Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa
File:                     76988ed8-0896-3fce-b0d6-0f4b3b091909.roa (raw, json)
Hash identifier:          BJ8gII2uLoHr4s5L9QCWBVu+Rea/JmEPxY5vW6uSAH4=
Subject key identifier:   C7:57:0C:AB:DC:12:E6:6D:6E:86:39:BD:A3:06:0D:FB:6C:72:92:13
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584B2066D6F8E51C4BEECE453980
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        173.244.58.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d6:f8:e5:1c:4b:ee:ce:45:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=2459df16-8fe9-40d3-bc75-6cc7ebb7a061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:d2:72:75:be:79:53:a5:13:5d:4e:37:f6:
                    07:c1:e0:34:9f:e9:1b:bd:c4:78:76:a0:80:a3:fd:
                    95:0e:a8:51:1b:ea:2d:39:56:a5:71:1d:d0:4a:2b:
                    56:b7:79:cc:c0:77:b6:92:8b:2e:bb:2a:ba:6e:49:
                    f0:92:d8:15:b4:88:25:2c:a5:2a:b8:8d:10:15:f5:
                    65:12:35:95:21:90:ba:45:8f:f6:ea:8e:54:58:46:
                    1a:e5:cb:5a:d1:77:71:ac:ea:da:45:27:fd:30:e9:
                    28:bc:19:4f:fd:d5:1b:db:b1:23:db:d5:95:03:67:
                    76:36:67:d8:4b:e7:49:ee:0b:c6:a0:dd:89:aa:b4:
                    82:fc:71:f0:7c:61:5e:24:80:9b:87:76:77:6b:32:
                    ae:53:55:e8:0b:b1:99:74:3d:75:30:10:98:5a:d8:
                    fd:74:07:71:0a:a6:b8:27:63:3b:49:b6:da:52:2a:
                    6f:0a:e9:bb:7e:d4:ec:04:c0:ee:03:72:24:84:30:
                    4b:77:85:84:1c:ab:73:18:ab:c9:17:4f:c4:29:b7:
                    0a:40:78:68:8f:32:8d:c4:ad:89:7b:15:e4:6e:5d:
                    26:a8:76:73:29:bc:34:b5:7b:8d:9d:d5:a8:99:5e:
                    e2:23:e6:1f:0d:45:8c:7a:a0:d8:1e:e8:79:35:03:
                    c5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:57:0C:AB:DC:12:E6:6D:6E:86:39:BD:A3:06:0D:FB:6C:72:92:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.58.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:ca:19:bd:ae:d8:b1:24:c9:55:65:ed:d4:45:70:2c:ff:
         28:2c:a4:ad:af:cc:e8:e0:ed:80:7e:7f:76:d2:6f:4f:d2:19:
         12:47:c0:20:4e:ae:6d:9a:ca:cc:7e:50:d4:93:73:4c:0c:25:
         f8:8c:1c:24:cd:d7:88:6f:f3:03:55:99:f2:f0:f7:b8:90:ae:
         30:c5:22:3f:e8:07:11:3e:ed:66:72:18:50:3e:0b:32:1c:59:
         32:b5:49:e6:5d:d4:3d:fe:9e:51:17:29:74:cc:ad:72:a5:86:
         12:6d:d4:a1:f9:c9:1b:c3:95:ad:52:98:f1:a3:bd:3c:07:18:
         07:28:bc:3a:fa:31:fc:43:01:37:b4:c4:5b:a9:80:ce:3d:9a:
         5d:ef:ac:ed:40:ed:22:61:4c:b8:04:a0:d2:26:62:92:7c:f0:
         8d:3a:c9:2a:7e:64:2c:d2:4d:b9:ca:d0:33:11:99:fb:43:5f:
         d8:85:91:12:ce:7c:64:79:06:ee:f6:28:a5:4b:bf:40:50:34:
         56:7b:2a:9c:9d:38:06:eb:bd:9d:5f:ea:b4:50:7d:5f:62:90:
         91:88:5e:e3:68:4d:ee:ba:31:2b:90:de:74:25:a6:e2:39:5b:
         32:79:5f:32:f0:14:57:14:ef:59:08:c3:95:5c:fc:0c:c3:d1:
         5c:b8:ce:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:13:36 2025 by rpki-client