Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4855b6db-ae43-3a99-b0bd-7e24da50e500.roa
File:                     4855b6db-ae43-3a99-b0bd-7e24da50e500.roa (raw, json)
Hash identifier:          l3meR7yFC/BSxQ63iwQ8j3stlcrmIYeKH9AnerKlg30=
Subject key identifier:   A9:F2:D1:41:64:94:F5:F2:0B:AA:6C:C9:B3:DC:14:0B:DD:03:57:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A10353AE7D0B523FC57C84B1C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4855b6db-ae43-3a99-b0bd-7e24da50e500.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     32787
IP address blocks:        96.6.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:3a:e7:d0:b5:23:fc:57:c8:4b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=6e9cd98f-4117-498c-b0d4-6ba2879a6a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:ba:74:7b:9b:a7:ee:08:85:47:f2:eb:13:
                    9e:13:27:c2:e7:c6:cd:a8:be:e8:d5:14:12:59:d0:
                    b6:3e:5e:e2:b4:84:65:5f:d2:c4:c5:95:99:84:e4:
                    42:dd:e1:5c:92:0b:c4:ed:fe:a3:94:67:27:7b:74:
                    c7:90:42:dc:64:c1:e0:dd:e4:a9:87:50:35:33:32:
                    77:37:0f:f4:b7:93:1c:da:a4:86:78:3f:1a:7f:be:
                    df:6d:2e:28:a5:ad:cb:ce:4b:13:36:67:18:f5:bc:
                    f8:cf:e8:75:5a:10:a9:9a:05:23:2d:42:ee:bd:2f:
                    26:7a:95:94:b0:07:63:03:9a:c5:05:a2:8b:37:ab:
                    ec:c7:07:7d:07:48:da:3f:8e:4d:d0:00:82:7d:ea:
                    5f:86:f4:aa:2b:f1:0c:81:35:39:3b:04:98:fa:e4:
                    3a:7a:06:72:28:30:16:19:af:b9:d8:9f:84:5e:4a:
                    a4:42:3f:64:ad:2f:9a:95:bf:58:ad:fb:c1:58:eb:
                    13:51:56:0d:f9:34:4b:77:f2:97:6d:de:99:ac:17:
                    04:1f:b4:51:dd:6e:62:0a:d6:34:84:46:3e:65:93:
                    dc:3d:82:e4:18:b9:92:9c:08:9b:65:72:32:be:e3:
                    44:70:1c:43:75:c9:11:af:c0:59:b9:d4:05:e3:46:
                    95:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F2:D1:41:64:94:F5:F2:0B:AA:6C:C9:B3:DC:14:0B:DD:03:57:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4855b6db-ae43-3a99-b0bd-7e24da50e500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.6.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b5:27:8f:33:43:ec:5e:a3:59:a0:df:dd:b5:62:ef:d4:27:
         27:83:04:d2:cf:42:fc:e2:7d:74:64:78:5d:6b:43:5f:3c:b7:
         5e:57:58:38:bd:0f:63:5c:f1:ee:29:22:4f:cc:44:e7:c5:c0:
         02:4c:48:30:a4:7f:5d:56:81:04:be:72:06:60:8b:d6:1d:41:
         c8:d0:ac:44:31:8b:44:03:12:dd:33:aa:14:1d:73:8f:ae:37:
         8f:cd:38:92:c9:ba:dd:fd:9f:5c:80:dc:6c:64:55:52:fb:cb:
         70:56:a5:72:f8:18:42:b6:b4:21:7a:44:82:5e:57:d3:a7:90:
         56:f2:1b:b0:52:48:64:b9:f9:7f:68:55:06:7b:6b:f8:eb:dc:
         c9:96:f2:ab:23:4d:47:a3:8a:7a:d3:e8:13:07:3d:f9:72:0b:
         bb:e7:41:58:c8:dc:44:8f:7c:46:1d:97:12:4a:f6:6c:aa:24:
         56:99:0c:c7:6d:14:be:9e:4e:e4:81:3e:3d:49:f1:2d:d4:22:
         69:e3:85:d8:5b:08:2d:03:97:31:67:15:5b:11:52:a6:ea:8a:
         38:8a:34:8e:fa:ca:2a:0a:5c:ab:b9:2b:18:77:ce:2b:fc:c8:
         08:c0:9b:6e:d5:b1:e6:de:70:48:d4:c8:2d:00:16:02:70:83:
         a1:8a:77:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:19:29 2025 by rpki-client