Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2a799575-489a-377f-8d63-903f7e71c982.roa
File:                     2a799575-489a-377f-8d63-903f7e71c982.roa (raw, json)
Hash identifier:          i5ta2hYWOD/JN3vols5XQZ2p429M+FyGlkLzLPkrBB4=
Subject key identifier:   25:C8:60:43:1D:78:20:D3:BD:C1:CB:ED:53:D7:AF:D3:FF:06:AB:3C
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584971142F1BF88805B355507E40
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2a799575-489a-377f-8d63-903f7e71c982.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     30336
IP address blocks:        207.96.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:2f:1b:f8:88:05:b3:55:50:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=3461cc2f-dcc6-4aeb-b22e-f0cce2bb6fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4a:a2:34:fa:ff:85:f2:21:4a:f7:2e:2e:02:
                    8a:cd:0c:1c:5d:27:b3:e8:fd:83:00:d2:4b:f3:b4:
                    01:f7:68:bf:35:fd:25:40:20:ba:16:bf:fe:e2:10:
                    76:20:d5:bb:6d:b7:ee:c2:39:f3:90:8e:9c:8b:cb:
                    da:31:58:81:b0:89:d4:a1:d9:c9:a3:f6:3e:d1:06:
                    15:8a:98:20:88:1e:6e:5c:48:73:b1:35:63:e4:eb:
                    0a:16:ac:6f:ae:42:a2:be:8f:2d:63:6d:5b:31:c8:
                    a0:01:23:3b:57:c5:ae:26:83:5f:08:d5:cd:0f:06:
                    75:0f:09:da:1b:20:7f:e4:69:34:38:d9:11:39:89:
                    2b:ed:95:ca:79:74:68:43:07:87:40:0d:60:f0:17:
                    25:e7:ad:79:8d:a7:6c:6a:ec:be:34:ed:b3:9a:7a:
                    7b:2a:d9:0d:61:f9:fd:cb:3e:4d:4d:3c:3e:82:e1:
                    55:18:42:83:e2:53:02:47:3b:18:5e:5f:cc:a6:22:
                    f1:d5:4a:19:2a:10:49:8f:5b:4f:1c:f3:71:ad:d6:
                    fc:c9:13:e7:c1:6f:e9:dc:18:58:58:e3:32:af:3a:
                    19:ad:0b:62:3b:8d:95:d0:b8:65:aa:b0:12:fa:48:
                    ee:50:44:bc:0d:99:0d:5d:0d:3c:40:c6:6e:6b:13:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:60:43:1D:78:20:D3:BD:C1:CB:ED:53:D7:AF:D3:FF:06:AB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2a799575-489a-377f-8d63-903f7e71c982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:b7:f3:d9:ed:10:a6:ad:ea:bf:45:05:e0:fb:8b:38:13:
         f5:18:a8:2d:79:d7:3b:61:f4:44:72:cd:dd:17:d6:d7:23:d5:
         7a:13:21:f6:57:91:b5:9c:d7:aa:ea:3a:dd:d5:28:2c:c6:e4:
         37:a0:51:76:3c:7b:6e:9b:00:75:6a:65:72:1f:ed:bc:6f:c2:
         06:b8:a8:5d:6c:85:cb:d6:fc:0a:65:24:7f:03:b3:04:ff:d7:
         38:a5:ff:48:43:e5:cc:c4:b0:ac:08:3b:38:d1:13:3b:b9:ae:
         c3:26:29:74:c5:94:18:cb:50:48:40:b8:44:5e:9d:34:b0:1d:
         35:38:48:ac:d7:b6:98:7e:a6:dc:41:e8:67:99:ee:2f:17:68:
         e2:1a:ea:71:f7:4b:b7:06:9d:14:c8:77:b5:e0:98:eb:43:15:
         ce:f3:2b:6e:40:d1:15:49:5c:ed:cf:d0:f7:8b:45:7b:09:a5:
         16:be:48:16:f9:a6:dc:86:af:b7:e7:fd:2d:f5:31:9c:21:72:
         cf:68:3d:ff:83:5b:a6:6e:6b:0d:3a:a7:76:19:c2:27:fd:51:
         db:4a:fe:54:39:cc:ab:77:39:40:c2:89:35:c4:18:87:a3:29:
         a7:2d:c4:25:6b:0c:85:47:4b:e2:b7:6f:e0:68:c6:fa:d7:62:
         1c:02:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:11 2025 by rpki-client