Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/60fadeec-5e08-33df-be40-ee9ead18b844.roa
File:                     60fadeec-5e08-33df-be40-ee9ead18b844.roa (raw, json)
Hash identifier:          Au/FEr1PFeoRJpm+yY1MHUr+7gtz+w2H/POZ84GIReg=
Subject key identifier:   7B:E7:B2:EA:FA:02:AC:27:E7:C3:5A:85:A5:7E:51:E2:12:4C:A7:42
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F432858492CB21275CE3AF32208546B40
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/60fadeec-5e08-33df-be40-ee9ead18b844.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     396998
IP address blocks:        148.59.74.0/24 maxlen: 24
                          216.126.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:12:75:ce:3a:f3:22:08:54:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=10bcc026-dafa-42b5-b672-f91f7b5e3aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:00:04:cf:1f:a3:01:56:5e:0b:8f:66:2b:4c:
                    66:04:9b:87:8d:3a:f6:81:39:13:39:33:41:bc:ad:
                    12:ff:c2:19:2a:fb:84:b6:8e:2e:ef:b8:9f:5d:6e:
                    6c:ea:75:5d:e8:93:f0:62:17:5f:3b:50:af:7e:a9:
                    bb:ff:3d:92:53:2d:85:ad:05:bc:bf:60:b6:db:84:
                    ba:43:ad:80:28:9c:f7:1d:78:f4:eb:93:eb:b6:2f:
                    78:26:1d:99:ed:30:2b:77:6f:e1:56:bd:46:dc:fd:
                    b1:7e:6d:30:44:cb:58:ab:11:f4:7c:7c:ec:cc:83:
                    e5:c6:53:5c:a1:7b:c9:d7:cf:82:34:51:a3:d7:cc:
                    b4:93:15:0a:3d:59:2f:70:59:ab:c9:00:65:88:cd:
                    db:1c:b1:d3:3f:d9:09:c0:ed:26:fb:ff:be:cc:32:
                    2c:cc:c1:12:54:01:7d:17:29:c0:c7:d4:b2:6c:20:
                    40:76:08:2f:fd:e0:d0:16:c7:b9:b9:82:5f:aa:04:
                    2f:0b:47:43:c8:a2:b8:f0:56:ba:4b:c8:c2:81:9d:
                    df:b0:e3:3a:ea:50:3d:24:39:0c:74:a1:80:2d:ec:
                    f5:b1:0c:3e:66:a0:d7:03:90:38:c0:83:dd:bd:09:
                    07:aa:2e:20:f9:35:87:78:5b:e5:1b:8e:53:a2:52:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E7:B2:EA:FA:02:AC:27:E7:C3:5A:85:A5:7E:51:E2:12:4C:A7:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/60fadeec-5e08-33df-be40-ee9ead18b844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.74.0/24
                  216.126.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:57:42:9c:b5:11:ce:af:19:e5:52:65:a2:97:ec:b0:c6:65:
         5f:7f:33:cf:9b:37:01:2f:dd:10:be:91:b0:48:79:9f:27:5d:
         6f:6a:06:89:17:4c:d0:91:72:77:74:59:bc:28:7b:5a:9c:bc:
         a7:86:38:d3:03:b6:b2:d9:22:d8:8c:11:e9:95:1f:64:a1:1e:
         25:a8:b2:7e:fd:bd:db:56:68:9d:db:f0:ce:ed:f6:1c:d5:fa:
         c6:ce:e2:0b:02:5a:b5:8b:68:54:f3:ae:05:66:60:ba:15:b4:
         2a:1f:b3:cb:af:cb:ad:4d:4d:5a:c4:bd:40:4e:c3:4c:46:ec:
         62:44:b1:81:b6:a9:3e:e6:48:78:81:c2:3b:c1:ca:6b:08:48:
         86:b3:9d:1b:fb:10:e9:01:e2:51:ff:e5:c2:1d:46:5d:08:d1:
         05:f9:6a:9b:7d:50:ee:cf:b4:5a:96:67:7c:14:4e:ab:bf:bb:
         16:76:29:39:03:69:dd:b1:12:f9:1a:a6:5f:77:7d:04:dc:9b:
         ec:3b:fa:c3:af:fa:e3:64:ea:e1:03:4d:80:b7:72:42:2a:00:
         e6:8d:5e:79:0d:c4:07:37:01:19:f3:6d:6f:28:10:2b:8c:27:
         1b:b8:6f:1f:63:4a:32:5d:ec:5b:67:ba:83:bf:30:8e:10:69:
         47:ab:a7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:35:53 2025 by rpki-client