Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa
File:                     098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa (raw, json)
Hash identifier:          EnQ/BLgmB7pyN61C6GP+UJ4oWlj6FDCU2DnSmIgOPOQ=
Subject key identifier:   68:99:37:FB:1C:7F:DA:02:AB:70:BF:C8:47:17:D8:14:D4:F5:4B:B8
Certificate issuer:       /CN=ba584605-7948-4c75-be73-29a89eca8940
Certificate serial:       010D0C9F43285848E0065086A5B510A9D4F35BC0
Authority key identifier: EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     399315
IP address blocks:        139.102.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:50:86:a5:b5:10:a9:d4:f3:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba584605-7948-4c75-be73-29a89eca8940
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=c242facb-48d0-4b22-918b-655ddafef3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:8c:25:71:d0:31:6f:2b:6b:3a:0a:87:fd:
                    e0:aa:df:bb:b9:ff:25:73:22:a0:70:ee:24:46:5a:
                    50:d3:6f:09:f8:29:e0:a2:c5:d4:2a:b5:6a:42:0b:
                    81:1f:d6:f0:a2:42:25:c7:33:e2:95:14:c1:d6:73:
                    8a:7b:66:a9:04:44:1f:37:17:9a:2a:d3:90:47:6d:
                    19:ab:0a:be:40:f3:cb:98:fa:af:fe:84:53:ab:66:
                    fb:97:8c:c4:f7:df:4d:2a:47:0c:fd:28:7f:5d:d0:
                    9c:aa:90:ad:3b:56:59:10:de:f2:f6:6f:7e:7f:28:
                    a4:ce:73:54:3f:ba:48:ce:4d:13:c8:ba:a2:50:d9:
                    a4:86:4d:25:6d:0a:81:83:35:72:57:4e:a8:5a:4b:
                    55:f1:9c:42:81:e6:ef:eb:a4:c0:c9:c2:2a:55:a4:
                    7f:f9:e6:14:7d:dc:91:79:cc:e5:b5:fb:7b:34:49:
                    f4:d8:eb:e5:79:03:f6:8a:64:29:c9:9f:87:d6:04:
                    9c:51:b9:79:4d:2b:79:4a:81:dc:f7:ea:c0:58:76:
                    3a:8a:41:ae:f6:f8:70:14:17:3a:14:7c:5d:62:69:
                    e1:ab:14:b5:d2:8f:3b:e0:aa:98:67:73:0e:df:cb:
                    db:63:9a:89:ec:44:48:62:76:af:3c:54:0e:9a:ea:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:99:37:FB:1C:7F:DA:02:AB:70:BF:C8:47:17:D8:14:D4:F5:4B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl

            X509v3 Authority Key Identifier:
                keyid:EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.102.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:4f:c9:a8:22:2d:3e:96:b3:00:f9:ae:3f:44:2d:15:5a:b9:
         fe:ee:de:f2:3a:8f:4a:c1:bc:6c:0f:ad:c7:66:23:9b:21:4b:
         cc:57:c2:48:3c:af:52:d4:4b:c9:80:13:44:cb:33:24:74:ac:
         6a:6e:d9:c4:01:56:fd:37:a6:52:39:db:ce:d8:c5:a7:fa:39:
         32:80:d7:35:73:9e:3d:0b:5b:70:93:a9:d5:95:0f:59:9c:26:
         eb:3e:3e:96:48:4d:64:39:4d:3d:6f:24:f9:9f:93:cc:69:db:
         dc:7a:b7:22:7b:d8:d2:9c:3c:15:c4:d1:23:f7:85:90:7f:5b:
         ec:72:80:ca:7e:ee:7f:a7:dd:05:f1:39:b1:9f:d1:ce:71:c5:
         bc:f2:4a:70:e8:60:50:a7:06:0b:9b:93:b2:79:a4:51:8f:35:
         60:89:81:72:61:16:0f:fd:c2:39:e8:f6:c4:b7:43:bc:22:57:
         b3:c1:09:40:31:d4:17:02:d4:a0:af:a7:52:89:53:0a:08:3e:
         01:56:74:2c:9a:04:18:d1:8c:ab:ee:bd:d4:4c:d1:06:a3:f9:
         27:90:41:87:56:30:69:89:00:9b:7c:5a:2b:84:a4:17:6f:3d:
         a8:b2:d7:38:86:31:b5:c6:95:65:58:82:b9:2e:21:7d:3b:71:
         65:d4:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:43 2025 by rpki-client