Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/b771a562-e705-310f-8cbc-a8450102c0e1.roa
File:                     b771a562-e705-310f-8cbc-a8450102c0e1.roa (raw, json)
Hash identifier:          QTh5jNaiWRyCgK8qyUY30K/7dxOoAP8mIwreTSfSo98=
Subject key identifier:   CA:21:14:1F:8F:3F:6B:BB:FE:A6:65:1E:EC:7D:A7:1A:05:3F:18:33
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584B1806DB1D0E8693264A07CBE0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/b771a562-e705-310f-8cbc-a8450102c0e1.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     7992
IP address blocks:        24.146.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:db:1d:0e:86:93:26:4a:07:cb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=0e07a6fd-82d8-4b10-aa68-feab9aec5157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:50:15:21:4c:cb:3f:ed:fa:fe:7e:0d:ba:
                    4e:a0:d2:95:7f:18:6b:fd:a3:18:e0:10:33:0e:01:
                    8b:10:9e:11:47:2e:b3:e0:09:e3:e3:24:dd:ce:41:
                    99:49:31:3e:c1:08:a4:63:75:a5:f6:27:00:d8:4d:
                    42:4d:db:77:17:27:3e:4d:87:a2:1a:e4:6c:d7:92:
                    73:2f:58:d3:a6:d4:e3:32:a3:44:88:f8:bc:b4:6e:
                    e0:c3:bd:52:61:02:6f:d8:87:e4:5f:70:82:7b:3b:
                    22:15:d4:a1:eb:0e:be:a7:3d:a0:fb:a7:59:c9:04:
                    07:10:e7:fa:cf:a9:79:d5:b8:e4:a6:b2:aa:de:c4:
                    78:27:8f:cd:24:1b:97:67:49:2f:d7:55:5a:9a:4d:
                    41:cd:ed:8f:4a:0d:51:f9:fa:74:4a:7f:39:da:62:
                    aa:40:73:f1:d9:28:89:ed:b8:40:6f:fd:6e:66:e1:
                    ce:cc:c5:74:69:b9:8b:8e:54:fc:7e:26:cc:44:df:
                    26:e7:1e:ca:ba:38:ee:eb:c5:b3:1d:55:d8:d5:f5:
                    58:dd:ea:9e:2c:07:52:e1:50:8a:ac:84:e5:6e:a2:
                    f8:54:d0:c6:3a:4b:0a:3c:c5:9e:6f:79:79:2a:6a:
                    a7:d7:e0:1e:80:ad:bf:0b:7e:64:b3:2d:18:64:f1:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:21:14:1F:8F:3F:6B:BB:FE:A6:65:1E:EC:7D:A7:1A:05:3F:18:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/b771a562-e705-310f-8cbc-a8450102c0e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.146.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9e:81:d9:ed:8b:ef:72:8e:f7:46:ce:e2:8f:51:56:0f:1c:
         11:0f:4b:91:4b:c7:4d:cb:76:53:81:0c:5a:91:3d:59:a6:d5:
         19:50:ba:ad:46:2c:8a:b6:68:cc:8e:2a:a1:42:d2:e4:c0:99:
         24:77:eb:32:47:84:67:db:b4:b1:76:44:5d:fc:71:27:fd:e5:
         30:08:24:3b:d4:06:0b:d5:43:1e:6d:68:68:00:dd:91:c0:a0:
         da:78:b0:3f:24:19:d0:8c:44:3e:59:61:c8:7f:71:fc:b8:1c:
         df:ff:b9:0f:76:83:44:3f:60:74:ef:58:20:15:58:8d:df:07:
         c7:78:a9:80:67:51:8f:2b:1c:71:1b:59:47:1d:ef:4c:a7:c5:
         3e:8a:b4:83:25:e6:0b:59:46:35:65:c3:38:85:74:c6:40:10:
         9b:a1:a1:a5:48:04:15:64:55:26:a2:dd:25:72:19:7a:c4:fe:
         da:19:56:54:be:97:68:d1:ff:ea:dd:5f:f5:4f:b3:58:cf:14:
         26:8c:78:f4:ee:19:d3:23:ba:98:cc:61:78:53:59:fa:5e:a8:
         39:03:4d:d6:73:aa:5c:f2:b3:a5:9c:8e:c8:89:c2:5b:0d:89:
         f2:93:82:d7:e0:7d:4d:8a:91:9f:65:a4:76:cb:3e:9e:ff:2b:
         b1:25:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:09:23 2025 by rpki-client