Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/1924e72a-89b0-3928-9bc9-8560751d644a.roa
File:                     1924e72a-89b0-3928-9bc9-8560751d644a.roa (raw, json)
Hash identifier:          5McB7yv0Dn8rwf/WWRYvBCTQL4fo5ThSZKvnGbZhfWs=
Subject key identifier:   9B:43:A7:EE:8F:AC:50:AC:B1:2B:84:BB:86:11:16:46:51:BE:65:C2
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285848E16BD32B2DCE34D70BD3D880
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/1924e72a-89b0-3928-9bc9-8560751d644a.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        96.9.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d3:2b:2d:ce:34:d7:0b:d3:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=e41df2bc-e6fe-46e6-aa98-5ee360dcb8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:8b:ed:ea:ef:67:9e:0f:6b:c9:4b:ad:57:
                    cc:65:dc:db:c5:14:7e:a4:75:ab:17:09:26:0f:3d:
                    e5:a0:23:e4:e4:00:ec:88:4e:cf:d4:16:68:4f:73:
                    bc:fb:a7:e7:32:72:b3:81:2d:9c:1e:c0:db:da:a2:
                    a8:5c:b7:f0:21:79:d8:99:35:23:27:e1:a3:2d:20:
                    41:7a:6a:d0:12:52:68:8c:13:b8:f9:dc:cd:f6:bb:
                    96:36:b3:90:5f:70:b8:8c:14:47:3a:86:dd:fa:17:
                    ef:60:ef:0e:dc:77:60:c3:88:39:06:27:12:84:34:
                    b3:0f:db:62:9c:18:36:07:fb:c6:23:8c:de:cd:d1:
                    03:4a:f9:91:44:37:5b:a0:b9:c5:3f:a4:e6:34:73:
                    7b:43:ea:6f:df:92:ad:6a:08:a7:ac:01:be:48:45:
                    ad:73:52:41:1c:e3:47:e9:ca:03:ce:33:68:41:4b:
                    10:fe:0e:db:0b:c9:8a:9a:39:a6:bd:96:bc:d8:f8:
                    ee:15:ee:4b:3c:d8:2d:e7:ac:69:63:10:df:56:a2:
                    63:a0:ad:e4:c8:f4:92:85:37:61:6a:cc:0d:da:2d:
                    d0:d0:46:8d:55:7d:c9:3d:9e:cd:24:11:77:bf:98:
                    d2:b7:3d:ec:71:5f:e7:91:11:8b:82:5d:18:32:fc:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:A7:EE:8F:AC:50:AC:B1:2B:84:BB:86:11:16:46:51:BE:65:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/1924e72a-89b0-3928-9bc9-8560751d644a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:0b:fa:db:97:24:ee:ce:c8:b2:64:fa:95:ac:5e:c8:2b:
         8b:69:87:3a:25:af:86:1c:a1:31:bf:35:fb:cf:be:f9:2f:eb:
         00:4d:1a:c2:e6:ae:59:90:82:25:f6:dc:cf:8a:db:ee:2f:8f:
         b1:be:30:e2:2e:33:a1:9c:88:0d:90:4f:f4:92:c8:a2:f0:92:
         26:09:2a:e0:f2:c8:9b:43:8d:3e:67:fd:3e:3c:db:e9:0e:9a:
         10:84:24:1b:dc:6b:4c:a4:47:24:13:3b:d0:8f:9d:15:47:c2:
         26:b0:2c:6b:bc:ea:15:8f:4a:9b:85:86:73:0b:b7:04:bf:62:
         1c:ca:2f:d1:62:93:9b:9c:7e:8d:c2:ac:cc:2d:71:90:60:90:
         26:eb:35:07:23:a5:91:33:ff:2e:9f:12:89:4c:6d:a5:bb:04:
         87:50:b0:9a:97:5d:2f:d8:1c:d4:89:13:7c:81:58:9a:79:eb:
         7c:f6:37:42:4d:34:b8:58:aa:4a:66:bc:17:5a:54:42:7d:d3:
         fa:44:ef:55:a8:d2:da:42:b1:ae:85:90:c8:84:f7:fd:8e:fb:
         d3:32:8c:a9:ba:b6:34:65:05:0f:5e:a2:20:3a:b3:fa:e6:b1:
         f0:13:f8:1a:ba:70:c6:a1:40:78:78:03:ce:bb:47:7a:a9:43:
         6b:59:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:40 2025 by rpki-client