Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6a126d6e-350c-3218-8782-b483551489da.roa
File:                     6a126d6e-350c-3218-8782-b483551489da.roa (raw, json)
Hash identifier:          czKpiqohpUtZKLHT52s7pyrxHqMLaFxFSw5cVZvOMpM=
Subject key identifier:   FA:97:EA:26:2B:BF:F6:27:7F:40:85:54:EF:25:FC:CC:CF:F8:C7:B6
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584B63673F0DC971D1F72940F440
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6a126d6e-350c-3218-8782-b483551489da.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     20454
IP address blocks:        96.47.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3f:0d:c9:71:d1:f7:29:40:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=c9f75c51-0dd4-40f8-aeb6-6d7dcfbac64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:b0:87:0e:c4:d2:9b:03:9f:df:f3:45:0e:
                    2c:a5:95:ce:41:08:b1:87:bd:4d:7f:28:c9:55:67:
                    78:f7:56:5d:d6:7c:9f:82:3f:b2:92:50:de:05:d6:
                    56:6f:1a:71:02:3c:15:b8:bc:72:5a:db:4f:55:05:
                    98:23:d2:e7:0a:b8:2b:74:8e:3f:d8:a5:14:76:8e:
                    d0:48:7f:f7:54:d8:4a:fd:dc:a3:cf:17:d1:03:7b:
                    fc:33:ff:5c:57:dd:75:93:26:94:80:33:fd:fe:0f:
                    b5:dd:13:16:8a:55:6e:25:f9:e8:90:af:79:d6:8d:
                    8c:d9:cf:76:61:a9:2a:19:d6:50:4d:5e:15:4d:52:
                    c5:dc:96:10:28:ac:1f:d1:60:83:7a:3a:e3:1c:dd:
                    73:71:96:0b:e6:25:63:25:cc:09:40:37:c5:99:30:
                    7e:c7:ad:b3:ef:cd:46:5c:00:d4:5b:08:cb:80:84:
                    cc:21:54:82:de:01:52:bc:3f:c7:9d:ff:ec:90:06:
                    c0:b2:75:e5:69:22:5b:f3:57:5d:b4:c8:cc:64:da:
                    5d:3e:63:8f:a6:07:22:eb:05:02:48:f8:3e:c0:fe:
                    37:a4:fa:14:e3:31:cc:30:08:ee:e5:4c:87:81:c4:
                    25:cb:0a:02:29:5c:0e:cc:6e:fa:8c:96:77:f1:12:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:97:EA:26:2B:BF:F6:27:7F:40:85:54:EF:25:FC:CC:CF:F8:C7:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6a126d6e-350c-3218-8782-b483551489da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:82:c0:16:67:2e:81:ae:25:c5:3a:c2:67:7e:3a:d8:35:ca:
         96:c0:77:54:9b:32:35:18:bd:27:70:bd:a2:de:b7:f2:25:ea:
         1e:0d:ae:62:0d:18:1e:a3:bf:a0:62:86:55:44:67:d2:d9:6e:
         4a:27:31:35:0a:6f:19:5c:36:ed:fb:b0:c3:56:de:77:2b:a4:
         b2:28:48:83:f7:94:07:fd:c0:52:de:86:ba:c0:eb:b7:8e:e1:
         5f:48:54:2f:a6:32:a4:80:0f:2b:e5:26:ea:4e:2a:18:49:f8:
         b1:65:6c:56:3b:96:50:34:24:8b:aa:4b:09:29:a8:6d:35:d6:
         18:03:8f:52:db:73:6c:4e:17:bc:86:09:2c:56:65:4f:44:ef:
         ea:22:18:0e:2d:35:b1:76:be:70:4a:85:e7:77:f8:5a:c3:72:
         07:35:0d:e5:cd:c7:d8:79:54:85:29:b1:1a:96:2b:a5:fe:f7:
         f2:4f:f2:32:03:0f:b6:75:c4:12:68:8e:62:c4:56:30:78:16:
         73:b6:44:03:30:71:79:e5:cd:9b:98:bf:d2:73:16:b2:6a:8f:
         d3:28:37:95:25:eb:ff:64:56:fe:4e:10:65:29:f3:29:9e:0d:
         25:6c:14:16:46:5f:80:8c:31:86:e3:1b:79:e9:78:67:06:a8:
         53:76:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:36:49 2025 by rpki-client