Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8a249bd6-e3b7-34b3-9c27-9206673b443e.roa
File:                     8a249bd6-e3b7-34b3-9c27-9206673b443e.roa (raw, json)
Hash identifier:          SY/afk+URg5z28pdYt/TrnjNqBvQFAbvAjo/oLEHOlg=
Subject key identifier:   98:AE:B4:27:98:83:30:33:BA:82:BE:7E:39:72:C9:3C:9B:11:A5:3A
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584B21CC230C018220C2F7192680
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8a249bd6-e3b7-34b3-9c27-9206673b443e.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     12083
IP address blocks:        24.214.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:23:0c:01:82:20:c2:f7:19:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=e6d7c3d0-4688-40d0-bedc-73aca14dad65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ea:ba:33:54:5f:a6:98:40:0b:96:ab:d9:cf:
                    5b:3d:cd:20:e7:95:bb:17:40:0e:e4:9a:13:7f:45:
                    47:26:e2:e2:b5:5f:96:9c:8d:e0:fb:b9:06:d7:98:
                    39:ab:72:6b:5a:50:92:b3:5b:d0:e1:98:83:cb:f6:
                    cf:b8:ba:c9:dd:cf:5d:b9:a7:de:4b:ad:07:f4:9c:
                    62:33:de:7b:4f:ea:3d:98:59:04:87:d9:02:74:41:
                    41:83:32:4b:14:f4:88:68:82:2b:b9:c3:48:e4:b9:
                    7e:13:42:00:9c:87:4e:1e:61:ee:af:3b:70:87:6a:
                    3e:30:83:14:f2:76:48:2a:67:4c:04:c5:e2:45:5f:
                    9e:d9:88:05:b9:1b:cd:00:f8:1e:58:0a:1c:86:7a:
                    71:35:d2:37:03:62:35:92:a9:c8:9c:8a:1c:6b:4b:
                    39:dc:5b:0a:26:95:d8:57:42:4e:5a:3e:3e:6a:84:
                    37:5a:4c:00:fb:d1:67:f5:32:ec:7c:08:fb:80:c9:
                    c1:4d:b0:2a:ac:19:5a:fe:06:27:88:f2:2b:3d:0c:
                    61:1d:e8:69:9f:7c:70:5a:ec:ca:df:0e:48:d9:43:
                    e2:50:7d:3b:e5:f5:c2:fe:98:fb:f8:fd:80:06:71:
                    cc:40:4a:be:f9:5f:e9:cf:89:28:33:4e:86:84:cd:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AE:B4:27:98:83:30:33:BA:82:BE:7E:39:72:C9:3C:9B:11:A5:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8a249bd6-e3b7-34b3-9c27-9206673b443e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:61:dc:a6:b8:75:d4:eb:fe:fc:eb:4e:99:ce:b9:0a:dd:
         b5:50:5a:05:4b:e8:a3:da:34:15:a0:dc:93:a1:56:26:47:19:
         ea:36:ca:9d:bf:5b:2a:1d:1b:bf:e8:98:68:a0:90:25:51:cb:
         ea:2e:d7:af:cc:7c:0e:66:df:6b:56:49:fa:1e:22:24:7d:16:
         22:2a:97:73:31:18:14:c6:ae:e0:c1:9b:76:da:cd:70:fb:02:
         ce:5e:88:f8:93:dd:32:2c:a5:48:28:ad:18:19:21:09:0e:01:
         52:61:fa:e5:55:3d:6b:e3:2c:69:89:c4:f6:7b:c3:c3:ba:c4:
         05:da:72:78:40:ad:52:f7:bf:3b:91:47:5a:4b:a7:14:3a:f0:
         f6:cc:e0:a5:fb:59:ce:3b:23:c3:0e:ba:f5:08:82:6b:7f:85:
         f4:c2:0f:b0:bd:aa:3a:1f:4d:39:b4:95:69:aa:64:2a:02:34:
         ea:f6:76:c5:e3:e2:1c:31:e4:e8:5a:03:af:99:d9:00:7a:a3:
         0c:06:6d:34:d5:5e:9b:de:06:43:43:17:73:76:10:d8:5b:e9:
         28:e4:15:43:09:1c:76:4e:2f:0f:02:ea:e4:92:54:f3:10:22:
         45:d4:58:12:1c:c4:11:e2:0b:17:c2:aa:b9:f6:6e:44:0f:f6:
         f8:64:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 15:52:20 2025 by rpki-client