Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb2b201d-e632-3863-abf3-604c0583cecd.roa
File:                     eb2b201d-e632-3863-abf3-604c0583cecd.roa (raw, json)
Hash identifier:          ad7daibQ9kmDCEpicSU/R2vlizG+D0rESCgK95hZ8T0=
Subject key identifier:   F1:E1:91:87:BE:16:C9:36:8F:AB:02:C8:D9:3D:3E:5A:28:6C:79:EB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E22544D2352DE53D3C594720
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb2b201d-e632-3863-abf3-604c0583cecd.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     20940
IP address blocks:        96.7.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:44:d2:35:2d:e5:3d:3c:59:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=7fef1467-b2be-4e28-b47e-988ec10ff353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:16:56:33:83:d0:dd:9d:38:86:b6:91:60:
                    5a:94:52:74:5d:e9:de:48:36:73:a4:fd:f6:45:e5:
                    eb:76:e7:1b:b2:05:0c:68:43:87:9f:8a:c5:ee:20:
                    ca:a2:37:7c:b8:b1:4a:44:1d:85:35:62:3b:b2:ec:
                    ed:31:dd:ea:be:aa:6a:1c:81:30:43:c5:9b:4e:c1:
                    bf:27:26:b1:d8:96:97:78:ae:b0:c9:27:00:1c:b8:
                    18:84:98:bf:89:c0:f2:f9:a4:1d:a8:18:4a:26:68:
                    c8:5f:84:ec:35:15:0c:ce:0c:c2:84:76:7a:38:ba:
                    88:3f:53:35:02:75:62:fc:c6:7f:5f:f3:64:68:0a:
                    eb:c7:dd:af:ae:f8:96:c1:dd:42:be:cd:a3:8e:a3:
                    b8:c5:bd:76:5b:f0:2e:39:00:b8:ae:78:17:11:41:
                    ce:2b:bd:e4:82:3d:46:d2:6a:d7:54:b0:22:de:10:
                    a4:d9:4f:50:49:3c:e1:de:98:30:03:82:1b:13:78:
                    8c:be:d0:bb:e1:b9:67:93:02:02:44:5b:6a:d5:ab:
                    de:47:e7:d8:36:3d:c9:86:2a:62:44:2c:20:2b:28:
                    9d:50:f3:93:2d:3e:51:e7:75:32:e9:d8:7e:bd:aa:
                    a3:74:aa:83:f2:1b:89:86:28:b2:46:06:d2:17:5f:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E1:91:87:BE:16:C9:36:8F:AB:02:C8:D9:3D:3E:5A:28:6C:79:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb2b201d-e632-3863-abf3-604c0583cecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7d:8d:d7:ca:da:83:e8:5d:53:c3:ff:78:4d:7c:37:1d:57:
         83:2d:85:37:ce:e9:0d:3c:6c:68:ca:38:4e:d9:df:29:f4:39:
         ea:f3:59:c1:66:a1:56:a9:87:c7:5c:fe:04:e3:61:11:a2:68:
         67:ca:15:82:3b:d7:d1:42:70:a8:de:83:6d:95:cf:8d:6c:35:
         0f:27:15:de:b4:c5:0e:44:08:c5:cb:ce:15:59:ef:b6:33:6c:
         25:87:51:52:43:08:18:61:8a:71:ec:3a:53:c3:67:34:e2:07:
         29:c3:bd:36:d9:98:06:c8:d1:77:8a:da:73:54:ac:04:5b:6b:
         14:45:97:fd:ec:c7:f1:81:c8:b3:d1:bc:75:e9:9e:47:49:f4:
         83:d8:a3:1c:7d:15:fa:86:cc:f6:3a:e2:fe:9b:7e:95:bf:26:
         27:85:34:48:e2:7b:b0:37:76:2f:62:b6:ba:ba:dc:8f:b7:d2:
         35:b9:ba:65:59:01:8c:0f:0a:88:8c:2c:7c:cb:07:f9:c8:0c:
         1c:85:ee:07:f2:63:26:3e:f4:a5:43:d3:ea:5c:a1:4c:51:99:
         4b:21:e8:f6:3b:66:e6:0a:0a:fd:41:fa:a3:82:49:81:86:f5:
         bf:f9:3e:19:3e:71:27:13:9b:e4:d1:f9:cd:ce:a1:7d:62:58:
         0b:4d:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:32:34 2025 by rpki-client