Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/946424be-2442-3228-b932-305465ed825c.roa
File:                     946424be-2442-3228-b932-305465ed825c.roa (raw, json)
Hash identifier:          76239xh48ji9bYxiEn7y6htqM439bFdsgB0K5eONdA4=
Subject key identifier:   66:DF:A7:31:49:1E:B4:EA:C9:AF:A6:A6:44:5B:D4:65:EB:95:90:BD
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B2A2C428F21437A2BF9B17060
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/946424be-2442-3228-b932-305465ed825c.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     7029
IP address blocks:        75.117.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:42:8f:21:43:7a:2b:f9:b1:70:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=536dc78a-f501-4053-b661-e26a47b256cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:5b:45:1f:3a:81:2a:7c:19:de:88:b9:d5:
                    cb:25:d0:c8:ff:89:24:d3:1f:bd:0f:ba:9f:04:0f:
                    0a:6e:b7:46:69:34:9c:36:b2:7d:be:cb:06:98:40:
                    af:e9:e4:63:aa:7a:ab:2e:d6:b9:2b:2f:9c:24:ad:
                    17:ac:d7:e7:b7:a8:d8:cc:98:b2:e7:68:78:70:b7:
                    a3:b3:d8:f5:42:b3:af:89:af:66:cb:09:c3:97:55:
                    21:07:15:f4:86:ff:3b:e0:7d:65:6f:da:de:16:b5:
                    fd:ae:e9:d8:29:4a:6f:a3:3f:ae:81:60:a5:3c:40:
                    f6:ce:8c:41:bc:29:03:b0:dd:91:ea:c9:90:7f:93:
                    ad:7b:93:d6:1c:42:01:66:77:a2:76:2c:76:fb:33:
                    b2:fd:d3:ff:8c:33:e3:2b:d0:55:80:52:2d:f7:3e:
                    4e:62:cc:1d:b7:47:eb:04:d6:de:ac:09:7e:b0:73:
                    3d:0b:b0:9b:a1:fc:54:16:71:0d:3f:8c:ca:40:4d:
                    ca:20:b8:ba:a7:fe:6c:80:73:f2:2f:5d:10:83:25:
                    b7:83:ec:ad:8f:15:8b:44:39:a9:6a:89:b1:b0:e7:
                    76:2a:e5:1c:98:66:6e:c2:f8:bc:61:ca:cf:fc:55:
                    7b:a9:ba:11:2b:db:a0:bb:17:47:97:83:5b:d6:56:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DF:A7:31:49:1E:B4:EA:C9:AF:A6:A6:44:5B:D4:65:EB:95:90:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/946424be-2442-3228-b932-305465ed825c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.117.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d4:42:3c:47:69:c4:49:00:96:6a:97:e7:e6:f9:f0:3e:a0:
         2b:1c:09:83:a5:62:58:a4:fb:0a:95:69:de:42:96:1c:11:de:
         86:a2:6b:20:a5:6a:4b:40:bc:00:1d:fc:aa:d9:19:04:64:95:
         97:af:da:1a:83:6d:df:86:96:25:99:a3:80:a6:90:74:6f:85:
         24:12:48:aa:78:a8:d8:65:17:71:78:5b:99:bc:e3:9c:6c:2c:
         b1:41:9d:12:60:1b:9e:ec:64:2d:66:c3:06:62:6e:4c:1a:66:
         ae:a0:b3:ab:2f:1d:3f:af:85:e2:45:fb:4b:32:49:ad:2a:75:
         87:b4:2f:21:64:ae:e5:c7:7b:d5:4c:db:31:c2:4f:4b:3f:4a:
         70:27:a5:68:1e:3a:be:2a:f0:60:d2:a9:16:8c:86:3b:4f:ca:
         e6:92:74:43:43:3c:ae:b6:2f:4f:af:45:71:03:9a:ce:3d:ec:
         8c:56:54:00:89:70:a2:39:c5:dc:7e:f9:a1:d6:c1:a4:e5:80:
         f2:98:f9:74:0e:5c:3d:4c:b2:20:0f:df:32:00:6c:f4:d5:f1:
         08:a3:b4:cf:d2:1f:78:25:1f:e5:ec:56:a8:0b:0e:cd:e3:4c:
         3a:08:7f:41:7e:eb:5a:72:56:0d:76:88:d6:8e:4b:dc:0b:31:
         08:aa:a4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:13 2025 by rpki-client