Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/96d3ff68-52d7-3753-b9da-bee0c3a9cc06.roa
File:                     96d3ff68-52d7-3753-b9da-bee0c3a9cc06.roa (raw, json)
Hash identifier:          Ysbaspn1DPpEzbdEbEBnepZkEWuKUxQlEzsH+5oyBbE=
Subject key identifier:   52:62:EF:6E:6D:20:B5:7E:B6:EF:AC:24:B3:ED:92:38:F6:D4:60:48
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F43285849CBCF96A21D0B46155C5E0600
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/96d3ff68-52d7-3753-b9da-bee0c3a9cc06.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     27475
IP address blocks:        198.160.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:96:a2:1d:0b:46:15:5c:5e:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=6dbd9167-4216-4e13-8ade-4d5bf80906eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7d:f7:99:15:21:29:2a:b0:06:b1:40:64:7e:
                    7d:bd:81:45:24:db:81:51:7e:21:f4:16:b1:44:b4:
                    c0:01:67:40:d2:87:c7:47:a0:5d:d2:fc:89:09:6c:
                    06:f2:30:f8:36:43:24:b1:e1:e5:f9:7d:96:63:8c:
                    89:f1:08:85:4a:da:06:19:db:48:d4:1b:49:72:db:
                    a1:1d:01:87:ea:43:87:fd:da:f4:e7:56:19:0c:24:
                    ec:f7:79:2c:ac:76:cf:4e:27:be:57:c9:72:9f:bd:
                    c7:dc:02:a5:bd:32:69:8b:3d:58:52:c8:d2:44:20:
                    46:42:d2:f2:ac:27:f8:b1:a0:f8:83:2c:1b:a1:e0:
                    cf:b3:3a:cf:f2:f7:ab:e6:93:17:76:f3:06:33:f8:
                    74:05:a5:eb:a1:2f:42:86:58:00:a7:8a:16:c5:ac:
                    c1:bd:1c:5a:21:16:c0:f5:2d:89:f9:29:46:04:30:
                    3e:10:d1:64:94:2d:60:e6:c3:7a:28:1b:3d:ee:43:
                    cf:65:3a:e8:80:08:fd:df:9f:64:8e:55:29:bc:6f:
                    f9:fe:fc:18:50:32:bc:7d:fb:7e:35:f1:39:0a:ff:
                    f2:d4:67:91:c4:c4:5b:f7:1c:3b:13:96:05:8b:3c:
                    3e:f3:4f:a1:9c:13:21:86:33:22:b4:5e:91:b0:9b:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:62:EF:6E:6D:20:B5:7E:B6:EF:AC:24:B3:ED:92:38:F6:D4:60:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/96d3ff68-52d7-3753-b9da-bee0c3a9cc06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:cb:9f:0c:d6:a3:39:09:50:ed:b5:5a:d4:b2:0a:c5:b2:1b:
         ef:14:a8:7d:3e:e7:68:89:ba:97:3f:30:2f:52:e9:d3:d9:3d:
         9e:f5:de:13:a2:2a:cd:26:9f:b2:86:04:30:2f:c3:ff:9a:b5:
         c4:6c:20:85:2d:eb:be:96:cb:1b:e3:47:c4:24:7b:58:03:73:
         90:e6:d6:2c:0f:81:56:bb:49:53:f6:02:39:c8:7b:1a:1c:bc:
         7f:2d:d9:ac:b1:d7:4d:17:1c:5e:27:91:10:79:b6:91:4c:17:
         6e:fe:69:07:0f:ad:13:d6:d9:f2:3d:15:a4:aa:e6:27:c3:0f:
         df:b1:7c:d2:11:73:4c:cc:7f:82:5d:24:d8:74:3d:39:0c:b9:
         c1:ce:73:75:26:5a:61:68:01:8c:b3:54:95:8b:ed:4e:59:cf:
         9c:ef:18:91:b8:95:39:be:fc:66:75:50:d1:25:89:d0:95:fb:
         2d:89:16:53:12:c1:6b:85:5c:85:e7:62:86:fd:88:18:a5:78:
         02:5d:4b:66:3a:83:7f:fa:62:e3:8e:d8:a5:35:ae:3b:11:65:
         cf:d7:77:72:7e:86:ab:b1:5b:66:75:dd:3d:fe:39:9a:48:bf:
         86:de:1b:90:8a:05:e6:2f:f1:f7:f1:24:8e:f2:06:1e:6b:33:
         77:d1:a2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:11:48 2025 by rpki-client