Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b119e782-ce68-30c7-ab5c-e35dc9b8567b.roa
File:                     b119e782-ce68-30c7-ab5c-e35dc9b8567b.roa (raw, json)
Hash identifier:          1xZ0tRT1wtWfd8+ZRo78EzbLO7VtOY55WZCvDdZywOc=
Subject key identifier:   BD:46:74:69:CD:CE:E3:AE:ED:4B:47:81:B9:85:16:17:18:A2:34:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203CBBCB280C081771FEC200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b119e782-ce68-30c7-ab5c-e35dc9b8567b.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        76.97.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:bb:cb:28:0c:08:17:71:fe:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=e2364386-66a3-4cd8-bde7-6d510a089281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:96:9b:93:67:6a:52:f8:0c:6a:8e:41:84:af:
                    01:0d:2a:a6:71:b0:fd:7f:b9:d4:5b:9e:1d:3b:88:
                    16:1a:a9:cd:ae:9e:10:6a:86:46:f6:40:d8:77:46:
                    82:0c:d7:43:ac:3e:0c:72:c7:7c:f8:99:67:af:85:
                    02:20:e5:1a:5f:0f:c6:cc:ee:3d:07:bb:06:92:78:
                    47:ef:a7:59:d3:d8:9f:ee:8d:96:25:a1:8f:e0:9a:
                    8c:bb:87:d8:b0:66:e0:2a:93:dc:cb:11:65:e1:e1:
                    4f:e5:04:0c:de:8b:77:d8:84:bb:7a:2d:ed:fe:a4:
                    3f:54:84:08:89:ae:f6:d4:1f:5f:61:4f:c7:27:b1:
                    6c:15:6f:c9:f9:ba:0d:10:dd:19:a0:dc:95:95:cb:
                    c8:e5:bc:44:9e:ad:69:3e:18:24:25:62:b0:2d:8b:
                    c9:a6:f6:8b:d6:37:d5:89:39:d2:24:a8:c2:3d:d6:
                    ee:d6:be:f1:2a:a1:6d:87:f8:f7:3e:69:10:20:b3:
                    6a:23:c5:2a:d3:8c:80:bb:40:e3:e0:ae:de:c7:76:
                    84:d4:1f:d8:a8:c8:d0:08:ed:ff:05:8f:13:98:e5:
                    fa:03:f1:be:a5:51:b2:46:1e:b4:14:5a:d8:5b:4b:
                    ce:56:40:e1:07:64:b3:c1:6f:be:b2:c3:2c:d2:b0:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:46:74:69:CD:CE:E3:AE:ED:4B:47:81:B9:85:16:17:18:A2:34:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b119e782-ce68-30c7-ab5c-e35dc9b8567b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.97.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:e6:09:b4:b0:19:bd:a7:09:d2:18:97:f5:7f:38:a9:1e:03:
         a5:2b:c3:8c:e0:a6:4a:e7:81:0e:06:d6:d2:1a:eb:e1:19:c7:
         d2:b2:6e:c2:53:41:00:2d:99:97:52:13:69:a5:5a:21:bc:7b:
         de:7e:2d:73:37:cc:77:fc:89:9d:55:a4:69:f1:f3:5d:f4:c3:
         43:d0:3e:4a:5c:74:5f:46:c2:b4:4b:c5:3d:2d:e1:07:db:d7:
         ea:b9:13:d3:7e:32:50:dc:a8:ea:12:a2:be:0c:d1:7a:0f:65:
         ce:d1:ca:5e:88:4b:87:75:50:1a:6b:22:b6:4f:03:76:36:e5:
         2e:a8:94:3f:a1:38:0e:aa:83:84:8e:c5:f9:b7:f7:15:3e:4a:
         c5:30:52:59:fc:bd:77:5e:58:37:b9:d3:c0:58:87:49:49:bb:
         e1:da:e2:b7:48:f8:c3:c2:7c:56:a0:ef:d0:70:c0:e2:57:a7:
         4b:0e:03:41:f9:cc:61:5f:c7:7b:11:b4:79:06:c9:86:42:49:
         cd:46:3b:31:ca:08:0f:d2:40:7c:ea:09:db:df:01:bd:58:a6:
         2f:a9:ee:98:5a:e2:36:ed:ff:b3:7f:dc:1d:8b:0a:db:5b:1e:
         e5:b5:0f:64:b0:80:8f:30:da:79:ad:25:82:a6:67:83:a4:79:
         00:52:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:06:51 2025 by rpki-client