Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/70b8ace8-2781-39e5-b603-836008ada00b.roa
File:                     70b8ace8-2781-39e5-b603-836008ada00b.roa (raw, json)
Hash identifier:          Wt76Nd3ZdKXEyQgoXtSPrpxKVFekmTIzyl+dcJ+QwiQ=
Subject key identifier:   BF:76:3B:D4:16:8A:F7:07:11:AC:EF:A8:BF:36:3B:C4:82:FC:49:8C
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584B47003B12591FE7AEAEF94B00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/70b8ace8-2781-39e5-b603-836008ada00b.roa
Signing time:             Mon 22 Sep 2025 08:50:33 +0000
ROA not before:           Mon 22 Sep 2025 08:50:33 +0000
ROA not after:            Sun 21 Dec 2025 09:50:33 +0000
asID:                     9304
IP address blocks:        63.247.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:00:3b:12:59:1f:e7:ae:ae:f9:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Sep 22 08:50:33 2025 GMT
            Not After : Dec 21 09:50:33 2025 GMT
        Subject: CN=945ac66b-d781-4fcf-b859-764e21c86a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5d:8f:ed:2e:d1:fb:ce:b8:9a:20:a7:ab:4c:
                    06:ac:1c:1b:c7:b1:df:85:83:1f:57:43:2f:db:3c:
                    66:f5:b3:1a:e0:cc:f0:40:d9:33:7f:c3:35:01:37:
                    a3:c1:e7:b8:75:41:df:b5:0c:48:c9:b9:f0:7f:17:
                    d3:7e:8f:59:22:78:a3:23:f7:82:cb:a6:7c:1a:f8:
                    b6:16:18:42:af:31:d0:97:e1:e3:ea:52:48:cc:43:
                    bf:73:7e:84:aa:75:78:21:23:1f:90:a6:0b:94:9b:
                    0b:d9:9d:b4:ec:06:d0:7a:eb:2d:04:d7:b2:9a:39:
                    0c:eb:cf:23:a3:12:cd:19:35:bb:9c:09:23:46:0a:
                    2f:ea:20:5f:62:eb:01:26:13:8e:b9:c4:bb:b6:7c:
                    ce:e8:29:cb:a6:29:c5:5a:ed:90:6b:71:de:fb:46:
                    43:15:01:b1:53:f0:18:85:3f:3b:e5:f7:b1:24:69:
                    dd:9d:60:75:b9:98:23:74:dc:c1:17:3d:64:5d:0b:
                    e3:55:75:15:09:8d:e2:a1:1c:46:bf:36:68:cd:39:
                    35:6a:2b:d6:24:c0:fa:90:6b:da:7c:11:6b:d2:4d:
                    36:92:d8:52:9f:85:7b:45:3d:e1:cc:fd:f8:9c:51:
                    73:0f:1e:3c:ea:ed:6c:29:ef:82:14:dc:61:76:0c:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:76:3B:D4:16:8A:F7:07:11:AC:EF:A8:BF:36:3B:C4:82:FC:49:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/70b8ace8-2781-39e5-b603-836008ada00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.247.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a5:5b:f5:82:f9:8b:65:0d:2d:59:f4:4e:ef:ac:0b:a0:7f:
         5a:cf:d9:93:8d:a3:ac:73:8f:fb:78:86:e3:03:f3:9d:97:c9:
         1d:97:a3:bc:7f:fd:cd:c4:7f:75:90:d9:d6:04:dc:90:07:c5:
         80:bc:1e:5d:cd:28:be:ad:42:bf:e6:e5:f2:95:f4:2d:ce:c9:
         11:21:53:8b:ca:f7:52:f6:df:63:ee:02:47:a3:25:63:dc:14:
         cd:b9:f8:73:a1:2f:87:31:e4:6d:b8:29:75:8e:3e:0b:78:fc:
         04:ea:77:d7:fd:71:56:51:a8:69:ec:e5:4c:f0:e8:67:f6:17:
         bc:8c:79:fc:50:03:f7:4a:1e:4e:0d:9a:6a:f6:b8:20:c0:e5:
         14:e3:58:54:69:98:98:40:1c:1c:10:f6:0b:6d:27:8e:2a:16:
         7d:ab:e5:87:a7:d0:c4:3d:25:cc:ba:7e:f7:8d:23:f8:f1:5e:
         a0:2d:a3:cb:82:fe:4b:a8:17:5e:de:dc:b4:72:9f:f8:a1:46:
         3f:3a:ef:59:03:ba:e0:81:32:85:b3:00:d1:c2:bc:66:94:bf:
         41:ea:9d:77:0e:a8:71:7d:6b:52:0f:60:ac:ac:92:d0:67:66:
         d4:59:05:f4:29:e6:a9:6b:c0:60:6d:27:3d:76:b7:a4:fb:b9:
         c6:9f:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 14:50:27 2025 by rpki-client