Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e6a3e3e0-e03d-3f7d-ab3b-ae0a97c6789c.roa
File:                     e6a3e3e0-e03d-3f7d-ab3b-ae0a97c6789c.roa (raw, json)
Hash identifier:          ciBesR/ZwZUL+wda83iSaCobdynFBcNJXl3VUroY+/k=
Subject key identifier:   22:4B:5A:37:41:88:11:2A:BB:EC:77:89:78:1D:5A:53:E8:28:1C:ED
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B3D47B5215772DD1428644C00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e6a3e3e0-e03d-3f7d-ab3b-ae0a97c6789c.roa
Signing time:             Thu 18 Sep 2025 21:16:29 +0000
ROA not before:           Thu 18 Sep 2025 21:16:29 +0000
ROA not after:            Wed 17 Dec 2025 22:16:29 +0000
asID:                     23473
IP address blocks:        96.63.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:47:b5:21:57:72:dd:14:28:64:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 18 21:16:29 2025 GMT
            Not After : Dec 17 22:16:29 2025 GMT
        Subject: CN=d61ce751-f430-4900-9761-489c7372a8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f0:74:a1:33:e3:6e:db:0b:c5:39:92:ca:17:
                    f5:f7:71:62:2c:b3:e2:3f:aa:f3:f6:8d:7c:27:fc:
                    cf:8e:2d:63:e3:22:56:94:0f:f1:aa:86:e9:bb:cd:
                    48:a6:fb:b4:52:8d:d1:2c:6f:b0:02:2c:2e:07:69:
                    44:cb:36:37:ab:0d:3b:b4:c1:99:ed:62:44:2f:82:
                    96:91:cd:db:77:e2:b1:91:27:56:20:e6:c8:0a:88:
                    aa:b3:a0:7d:ed:20:2d:ba:ae:e4:0c:21:0c:6a:d6:
                    41:98:ac:7a:9f:65:5c:91:c4:80:ec:35:22:d9:27:
                    28:a2:86:c8:78:68:0e:83:2d:66:61:c8:22:96:21:
                    fb:43:14:49:fb:ba:41:64:3a:4d:09:e4:7b:c6:d9:
                    09:54:e5:07:6d:07:7c:41:ea:48:ba:12:c2:5d:72:
                    61:18:02:bf:22:ea:93:3f:18:f3:20:7f:71:60:b4:
                    ed:bf:16:a4:8e:3f:5c:31:dc:fc:be:ea:d7:89:21:
                    90:21:c2:84:cf:20:35:ff:17:71:4e:c4:fc:aa:6e:
                    10:cb:5f:50:ec:f8:8b:4e:31:76:7e:8b:51:f0:f6:
                    30:54:93:c2:17:97:1a:60:56:27:a6:b4:c6:37:8a:
                    72:66:d7:13:b8:0f:1f:ef:d8:1f:14:8e:4f:59:7b:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4B:5A:37:41:88:11:2A:BB:EC:77:89:78:1D:5A:53:E8:28:1C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e6a3e3e0-e03d-3f7d-ab3b-ae0a97c6789c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:66:b4:82:97:21:77:1d:f2:aa:f2:a7:a6:ba:64:e0:a4:
         5d:ae:da:81:71:45:cc:ef:a0:c6:51:71:0c:1b:3c:e2:48:22:
         47:e4:13:1a:48:42:86:ed:7c:96:c0:00:13:05:85:e8:04:9d:
         c6:cb:24:61:3d:97:90:e0:e8:22:12:5a:00:58:31:fa:21:16:
         ab:5d:f1:95:8b:ca:3e:bd:05:4a:ff:27:c3:e2:2d:ef:6c:37:
         b3:f6:32:5d:36:3d:59:61:07:16:0a:eb:e5:90:96:7b:b8:2f:
         ec:0a:d9:de:b6:7e:76:f1:bb:94:7d:0b:3a:f6:90:f1:3c:77:
         cb:69:a8:ad:28:14:85:50:42:53:44:6b:3f:70:9e:b8:02:66:
         0c:bf:e8:d2:4a:ea:0e:35:b8:df:65:75:03:ff:39:c3:47:ff:
         96:31:b9:b7:fd:0f:dc:4a:9e:34:2b:12:f2:ab:7f:13:2f:32:
         4e:89:b9:6f:8a:d6:dc:10:7b:68:ed:c4:71:63:7b:96:56:24:
         cf:ff:dd:8c:fa:e1:9b:e9:b9:45:9c:b1:28:3c:13:2b:61:9c:
         9c:55:99:3a:96:a7:88:1a:0d:05:52:d5:ad:9e:3d:23:74:a5:
         c6:a5:1c:5b:ea:d2:04:3e:78:07:0e:dd:08:e3:04:8c:92:69:
         e9:98:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:58:32 2025 by rpki-client