Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/76185599-c73b-3b3a-a4cf-d4e8504e2275.roa
File:                     76185599-c73b-3b3a-a4cf-d4e8504e2275.roa (raw, json)
Hash identifier:          eqIjXUiZjwxZIUy+F84Qkx/Sm1olbF0GvEcphMqZn3M=
Subject key identifier:   20:5E:03:15:E0:EF:6C:B5:52:27:1B:34:95:0B:9D:71:42:18:1C:B8
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584B0B76D0DD1235F40D4CE81820
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/76185599-c73b-3b3a-a4cf-d4e8504e2275.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     54858
IP address blocks:        216.243.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:d0:dd:12:35:f4:0d:4c:e8:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=05a8a4e7-4b8c-4519-9045-9173f5caf7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d2:43:28:68:f0:15:ff:7b:34:c8:b9:7f:29:
                    dd:f6:06:12:e9:e3:a8:00:f4:3f:ea:e3:06:e7:60:
                    2c:17:5a:a0:d5:62:36:dc:d5:96:e8:3b:f6:e7:32:
                    02:43:ac:64:b2:23:f6:cf:43:c0:6b:8a:42:4b:47:
                    94:ce:47:2f:2b:a4:ed:76:ae:63:64:46:5f:9d:d1:
                    3f:56:33:3a:1d:9d:ea:d3:40:79:35:7b:c6:11:7a:
                    6d:66:6f:e1:ad:63:ff:26:a0:54:1e:2e:c4:98:f4:
                    d2:bd:ce:02:63:28:6a:84:12:da:d0:b0:e4:07:a5:
                    59:63:cc:35:e4:ba:30:3d:03:c0:02:1b:c7:78:85:
                    84:60:5e:68:dc:79:ba:3b:a5:a8:cd:76:3a:d2:12:
                    83:73:67:84:70:a2:ae:9f:e9:88:7a:23:49:a7:4c:
                    5e:53:1b:24:17:3b:2d:ca:80:08:72:5f:b0:c1:de:
                    24:48:5e:e0:c3:e3:2f:01:e5:3f:fe:39:02:d4:2e:
                    0f:1a:c4:73:db:e4:19:92:ae:77:e9:87:80:ce:ee:
                    08:20:33:44:7d:02:5d:ab:2c:04:e3:5c:2e:fb:b5:
                    90:6d:42:59:fc:a6:d0:80:dd:ce:38:18:28:ed:93:
                    5c:eb:5f:0b:b2:61:9a:2a:b0:19:4a:89:dd:07:5a:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:03:15:E0:EF:6C:B5:52:27:1B:34:95:0B:9D:71:42:18:1C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/76185599-c73b-3b3a-a4cf-d4e8504e2275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.243.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0d:42:6b:3f:0f:e4:fa:3f:7a:e9:9f:14:dc:63:22:34:ca:
         03:2c:d5:42:47:50:b2:6b:7d:db:f1:ef:2b:a4:7f:7a:c2:ed:
         0a:ba:53:a8:0a:c4:f8:6c:e2:19:f0:9b:ac:b5:f7:fb:af:cc:
         f3:5a:d8:71:74:0b:71:c6:7f:96:5b:df:1d:4c:61:1c:88:6e:
         f6:be:3a:f6:83:6c:8c:33:b7:75:3a:43:5c:04:fc:09:ca:de:
         dc:89:28:3f:18:84:cd:0b:d2:96:ac:6c:65:01:34:f7:80:82:
         39:99:54:09:7d:79:51:08:17:92:c0:21:28:1c:56:2a:d8:14:
         4b:33:31:7a:ac:e2:c0:36:7e:98:89:e8:a7:fe:b3:b2:1c:5b:
         eb:0a:6a:a6:9b:a0:0e:39:21:96:a1:37:a3:42:80:1f:e8:dc:
         b7:b4:4f:4b:55:b8:0e:1a:d8:87:0a:5e:9d:3c:18:2e:2e:e1:
         35:77:87:84:72:20:db:b9:ec:78:33:b0:f4:99:2b:59:ba:78:
         07:68:1b:10:bc:56:b5:c2:08:51:93:d3:be:23:c0:29:80:3d:
         78:d9:d3:a9:43:8b:ae:20:c9:2a:dd:a9:56:51:72:6f:3b:0e:
         af:dc:b8:02:f4:18:35:d2:e0:09:2e:3d:e6:67:c5:aa:81:5e:
         08:1b:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:37:51 2025 by rpki-client