Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f5d8704-202c-3331-9c85-33432e0bc934.roa
File:                     3f5d8704-202c-3331-9c85-33432e0bc934.roa (raw, json)
Hash identifier:          xff5Jd9mhhYvlQo8X30cpAeHKQruDkAeJBOzwQg3Axo=
Subject key identifier:   78:5C:9E:C5:9A:D2:4D:83:09:9D:A1:60:E5:64:FE:B6:63:EE:CA:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A708604279BD72665B54BAC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f5d8704-202c-3331-9c85-33432e0bc934.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     7922
IP address blocks:        96.113.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:04:27:9b:d7:26:65:b5:4b:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=4dbfe07f-eb9b-4e2d-b165-d5bcdcbf498d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:fb:09:e0:2e:05:e2:86:e2:b5:38:b9:64:
                    99:bf:e8:ce:b1:99:81:20:f5:d3:b7:c2:5f:4b:d3:
                    b5:0c:ff:fb:98:e1:d1:7e:8f:3f:f3:60:d1:3d:37:
                    f1:89:8d:b5:47:e6:c9:36:17:83:1c:de:b4:0d:48:
                    54:d3:ca:09:6f:f4:2e:8d:80:e4:72:ec:bf:89:10:
                    96:40:a8:18:b8:72:4f:2e:02:65:12:fc:e4:2d:2e:
                    06:5a:6a:74:af:81:c8:d7:91:c7:4a:01:18:f4:a8:
                    6d:c2:0e:30:dc:05:4e:f8:18:d7:5e:2d:4a:79:c6:
                    8b:6d:fb:8c:9c:4c:3f:89:24:2d:67:e3:9f:ef:77:
                    06:f2:14:ba:56:40:1c:5f:c3:a4:67:d3:4d:35:ce:
                    3f:68:5e:31:c7:1a:5a:81:f5:bd:55:cb:4c:55:d7:
                    74:87:82:78:b0:ce:a1:12:b4:bf:a8:3e:cc:a9:75:
                    b9:d7:75:ac:c2:50:13:97:fa:9d:45:5b:a7:e0:ac:
                    72:07:d9:2f:8c:c9:56:54:15:45:46:ce:a2:52:3b:
                    47:f5:f8:c9:28:3d:3f:94:5b:9f:56:95:39:81:b8:
                    f9:a8:f6:3e:ab:ad:0d:bf:ff:cb:a9:60:6f:dc:75:
                    62:81:d2:3b:1b:db:42:2e:8f:95:b1:2f:41:ff:75:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5C:9E:C5:9A:D2:4D:83:09:9D:A1:60:E5:64:FE:B6:63:EE:CA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f5d8704-202c-3331-9c85-33432e0bc934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.113.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:05:c0:94:f9:27:1b:d4:d7:0e:ab:fd:bc:86:c3:1c:43:9c:
         0a:45:9a:fc:b1:dc:f0:a9:92:4d:54:27:c0:a8:99:6f:1a:f4:
         1b:da:ac:f1:9a:49:5e:8d:53:1b:77:96:b9:bd:2d:65:8e:6a:
         2b:3c:2b:25:a7:65:1a:de:f7:61:4e:53:14:fa:4e:31:c0:fe:
         11:09:6b:bc:c8:06:d7:91:f0:4e:dc:d2:e0:e4:15:2e:5b:06:
         ae:77:10:84:df:11:1b:a2:6a:81:c7:7e:58:91:15:42:92:72:
         72:5d:c2:35:c8:33:3f:87:77:84:2d:4b:72:73:ba:d8:72:f4:
         e1:40:7f:a3:9d:ac:08:89:15:02:8d:6d:c1:27:01:67:dd:b3:
         ba:38:06:00:c7:82:59:35:d6:b5:be:a4:66:d2:5a:0d:bc:98:
         75:bf:c8:c2:25:e6:de:87:82:5a:77:15:13:39:91:2c:da:fa:
         16:2f:d6:bf:d8:5c:17:5c:32:2c:39:d3:1f:dc:4a:af:7a:f3:
         09:1a:bb:86:50:3f:68:8b:92:49:ef:14:54:88:b4:c2:a3:20:
         cd:96:02:63:dc:1a:fc:fa:39:39:50:41:8d:97:96:82:9c:48:
         52:fd:16:c8:80:99:18:bb:57:ca:f6:91:f3:52:82:0a:48:69:
         49:54:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:31:11 2025 by rpki-client