Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/94e01c30-5024-3767-a8f0-c597a56a6988.roa
File:                     94e01c30-5024-3767-a8f0-c597a56a6988.roa (raw, json)
Hash identifier:          u12xtIwW/Lo9SZnYaNIrSrwwbb/PJ9H8Z1JY9oecu3I=
Subject key identifier:   BC:F1:4D:C5:6F:10:5F:1D:D9:B4:22:B0:4C:91:F1:95:16:EA:76:3E
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A612B12FDEF8FE41025C58980
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/94e01c30-5024-3767-a8f0-c597a56a6988.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     22652
IP address blocks:        207.253.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:12:fd:ef:8f:e4:10:25:c5:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=19e5efc4-9180-499d-8515-a78755aaa85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:48:7b:57:c6:fa:75:4c:22:04:21:0c:3f:
                    f4:16:ca:a8:b2:94:2d:e1:43:8d:49:9c:c4:2f:24:
                    7c:3d:b2:4d:db:a7:71:a4:6d:5f:cb:7f:39:dd:c0:
                    7d:7e:f6:d9:2a:65:e1:b0:41:47:b6:a6:20:d3:c0:
                    67:0e:4d:89:78:9d:cd:20:21:e2:13:c2:cd:53:14:
                    e0:98:87:63:46:e7:08:2f:22:47:49:5e:ee:81:d4:
                    0a:7c:2d:c8:4c:ef:ce:34:39:ee:2c:10:7d:8c:07:
                    13:a8:ff:32:c7:11:53:a7:98:26:cb:69:d7:89:de:
                    1f:a2:84:63:ff:b2:c0:8c:af:42:4e:32:e9:23:c5:
                    2f:f6:e5:d6:d8:a1:7a:b3:81:3c:b8:e3:f3:44:6e:
                    8a:f2:07:1e:07:54:25:21:c0:9b:ae:b9:a7:fa:d2:
                    cb:74:e3:7b:42:1d:79:a1:2f:df:5f:12:fe:77:da:
                    a8:cc:22:0d:cc:49:b3:93:8d:fe:ce:6c:5a:f2:53:
                    b3:fc:63:b8:0a:5a:bf:64:55:f4:7e:c5:3d:a0:c9:
                    e1:c5:ab:df:72:fd:7e:8b:3f:76:d1:fd:7a:74:4a:
                    e9:d9:31:d6:27:48:68:c9:76:bb:ec:63:c2:5d:77:
                    4e:b9:e4:6e:0b:7d:25:20:db:33:d7:99:cc:de:23:
                    e3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F1:4D:C5:6F:10:5F:1D:D9:B4:22:B0:4C:91:F1:95:16:EA:76:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/94e01c30-5024-3767-a8f0-c597a56a6988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:68:f5:c7:eb:f3:3d:7d:f7:71:b7:28:a3:29:ea:5d:8e:ae:
         3a:94:c7:52:01:0f:a1:2a:fc:c4:13:f3:85:7c:0d:c2:1e:e9:
         96:a0:1d:f5:db:87:5d:56:f7:96:1e:e0:2c:09:38:ff:4b:f2:
         46:da:6e:74:8a:3d:2f:fe:02:f7:53:38:f4:91:97:3c:eb:c1:
         2a:5e:9d:f4:e6:84:78:ad:67:80:9c:fb:e4:13:01:1b:87:13:
         c3:f8:56:49:e2:fe:f6:49:5f:86:c4:04:3e:e0:09:a0:31:a9:
         3e:75:1c:ec:79:68:4a:a9:f7:bf:6f:ea:bc:05:8b:ca:aa:98:
         02:66:ef:6a:d7:9f:73:58:04:ac:a4:7c:2a:f5:02:01:92:7b:
         30:65:41:29:c7:6a:3e:13:59:8e:98:e6:c7:12:75:8e:92:30:
         74:76:8e:a3:dd:c6:15:3c:92:2a:e9:c8:af:68:c2:19:ad:15:
         a5:cb:d9:9f:d4:d3:9c:7c:9c:e3:4c:1d:58:2b:d4:2b:da:ec:
         dd:c3:71:51:de:9a:19:ef:e8:c4:77:da:88:79:0f:2c:3e:37:
         ad:68:a5:b4:c1:fe:55:22:6b:ce:8f:60:62:46:7f:1b:11:b6:
         7e:6e:aa:a4:e1:b4:91:02:60:30:11:db:7c:59:9a:89:94:76:
         82:69:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:15:16 2025 by rpki-client