Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa
File:                     1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa (raw, json)
Hash identifier:          eY48RKa+koeFc0aVmXnC8BwJ97z2f1Lbndlv2JMvlok=
Subject key identifier:   96:B0:05:F2:00:5B:5E:2D:E9:01:1C:66:A5:C7:1D:D5:DA:A5:4D:F3
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584B2CF6E51521D5C6B5D8BD6800
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     27602
IP address blocks:        198.145.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e5:15:21:d5:c6:b5:d8:bd:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=ffa2e0a9-6bc5-4c60-ae26-64c96d41cd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:88:60:68:bc:19:33:f8:65:31:8a:7b:52:
                    cd:6b:22:37:13:ce:78:2d:1d:e6:53:82:8e:66:98:
                    ea:d3:5a:ce:db:bd:43:08:e6:ba:24:62:fb:e7:3e:
                    0c:87:e1:44:7f:6b:7f:e4:6a:75:a0:e9:d3:26:b8:
                    e6:44:51:23:07:f4:e0:bd:76:c9:4d:e9:af:a0:6a:
                    39:16:b0:61:07:a9:fe:69:51:72:8b:bb:5a:15:77:
                    f1:28:36:bc:cd:b5:c3:12:44:94:84:ba:50:7f:4e:
                    4d:1d:9b:42:c2:20:95:8a:06:c5:ce:f3:21:f0:66:
                    e0:06:3e:e2:98:a8:7c:fd:73:34:1d:79:60:88:bd:
                    79:7f:4a:92:4c:b7:08:eb:fc:5b:f4:76:0a:72:da:
                    c8:55:f1:16:44:29:67:54:23:50:eb:b5:7f:19:cd:
                    b1:7c:db:26:9d:1f:62:2b:36:36:6e:67:ae:af:5e:
                    af:92:cf:77:ef:88:4e:fd:ff:3e:42:27:67:dc:b2:
                    c4:32:39:14:59:83:15:df:5a:11:b1:03:e5:8b:18:
                    9a:35:af:8d:35:b6:0c:06:d3:e8:52:03:de:df:bd:
                    4b:b9:4c:04:11:af:af:d9:06:cc:17:df:1e:6d:3a:
                    51:4c:33:9c:54:75:16:6c:19:1f:1c:a5:09:6d:c8:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B0:05:F2:00:5B:5E:2D:E9:01:1C:66:A5:C7:1D:D5:DA:A5:4D:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:87:f4:9b:e5:a1:f7:7d:1b:eb:f7:1b:e6:a2:9d:96:1b:a6:
         bc:a7:24:16:0c:6a:d2:db:08:ec:65:2d:bf:c7:c0:8b:98:0a:
         4b:1c:b0:1e:ed:39:fa:3b:d7:cf:4e:ef:be:5d:aa:5d:da:6c:
         3e:8b:79:57:e9:e4:25:17:47:3a:08:5c:3e:af:6f:2e:3f:ac:
         12:6e:8d:c8:f1:17:49:30:16:01:d4:06:b9:7c:0f:c8:91:76:
         fe:05:39:67:7c:e1:7a:5d:3c:82:5e:7e:a9:48:4a:1a:51:74:
         b1:39:6f:a3:b8:ef:38:ee:e2:6a:ba:ec:06:2d:57:1e:d4:ff:
         10:b8:f0:dd:d0:8e:03:ea:d9:97:60:22:5b:0d:d9:7f:b2:0c:
         1e:96:95:5f:08:7d:bb:2f:3e:94:ad:15:39:7d:20:63:03:af:
         b0:a1:01:17:ae:d7:fa:2a:69:22:d5:3e:b5:ed:bb:af:26:d6:
         a0:c8:66:38:0a:8e:85:d7:c6:51:f1:71:e2:58:b1:f8:40:8a:
         0b:15:be:2a:14:f3:78:c3:7c:9f:35:3e:93:74:16:f7:c7:b5:
         ea:90:cc:49:e9:de:0c:d8:de:bd:1c:51:a0:bc:59:c6:c8:04:
         f5:b4:5a:06:02:02:2c:91:e3:7a:8f:bf:c5:4a:73:83:5a:88:
         24:4b:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:47 2025 by rpki-client