Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bf6d8b97-83a3-3674-9847-8ae051339aa5.roa
File:                     bf6d8b97-83a3-3674-9847-8ae051339aa5.roa (raw, json)
Hash identifier:          BKKkUEIIDJW4LyU7TntPlouWSr9W/lfYGTwURMNQvz8=
Subject key identifier:   F4:A4:E4:8C:3B:C2:C6:FE:69:14:EA:0E:CC:E2:43:F9:B7:D2:71:C2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AC1E52C2F941D988F0B357780
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bf6d8b97-83a3-3674-9847-8ae051339aa5.roa
Signing time:             Tue 05 Aug 2025 16:33:32 +0000
ROA not before:           Tue 05 Aug 2025 16:33:32 +0000
ROA not after:            Mon 03 Nov 2025 17:33:32 +0000
asID:                     23473
IP address blocks:        96.63.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:e5:2c:2f:94:1d:98:8f:0b:35:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 16:33:32 2025 GMT
            Not After : Nov  3 17:33:32 2025 GMT
        Subject: CN=b1b1602c-b206-4a55-81f2-5560524b7c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:42:6f:74:7a:58:d3:2f:24:4a:cf:5f:1a:35:
                    e8:53:7c:65:ac:e0:28:0b:6a:e9:51:6b:bb:95:21:
                    92:e9:c2:f7:4c:24:eb:73:da:95:56:fe:70:01:bd:
                    29:90:60:5c:7a:e6:55:90:65:a0:1b:a7:c2:cc:39:
                    88:55:33:82:4d:27:c0:91:f1:e4:13:94:87:4b:34:
                    e9:0c:c5:b0:f1:f1:3d:01:cf:e8:1c:3e:64:d9:ac:
                    8e:00:61:2d:a8:e7:30:7a:e9:44:6c:00:41:ea:78:
                    c0:d0:25:54:43:72:1f:0c:75:cf:1e:ac:af:5b:15:
                    ec:aa:62:92:45:f8:0a:61:ad:fe:b9:14:7d:cb:de:
                    54:2f:be:c4:24:5a:c7:7d:de:90:4f:af:54:81:e0:
                    41:99:fe:d9:2b:e1:e2:e0:a8:dd:2d:86:ad:6b:c1:
                    b5:f6:5a:75:f8:7d:e1:25:21:62:c5:40:e9:98:60:
                    63:66:ec:19:2a:c2:e8:17:73:5e:d4:ac:6b:99:84:
                    ba:ff:2b:46:03:41:95:fb:76:ec:40:7d:22:a3:a8:
                    c3:18:77:47:79:4a:2d:a6:5c:03:21:56:9d:5a:a5:
                    52:31:fc:0c:4a:fb:ea:56:1d:27:e9:ce:3c:82:7d:
                    45:75:51:04:a2:25:bd:8b:79:be:ab:42:20:fe:97:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:E4:8C:3B:C2:C6:FE:69:14:EA:0E:CC:E2:43:F9:B7:D2:71:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bf6d8b97-83a3-3674-9847-8ae051339aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:9a:7c:89:90:31:f1:d0:57:7e:f7:10:b8:f2:b7:63:51:
         86:95:70:df:f6:15:23:e9:57:69:7f:9f:54:a7:fc:87:b9:8e:
         57:dd:4a:35:c8:ef:5d:ed:93:a3:7f:af:35:4a:16:f2:ea:e7:
         50:bc:0f:6f:4f:f9:1a:d5:f8:d2:9c:fc:3f:d9:f5:6e:f7:e1:
         1b:fd:44:cb:86:38:0c:51:9c:93:7e:c9:f8:dd:06:ae:42:fa:
         2e:c0:40:fa:2a:cb:ab:64:e0:33:01:b3:d2:61:c5:09:e8:3b:
         56:68:c6:74:3b:ab:17:ab:39:ea:2c:b3:e3:6f:a9:d2:43:91:
         72:db:b3:db:5d:e1:26:0d:dc:ae:e5:69:b6:8e:15:2d:a7:c4:
         a7:c1:b7:bc:64:ef:37:57:02:f3:db:7d:1d:5e:37:e1:2c:c2:
         71:40:91:25:91:b4:67:57:30:f1:b2:ac:26:64:cb:49:5a:d6:
         1f:7c:64:16:5b:17:59:bc:8a:25:f7:f2:93:2c:7b:64:75:7c:
         ac:d2:c9:83:dd:21:b9:ab:bb:36:a5:9b:a6:ce:ae:6e:ca:2e:
         95:6d:2e:13:37:48:2f:01:6f:8e:5a:65:b9:23:d0:2b:3d:7c:
         b9:ad:08:94:d6:28:0e:35:02:eb:8f:21:c2:68:29:d1:6c:b4:
         d8:57:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:55:11 2025 by rpki-client