Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/27ec9a19-a37c-358c-b8fa-3a938442e601.roa
File:                     27ec9a19-a37c-358c-b8fa-3a938442e601.roa (raw, json)
Hash identifier:          R51GyqylBYbtRxZ49Oqn2nvOiuG2y67oC0XCc32qSXg=
Subject key identifier:   DE:11:2D:9D:90:3D:08:40:BD:C2:69:1A:7D:A3:FD:50:D2:11:E0:72
Certificate issuer:       /CN=7c896e91-34f7-429b-808d-10170106cf2e
Certificate serial:       010D0C9F43285849C20A1BA74FE4035C3994B9C0
Authority key identifier: 49:8D:27:EC:73:83:BC:4E:A2:27:25:87:EE:22:9A:DE:9C:6E:CA:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/27ec9a19-a37c-358c-b8fa-3a938442e601.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     53589
IP address blocks:        64.95.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/7c896e91-34f7-429b-808d-10170106cf2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/7c896e91-34f7-429b-808d-10170106cf2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1b:a7:4f:e4:03:5c:39:94:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c896e91-34f7-429b-808d-10170106cf2e
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=5edd8967-431a-443a-b711-1a442429d0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:f0:cb:19:10:9b:91:43:75:59:05:03:b4:
                    bc:99:54:fa:d7:4b:db:73:5b:5c:88:17:0d:31:bc:
                    a6:79:70:be:ea:95:b1:df:58:98:80:58:c3:bd:11:
                    96:eb:c3:9b:c0:64:08:cb:cf:20:6d:40:3b:4b:19:
                    92:70:7f:02:96:e5:3f:4b:79:f3:aa:54:ec:d1:9b:
                    e5:7d:24:55:9c:a1:10:65:05:c6:59:27:e8:4a:10:
                    6c:b7:d2:fa:1c:2b:5b:27:c8:ba:be:af:02:43:2c:
                    bf:f5:dc:ff:4a:b8:f5:ba:87:a0:3b:6e:be:d8:ed:
                    d8:1d:5a:16:75:7e:f0:27:c0:a9:5c:a5:d4:a1:70:
                    63:37:e8:f8:ee:23:56:e9:6d:60:fa:63:84:c3:39:
                    f9:c9:e7:f4:c0:86:d5:df:5f:a7:5a:3e:df:37:db:
                    f1:00:7f:92:31:96:82:d3:cb:b9:1a:5e:d3:33:fd:
                    eb:68:1b:a0:de:04:65:68:3e:35:ac:de:71:fb:b6:
                    a5:ee:50:0b:7b:5e:1a:c6:09:8e:fc:d0:52:da:b5:
                    00:41:75:e4:26:99:e4:69:54:69:1c:93:13:ed:7a:
                    03:91:d8:9f:a6:e2:1f:9d:2c:a6:6f:06:85:63:ef:
                    2f:46:99:d7:06:a4:41:7b:3b:8e:74:8a:1e:b8:8c:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:11:2D:9D:90:3D:08:40:BD:C2:69:1A:7D:A3:FD:50:D2:11:E0:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/27ec9a19-a37c-358c-b8fa-3a938442e601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/7c896e91-34f7-429b-808d-10170106cf2e.crl

            X509v3 Authority Key Identifier:
                keyid:49:8D:27:EC:73:83:BC:4E:A2:27:25:87:EE:22:9A:DE:9C:6E:CA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:17:c3:55:b1:5e:96:6d:c7:2b:e1:fd:c3:ba:2b:d2:d3:30:
         b1:d4:03:76:f2:15:56:fd:ca:52:08:82:0d:32:40:bf:2a:f6:
         b4:0e:58:f3:35:a8:f1:6e:e4:cc:ce:0e:5e:81:f6:77:c9:5d:
         9f:ca:26:10:d2:78:51:3e:25:e6:56:1c:21:ba:1d:9a:b7:0d:
         9e:c0:8f:25:9a:15:ba:9e:6b:b2:19:56:38:43:82:37:f7:d0:
         a8:68:e5:51:44:2a:2e:f4:02:5e:70:5f:9a:ca:c5:91:5e:7c:
         0c:be:0d:1d:fa:df:d1:a9:99:74:2f:7e:aa:a8:24:54:f0:57:
         33:90:40:9f:91:4a:7f:c4:96:4e:81:51:41:b4:67:63:3d:c5:
         97:6b:a1:e4:68:b3:83:a2:0a:ce:ef:7c:dd:8e:13:0b:f1:f3:
         4f:5a:5d:96:50:15:ce:31:e0:5b:a0:cd:49:83:d2:33:d2:e1:
         c5:b1:58:69:4a:0a:7e:89:85:31:50:ca:d2:48:37:a8:57:11:
         65:7c:0f:bf:74:11:d7:f0:15:8d:ec:89:6e:a5:9d:ae:19:b5:
         f3:0b:b4:2a:d1:b3:16:03:90:85:b5:5c:cb:d5:9c:4c:fa:79:
         e8:88:7d:05:04:9a:18:b4:22:a2:40:00:bc:c7:dc:90:33:e3:
         05:1f:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:21:15 2025 by rpki-client