Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6323e789-7f69-3d7d-965b-3f00c3ad09d4.roa
File:                     6323e789-7f69-3d7d-965b-3f00c3ad09d4.roa (raw, json)
Hash identifier:          5GTQK+gFIXYMw4mmHPiGK8vUTcrrlkkNnfd7BKJdOZ0=
Subject key identifier:   97:44:80:F7:A0:BE:B6:68:6F:AE:AD:4D:54:7D:7E:C9:2D:65:7E:CF
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584B63673C78FE7F91DB0734E980
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6323e789-7f69-3d7d-965b-3f00c3ad09d4.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     20454
IP address blocks:        96.47.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3c:78:fe:7f:91:db:07:34:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=06c6772e-ad7b-4ef2-ae12-f91c4830f425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:96:a0:dc:37:f1:a3:f4:cf:b9:c3:67:6c:
                    64:8d:09:5f:1d:69:6f:82:9a:4f:f7:08:d1:3b:92:
                    df:0f:58:b4:fb:58:3e:05:ac:84:71:eb:fc:b4:6a:
                    98:73:a9:35:58:dc:fc:3f:e2:e0:3d:b9:09:9c:62:
                    d7:6d:5d:42:25:24:c7:51:14:28:f4:47:c1:15:5f:
                    13:26:8e:2a:a7:00:00:3c:76:78:4a:9f:6a:c2:52:
                    13:95:fe:7c:61:17:64:a2:03:a1:c0:0d:cb:92:3b:
                    5c:9d:38:1e:1f:ff:16:6e:f9:fb:5d:f7:72:fe:79:
                    b7:40:3d:42:c4:9e:58:aa:78:fa:08:aa:ba:88:3a:
                    51:61:f7:aa:6d:1e:ef:ab:87:0d:1d:33:8e:f2:92:
                    3d:91:2b:5d:d5:fc:fa:6b:c6:c0:b8:d5:e6:98:a5:
                    f0:88:be:26:0f:c6:04:42:f5:83:5c:4e:1e:77:46:
                    53:d8:0c:00:41:88:7a:91:0a:de:83:80:70:58:1c:
                    3f:aa:c5:9e:61:63:7d:3d:23:59:9d:c8:a9:ed:90:
                    43:34:6a:85:98:10:6b:73:31:af:ed:dc:60:80:69:
                    10:97:7e:95:d6:80:be:22:ad:e2:19:25:da:e8:77:
                    5c:90:15:56:a2:e0:d3:63:34:84:53:63:16:0c:23:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:44:80:F7:A0:BE:B6:68:6F:AE:AD:4D:54:7D:7E:C9:2D:65:7E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6323e789-7f69-3d7d-965b-3f00c3ad09d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:99:aa:84:63:2c:94:6c:f2:2b:cc:0b:e5:d6:88:2a:eb:e0:
         9b:19:d3:63:a6:9e:af:ea:ff:aa:2b:db:45:28:b6:e5:77:c7:
         af:97:91:ed:8c:74:e7:2e:71:55:04:f4:8e:ed:54:b6:c8:42:
         5e:29:df:db:15:5d:ba:4f:ed:45:ca:73:08:ef:6f:82:ad:d8:
         2c:c0:72:25:bb:36:5e:2f:32:aa:41:c8:ca:55:1b:21:88:2c:
         be:80:2c:6b:93:2d:84:2f:ef:99:c2:e8:e0:c3:a2:93:e6:3e:
         fe:f2:a7:ba:c9:16:7c:32:f7:8e:d9:1c:95:2f:a4:20:da:e4:
         1f:1f:13:00:0c:88:36:99:c4:c0:7f:fc:ac:7e:67:71:19:99:
         5d:92:85:f8:f5:4b:73:10:6c:94:a7:a1:4e:a5:aa:3b:35:3c:
         de:d6:63:df:08:64:9d:c7:be:39:d5:8a:9f:c8:20:1d:46:56:
         bd:90:15:bd:d6:9f:ef:5e:21:02:87:4e:4c:94:e4:0d:4c:71:
         63:0a:f0:77:c0:3e:57:11:55:58:cd:45:51:93:67:6c:a2:84:
         c9:c0:ad:7f:c9:de:d1:d8:f7:00:72:f9:72:22:09:76:e2:47:
         9f:bf:4c:b2:c8:e4:cd:72:03:fc:f1:65:6c:9d:2a:4e:4e:74:
         ed:3c:6a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:33:58 2025 by rpki-client