Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/41ce5b52-0ccd-3f1c-93df-6ad3d2562389.roa
File:                     41ce5b52-0ccd-3f1c-93df-6ad3d2562389.roa (raw, json)
Hash identifier:          tp+yM+n7au+zgmEMlZzqB4c6QQU3JzTWaDrL65CiQUQ=
Subject key identifier:   B6:F4:C8:9C:4F:1E:9F:99:94:9D:96:D8:EE:FF:19:65:FD:DC:CB:1F
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B3126EB7092E13C64E829E8C0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/41ce5b52-0ccd-3f1c-93df-6ad3d2562389.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     22652
IP address blocks:        207.96.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:eb:70:92:e1:3c:64:e8:29:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=1bcda2bf-3ebe-4f3c-90b0-bb6f7bc87d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:30:f9:41:eb:14:03:ed:4f:f7:c4:66:d5:b8:
                    c2:18:8e:00:6b:55:df:98:31:f6:6a:c5:b7:4a:11:
                    59:da:16:0e:23:96:ad:2c:c1:bd:61:b0:e5:99:9d:
                    7b:b2:d9:bb:03:64:36:7d:9a:af:8b:85:c9:86:dc:
                    f2:3c:93:43:25:b2:64:79:07:c2:d8:ac:8a:d9:57:
                    be:fc:fd:e5:d7:b3:64:38:06:bd:3e:b6:fb:f2:35:
                    f2:ab:c6:de:89:f9:31:3e:a7:73:9d:19:ab:c2:70:
                    ac:20:ad:02:f4:d6:9a:46:bf:10:da:35:0e:c0:1d:
                    80:f1:16:4b:30:61:5c:47:94:a3:c7:0f:f9:3e:0e:
                    22:4f:cf:d5:15:19:19:5d:c8:23:68:1d:f4:b9:28:
                    88:0b:3e:23:e8:1a:00:f9:b9:3c:0a:4b:f2:6d:d4:
                    f2:c6:23:ef:65:96:a3:d9:c8:d0:62:22:98:4f:8e:
                    df:f4:3f:c2:fb:a4:5a:0c:3e:22:b1:df:d5:9e:a1:
                    e9:7c:53:5a:84:a5:5d:8d:7a:1c:1d:d4:20:df:a1:
                    3e:18:3a:df:11:a2:fa:fc:57:70:39:0e:7d:2e:f5:
                    4b:ee:ad:5c:88:b3:5f:61:f9:81:ee:db:72:5f:b8:
                    84:93:59:ed:bd:33:97:f5:db:b0:a0:4c:b6:0e:86:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:C8:9C:4F:1E:9F:99:94:9D:96:D8:EE:FF:19:65:FD:DC:CB:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/41ce5b52-0ccd-3f1c-93df-6ad3d2562389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:22:d4:af:22:bb:56:b9:df:20:7b:d0:de:22:48:d7:26:86:
         80:4e:7e:55:eb:37:2a:cc:17:ea:f4:24:d6:6f:c0:df:52:e5:
         8f:e0:46:3c:52:52:14:66:bd:c3:93:b1:71:54:61:ad:9d:f5:
         4c:f2:3a:72:e1:62:17:c2:99:c2:1a:70:a6:f2:1c:fe:70:0e:
         a0:b0:0e:de:01:61:5e:d7:ce:33:bb:84:2f:40:cd:2d:69:6a:
         1a:e1:bd:7f:99:59:d1:ca:52:73:41:2e:0d:cb:7c:bb:6c:29:
         2b:c1:ee:b2:71:bc:f9:5c:bf:1c:d4:a7:49:70:88:14:88:c2:
         a7:c6:f5:8c:f2:e6:1a:4b:17:78:71:08:1e:a6:15:53:08:bd:
         b4:fc:3b:19:22:69:80:2e:5c:02:b5:c2:b9:69:54:0a:29:fc:
         0d:05:b8:3d:20:db:12:da:78:15:ea:bd:90:16:86:ff:c6:53:
         4c:9f:a5:0f:67:e9:cc:84:1d:d2:22:c4:2e:89:2a:41:03:05:
         17:fe:5d:9d:1d:8f:fe:ac:fc:d4:bb:b4:a3:c1:cc:48:d0:0b:
         e7:97:e6:0c:50:29:e4:6f:bb:e2:b7:e5:18:78:77:9e:2c:9e:
         78:06:ad:f0:7d:84:63:69:97:46:0f:f5:ed:df:15:d3:15:2b:
         6c:64:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:00:24 2025 by rpki-client