:d0:7a:61:af:0d:ce:f1:09:ed:82:c5:8b:58:
         33:eb:66:0c:a5:2c:f6:2a:12:11:d1:59:f1:de:a3:9e:f8:49:
         f7:f8:e0:b6:f3:82:f7:5e:59:df:77:5e:86:ee:71:eb:95:21:
         51:be:cc:4b:dc:d1:27:b8:67:c6:d6:52:1c:0b:80:24:ae:b0:
         66:99:10:e2:2c:89:70:95:12:cc:0a:39:1d:de:e3:d1:be:5e:
         46:35:3d:c5:44:71:a3:36:c2:45:b5:55:3a:eb:70:75:90:e0:
         94:44:16:82:b2:c8:fb:30:07:ff:49:42:b3:4e:b6:e5:e1:76:
         d4:f2:bb:b8:38:30:8c:66:28:24:14:a4:7a:ae:68:0c:1f:8c:
         17:a2:36:ff:ed:51:cb:ed:d4:39:af:a6:a5:f0:b7:b6:87:39:
         42:ef:94:6c:f6:48:9f:76:d0:f8:13:f7:ec:62:d6:de:cd:e1:
         75:de:d7:b0:9e:99:e0:68:83:39:1c:62:50:ce:44:77:df:0c:
         9a:ad:31:d1:93:c6:43:d9:b9:04:b5:d0:2f:22:72:b7:ef:7a:
         b4:8f:57:43:fa:8c:31:48:52:74:49:b2:c5:bf:0f:77:aa:63:
         c0:06:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:33 2025 by rpki-client