Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa
File:                     c4a6b7c2-8475-3612-9c69-66526f25323b.roa (raw, json)
Hash identifier:          j2cPTK0a8Ruv0u7bMCFipo2u0NwE2CuSYuQJf5qg4IA=
Subject key identifier:   72:19:A4:60:85:DA:99:CD:9D:8D:32:40:4E:16:DB:27:3B:17:49:EC
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584B583C890D70518854D4991D80
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     11273
IP address blocks:        204.124.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:89:0d:70:51:88:54:d4:99:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=2b268ab1-ed08-4091-8cbe-c1baa4b9044d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:ca:9e:2c:73:f2:f0:14:3f:86:4f:49:cd:
                    de:12:c9:fb:31:5c:b0:e7:11:2e:b8:05:01:b8:ea:
                    8a:be:76:0b:96:8c:2c:de:11:dd:34:9d:0d:8a:b5:
                    6b:cf:5d:de:d8:e5:12:0e:34:88:9c:6d:40:e7:9c:
                    f4:26:1c:bb:dc:1c:80:57:a6:7f:ec:ca:c0:f3:b5:
                    e5:4b:70:99:0c:fe:9d:01:3c:68:34:da:bc:2a:ec:
                    ed:50:8f:b2:50:fa:2b:26:33:66:45:da:f1:0a:0d:
                    cc:76:b5:32:5c:d0:92:f5:d0:c3:55:03:5f:ca:f5:
                    2a:05:41:b0:b7:43:8f:f2:d1:53:2f:7e:1e:a7:33:
                    e3:f1:9e:0c:08:f1:6c:7c:cc:ed:72:c0:4a:06:14:
                    42:cb:a4:a6:74:5c:21:c4:d6:ee:ca:c9:a2:0a:79:
                    02:f7:dd:88:d8:a6:0d:c1:9f:88:6c:34:7e:c3:99:
                    83:9a:f8:2f:4c:93:c8:d0:16:eb:90:6a:7d:ff:26:
                    cc:74:08:97:a9:f7:24:73:48:5b:b0:bd:ba:e9:b2:
                    bf:5c:a4:c4:9f:88:26:68:a4:46:9a:d8:79:fa:f0:
                    bd:f8:57:ea:58:dc:7a:9c:72:b2:96:b1:59:52:98:
                    15:6d:af:ff:1b:f4:a4:20:f6:f0:2d:a3:af:5c:e9:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:19:A4:60:85:DA:99:CD:9D:8D:32:40:4E:16:DB:27:3B:17:49:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.124.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:6d:0f:e7:f9:eb:b8:88:e2:cb:af:95:c9:ed:a7:28:25:
         c0:99:47:26:83:2f:55:c6:db:dc:3a:3b:66:cd:01:52:8b:d2:
         97:85:b0:6f:c3:60:1d:59:e2:5d:3d:d0:24:f5:ef:ec:dc:b4:
         b1:2a:87:31:4a:2e:34:56:9f:07:f9:fd:0c:33:a4:52:82:f4:
         70:f7:f5:fb:16:1f:b9:10:c8:07:d4:31:12:09:5d:f5:b5:d1:
         a3:55:bd:7e:90:0e:8d:9e:b0:64:11:99:b8:1f:9f:e6:fd:ea:
         bc:79:e0:d3:d6:31:c3:71:a4:3d:1f:58:8e:f0:fa:bd:63:68:
         e9:34:43:e9:ba:1e:b5:4c:39:3c:9b:eb:9a:12:11:23:2e:bb:
         98:f0:0a:2d:da:da:3d:00:79:b7:54:2d:98:54:ad:10:a8:6d:
         34:61:48:f5:3d:c3:8f:a0:27:92:2f:c4:8c:d4:0c:51:ee:62:
         56:1a:6c:8d:e5:ec:93:d8:01:24:0e:8c:af:47:53:8e:31:c3:
         49:1e:e1:3d:6e:5c:df:2e:0e:1b:46:06:db:f8:b3:8b:6d:57:
         81:70:ee:e5:55:52:81:12:74:c5:51:78:f9:83:a7:81:a9:6c:
         2d:d0:c4:13:01:79:68:a1:04:af:10:2e:b7:4a:7d:88:92:02:
         b3:22:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:57:48 2025 by rpki-client