Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/63e071e0-134d-3174-9f72-a877d4fa7e13.roa
File:                     63e071e0-134d-3174-9f72-a877d4fa7e13.roa (raw, json)
Hash identifier:          89NlJk1ygz7WB3DB5K7UUZ8tb5vr5d0C45gWYvLgteA=
Subject key identifier:   E6:EB:34:D7:ED:1A:35:1A:85:19:67:50:52:40:02:7E:3D:D7:75:2F
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584B7A3A32881F34AE4557CF3AC0
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/63e071e0-134d-3174-9f72-a877d4fa7e13.roa
Signing time:             Fri 10 Oct 2025 17:13:35 +0000
ROA not before:           Fri 10 Oct 2025 17:13:35 +0000
ROA not after:            Thu 08 Jan 2026 18:13:35 +0000
asID:                     397630
IP address blocks:        172.84.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:3a:32:88:1f:34:ae:45:57:cf:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Oct 10 17:13:35 2025 GMT
            Not After : Jan  8 18:13:35 2026 GMT
        Subject: CN=e8eea39d-d00c-424f-a7df-c146705739e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:c7:bc:c7:30:21:7a:21:38:ee:4a:96:e5:
                    ff:2e:ee:1d:0c:0a:43:7b:fa:f7:ca:b8:b9:c3:99:
                    90:f0:37:9a:b4:84:99:b8:96:de:e0:30:32:2a:f0:
                    37:32:31:f4:e3:a1:b3:02:ae:d2:9e:fe:8d:e8:2b:
                    ed:90:32:05:b4:30:33:43:20:87:f8:3c:ce:6b:87:
                    0b:34:41:e9:37:ba:10:3f:be:de:e2:f8:90:17:a6:
                    e5:16:e8:60:86:87:ea:fa:08:70:d0:1e:83:6c:c6:
                    fe:c5:d9:ea:27:fb:b9:a6:60:18:84:d4:14:06:54:
                    29:2d:0d:a3:d7:4c:a3:4c:6b:b3:81:45:24:0e:a3:
                    09:8b:ba:44:13:ea:bf:48:52:8f:7e:fc:cf:75:c0:
                    27:5f:80:3b:2c:21:10:4e:36:37:0c:7c:2b:be:6c:
                    9c:8c:4b:64:ff:2a:be:db:3f:1f:52:59:2e:f9:02:
                    8b:5a:ec:f9:2a:55:4b:45:3d:82:d4:fd:88:d8:93:
                    ad:a3:7f:f6:2f:2f:e1:7c:a9:19:1a:ae:45:0d:b3:
                    56:b4:90:83:83:d7:6d:b3:ff:cd:b4:ff:cd:3e:2e:
                    7d:01:c0:4a:32:04:c1:8c:6f:5d:59:33:ac:15:11:
                    78:3c:a1:0e:65:30:1d:a7:f1:8c:5b:99:77:4e:7c:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EB:34:D7:ED:1A:35:1A:85:19:67:50:52:40:02:7E:3D:D7:75:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/63e071e0-134d-3174-9f72-a877d4fa7e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:04:be:34:c2:15:c9:f3:3e:70:9b:21:30:01:9e:80:69:0a:
         2c:3d:52:ac:41:d0:35:5a:9b:f8:6f:a0:fd:6f:77:28:8a:40:
         b8:7c:d0:dd:39:72:e0:21:05:9e:ed:d2:5c:64:a5:16:00:4f:
         b3:25:65:d8:e6:ec:6d:74:cf:4a:69:2f:20:86:5c:5d:d0:b9:
         86:47:7e:ba:cc:4d:b1:b3:1a:f0:88:16:ef:98:74:15:8f:4e:
         5a:11:a9:3f:01:a6:c2:f2:74:d6:01:6a:3e:cc:8c:34:d9:2a:
         59:ac:9d:84:10:a4:7d:ea:08:ba:0d:1c:0e:fa:5d:88:ae:30:
         fd:7a:a7:c5:2b:2e:90:01:19:15:40:ed:14:6b:94:1b:e8:1e:
         94:d9:33:a7:98:1d:aa:78:10:7d:3f:17:8a:4b:de:0a:6f:42:
         80:63:31:23:70:f8:27:8a:a8:7a:24:01:3c:70:e9:d8:24:42:
         d4:17:6d:c8:e9:26:7f:af:5c:99:7d:7f:97:70:14:6a:70:79:
         2d:a0:7f:54:f1:3c:0d:00:e1:54:c2:01:24:96:e3:a1:02:ac:
         47:67:d1:f4:ee:b1:8e:a9:c7:72:0c:81:a6:b5:3a:2e:63:3e:
         a4:e2:53:ce:45:f9:65:ee:b8:a3:da:27:6d:a4:cb:c1:85:e0:
         04:02:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 21:19:02 2025 by rpki-client