Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa
File:                     c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa (raw, json)
Hash identifier:          BrEYKx0igX+9wucmsxEx6YmH4HkAGEuqRAATdPThQw8=
Subject key identifier:   BA:FE:AA:20:08:90:46:85:D2:CD:0B:61:9D:5E:93:F6:E6:0C:CC:FC
Certificate issuer:       /CN=ac717083-6970-4d32-8573-0bfa89700c9e
Certificate serial:       010D0C9F4328584A03A552F440A04F48EA50C100
Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     802
IP address blocks:        198.96.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:52:f4:40:a0:4f:48:ea:50:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=140652f6-d847-421c-9297-566ed3112d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:e5:df:60:cd:92:d9:af:19:3f:45:6a:db:
                    58:e6:51:38:b6:4a:cb:10:66:a7:2a:fe:72:e3:30:
                    81:31:be:a8:95:7b:61:be:d1:0e:1c:a6:c7:0b:80:
                    f8:b0:d1:80:99:83:a3:84:b6:15:87:1f:20:ab:88:
                    85:bc:07:c3:45:04:44:2d:9a:8c:80:c5:49:92:72:
                    00:c8:c4:dc:a3:2d:87:d2:d2:b5:58:84:b4:d4:2d:
                    72:a6:83:3b:b9:49:60:f8:e4:a9:75:c8:02:b4:d8:
                    6b:64:fc:30:48:c7:19:80:6c:42:41:0e:70:f0:23:
                    99:de:70:38:8d:48:b3:8a:9f:03:d2:37:37:aa:cb:
                    83:0f:bb:73:8f:67:dc:42:d1:cc:b7:63:91:c7:c8:
                    0e:40:0c:16:b6:2e:6a:d5:0c:03:ce:45:0c:fe:ea:
                    47:4f:1d:10:28:68:68:47:eb:cd:58:1b:e7:42:c8:
                    6e:aa:4f:92:21:fe:f1:d1:70:97:68:8a:b5:a0:8f:
                    dc:ea:50:18:c9:b4:eb:99:01:92:5f:85:13:72:1c:
                    e2:a4:a1:85:5f:13:6f:35:06:b5:96:d4:5e:33:34:
                    64:9e:6a:1e:8a:a1:a4:0a:0f:fc:44:47:a7:7f:f0:
                    9e:da:bf:f3:91:bf:20:dc:43:98:9e:55:77:16:e1:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FE:AA:20:08:90:46:85:D2:CD:0B:61:9D:5E:93:F6:E6:0C:CC:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl

            X509v3 Authority Key Identifier:
                keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.96.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ed:b2:d9:39:6e:18:82:03:7b:62:bd:45:98:e0:06:a6:d1:
         d2:c0:e0:64:2e:21:14:19:84:66:4d:1d:11:5a:89:71:44:f2:
         50:1c:34:dc:dd:a7:4b:78:08:95:6f:cf:42:54:73:be:b6:f7:
         5c:89:85:ac:ec:07:b5:e7:f2:83:bc:29:c2:96:3f:a0:d7:c2:
         04:35:ca:cf:c1:ad:d1:e5:a6:0e:e8:dd:85:85:bf:97:30:57:
         67:42:b5:a3:14:2b:f2:62:62:35:95:99:7e:f7:b5:d3:7f:15:
         bd:c8:bf:a0:bf:e8:d3:17:95:aa:52:4e:aa:13:6c:69:4c:41:
         c0:8b:f9:c9:5c:9c:df:b8:cd:ae:15:0b:45:f8:b6:b8:68:0f:
         62:4e:22:40:2e:ed:59:2c:b4:bd:34:46:4b:60:6f:a4:b1:26:
         04:29:2d:8a:bf:3e:54:9e:2b:85:f3:60:15:58:a5:76:31:13:
         7c:56:29:fb:38:04:9d:17:2b:9d:b6:d0:fb:a5:0e:70:79:a1:
         cf:71:17:39:18:d9:21:a9:ad:4a:c8:ba:87:ca:dd:b7:fd:1b:
         71:41:b2:c7:17:73:8c:58:19:2a:c8:a0:82:23:b7:97:1c:96:
         48:f5:d4:b1:f8:c2:df:64:a2:92:36:62:ce:b2:1c:42:f2:39:
         ff:1f:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:39:18 2025 by rpki-client