Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7ca04bbe-4c44-3348-a9a7-075a8540d763.roa
File:                     7ca04bbe-4c44-3348-a9a7-075a8540d763.roa (raw, json)
Hash identifier:          o1+B4BjNS5vckrZHdAsv6zXHoTbxhFYKOosED5VDbGI=
Subject key identifier:   AD:5E:BA:C5:B5:5A:C4:B1:5A:6F:D1:AE:10:BE:AA:01:55:18:38:1C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A8B0B5B88E614342464564680
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7ca04bbe-4c44-3348-a9a7-075a8540d763.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     64267
IP address blocks:        152.44.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:5b:88:e6:14:34:24:64:56:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=db04cb64-2c8d-41ec-adf7-e49d81150968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:7a:a4:7d:5e:ee:d1:5e:82:56:5f:ee:d0:
                    79:52:1e:bd:40:3b:1d:32:82:3c:01:b0:2c:16:4e:
                    e6:74:23:ad:5c:b4:25:56:01:0f:e2:51:24:e4:55:
                    50:14:ee:52:84:d6:22:09:f3:bb:21:81:49:89:79:
                    f7:dd:43:a8:78:6f:6d:d6:7b:fa:06:aa:8e:27:53:
                    bd:7b:a4:7a:15:72:65:ed:b4:00:3a:b7:ee:a0:51:
                    8f:fd:85:75:6c:f8:90:96:32:91:9c:c0:c0:83:a4:
                    8f:d6:a8:e0:b0:0a:2c:e4:2c:be:1f:86:6a:5f:91:
                    29:ee:fd:c4:14:ed:c5:6c:11:8b:6b:77:68:9c:f8:
                    65:09:8a:2b:d5:55:bd:4b:d3:94:fe:69:3f:35:bd:
                    29:e8:c2:a2:d6:80:7f:03:53:1c:96:84:22:41:be:
                    dc:39:c6:ec:31:eb:db:84:6e:4b:29:33:51:5b:3d:
                    49:6f:b5:bf:56:eb:2f:31:36:ca:d0:f1:47:83:ee:
                    9e:25:03:b0:11:60:3a:da:87:85:ee:b3:a7:40:3a:
                    da:4f:44:48:06:63:f8:52:f7:5d:ec:4c:0a:bd:be:
                    b7:ce:49:b8:5b:11:0a:c4:f1:63:8c:4c:fe:47:4a:
                    56:5d:5f:ec:d5:05:4f:e2:2c:ce:1b:04:62:31:07:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5E:BA:C5:B5:5A:C4:B1:5A:6F:D1:AE:10:BE:AA:01:55:18:38:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7ca04bbe-4c44-3348-a9a7-075a8540d763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:ed:b8:03:03:c0:76:f0:86:73:cb:69:86:89:83:4c:b5:
         49:86:94:77:7a:35:ba:74:43:4e:b1:3d:82:a0:72:4d:3c:d0:
         d2:45:9d:c9:26:b2:ff:a3:b8:d2:af:e7:7c:85:0c:22:d1:25:
         4b:ca:1a:20:f3:7a:b9:49:ca:8a:5b:38:49:97:c9:1d:e0:7d:
         2a:4a:f2:21:80:94:ec:06:16:18:8d:f7:e7:8b:7a:ca:07:b0:
         f5:44:81:68:36:60:5b:24:c2:b6:8c:27:1e:ae:fa:62:1e:b7:
         b2:45:4e:dc:85:85:7d:cf:ad:4d:10:17:f5:9c:c4:cc:50:c8:
         e2:81:91:f6:56:1c:f0:58:f7:dd:8a:e2:8c:41:be:ba:0a:5a:
         df:d9:6e:fe:6a:53:93:a7:a6:59:57:b0:18:61:27:63:c1:9a:
         02:fe:c6:6e:74:4e:11:07:7e:d8:d2:57:20:53:da:5a:c2:19:
         74:ee:55:e8:61:7a:cf:85:3f:b9:b8:09:d7:7f:35:07:e1:9d:
         32:24:6a:51:aa:ef:1a:5a:1f:3c:ab:fd:20:f0:c2:fa:75:6e:
         65:d2:46:eb:16:7f:10:e2:52:9a:86:a7:c5:57:10:c8:59:88:
         9d:1a:2f:3d:76:7a:54:f5:12:f3:63:d5:b4:73:af:2a:81:39:
         68:5b:ec:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:31:27 2025 by rpki-client