Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9efce924-4355-3dbf-b853-e953f94b8bc5.roa
File:                     9efce924-4355-3dbf-b853-e953f94b8bc5.roa (raw, json)
Hash identifier:          K0MurTrXWr0ME1wVmUjWcF4Eiqcy54o0PxFHCt+vR8E=
Subject key identifier:   2E:BD:09:B9:1D:01:88:92:98:CB:06:7B:68:E8:AA:5F:35:35:8A:7B
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584B21CC30A5E40BDA63A30A0200
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9efce924-4355-3dbf-b853-e953f94b8bc5.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     12083
IP address blocks:        207.98.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:30:a5:e4:0b:da:63:a3:0a:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=e3e29f7b-0564-473f-8b17-c93346cb1731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:7b:ac:5b:cf:e8:65:51:b6:83:fb:93:50:
                    aa:a9:9e:2f:ef:45:15:7c:e9:8c:0a:7f:30:6d:bf:
                    4a:28:df:fc:fc:93:fb:48:4f:99:2a:fd:29:cd:98:
                    40:2f:2a:52:86:33:d8:85:5f:ff:c0:d9:90:b4:14:
                    ec:82:ec:26:06:97:03:eb:f5:93:d0:a5:3c:95:d0:
                    94:ad:ea:dc:e7:48:d7:0e:e4:05:10:4e:3e:a0:b9:
                    66:60:35:9e:7b:4a:7b:83:50:24:85:e7:8d:4f:cf:
                    e1:f0:6b:85:06:90:c9:17:37:97:b6:9e:f2:15:39:
                    c6:54:39:1f:e2:c1:3b:b2:35:bc:b7:84:f8:ff:e3:
                    76:20:ae:67:03:e3:44:65:19:95:15:c3:8e:7c:08:
                    0c:47:ce:9d:a4:7a:6c:00:5b:d5:cc:b4:39:52:7a:
                    28:43:6e:ca:70:77:c7:07:7b:41:a4:4e:3c:32:f9:
                    14:3b:bf:c6:67:54:d0:9b:6b:93:39:67:62:c1:cc:
                    76:c3:d3:6a:09:ec:25:01:b8:80:fe:32:64:00:ee:
                    3e:cf:b4:a0:6c:ee:60:72:ea:d6:44:76:af:10:6c:
                    26:4a:26:41:00:c8:d5:d2:18:d6:be:99:ef:02:3e:
                    ba:51:28:17:82:93:4c:2c:b5:55:ed:e7:b4:e3:74:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BD:09:B9:1D:01:88:92:98:CB:06:7B:68:E8:AA:5F:35:35:8A:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9efce924-4355-3dbf-b853-e953f94b8bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.98.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b6:48:4d:c5:7b:c6:20:5a:02:b1:dc:49:82:bd:5c:4e:d7:
         60:fe:66:e6:eb:b5:b8:dc:86:53:cc:34:8d:5f:22:36:35:07:
         ce:91:c9:fc:64:ee:35:8d:0d:6f:c3:34:0a:4f:e4:2c:aa:29:
         99:b8:3f:36:9a:95:33:e0:8c:c7:85:5f:95:fd:7a:7a:71:92:
         20:96:3f:85:9b:fe:c5:a2:83:86:76:04:70:9a:b6:14:22:d3:
         ce:28:5a:79:72:64:6d:8e:a2:b7:54:e7:bd:84:1c:13:2e:2e:
         50:a6:07:88:15:7e:00:ff:66:9c:7d:fa:bd:cd:2c:3a:e7:4d:
         68:44:68:7a:19:8f:95:fd:86:ac:7f:21:cb:14:7d:4c:2d:0a:
         91:38:59:11:17:7d:c0:de:77:be:1e:86:ea:42:ad:f8:ef:75:
         ab:fe:a6:42:2d:34:0e:be:c4:2f:02:35:f9:2c:f8:8a:64:f9:
         db:36:b8:23:cd:d0:63:d3:d4:58:5d:25:98:54:6e:38:17:73:
         14:52:02:a2:1b:21:6d:27:5d:1a:fd:c8:8a:9f:fe:f8:0f:f8:
         0b:75:38:7c:a6:f2:0c:44:f7:43:82:5b:54:f1:a8:95:26:ca:
         98:98:58:43:01:34:8d:73:24:a2:13:58:1b:07:f6:09:de:83:
         ac:48:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 15:53:27 2025 by rpki-client