Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78ef8179-0060-3b10-9f4b-bb50fb19719e.roa
File:                     78ef8179-0060-3b10-9f4b-bb50fb19719e.roa (raw, json)
Hash identifier:          NpKm+Y03x6Vz1mAhr/8aRK3EAzsXUZ24sp6l9HyEM44=
Subject key identifier:   C5:07:A3:D7:F1:A8:01:61:AC:8E:21:73:FC:25:C1:96:7D:C5:90:A5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B1FBA5863331A1F7F4106EB00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78ef8179-0060-3b10-9f4b-bb50fb19719e.roa
Signing time:             Mon 08 Sep 2025 07:13:13 +0000
ROA not before:           Mon 08 Sep 2025 07:13:13 +0000
ROA not after:            Sun 07 Dec 2025 08:13:13 +0000
asID:                     9304
IP address blocks:        209.101.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:ba:58:63:33:1a:1f:7f:41:06:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  8 07:13:13 2025 GMT
            Not After : Dec  7 08:13:13 2025 GMT
        Subject: CN=c14d535a-c385-41fd-b0f9-c633c129b751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:82:97:e3:5e:f1:50:17:73:4b:6b:de:54:
                    0a:18:65:94:84:c3:3d:8d:42:fa:54:73:f9:ca:88:
                    4b:c3:10:ef:15:9a:ed:7d:2f:cb:8a:13:5e:ed:71:
                    15:e5:62:10:8c:5d:fb:69:f9:bc:6c:1d:38:c4:f4:
                    5a:00:4a:60:dc:97:30:66:66:80:1e:dd:39:21:b3:
                    e1:77:04:87:f6:33:e0:c0:84:31:3d:4d:cb:24:37:
                    59:97:d8:a9:1a:63:17:e9:a6:fc:9a:4e:ba:bd:ea:
                    a0:f8:3f:a0:a2:8f:dd:32:bd:61:9a:3d:b6:2f:71:
                    7a:2a:c8:a3:26:dd:8d:63:f6:4a:68:a8:55:8d:ea:
                    fe:f2:c3:16:36:3e:31:f0:6b:a9:03:47:34:47:46:
                    27:87:ec:b4:6c:4f:42:85:05:9e:1c:c2:64:e2:e9:
                    cd:80:9b:24:2e:5e:8f:db:b1:30:b3:40:34:b9:c6:
                    72:93:a2:58:55:c9:51:8e:95:54:a0:58:e3:00:f9:
                    f6:5c:5b:c7:78:17:d8:c3:77:7b:e8:39:5d:26:db:
                    a9:cc:1b:04:a0:90:5d:e0:ec:83:bf:ed:2b:eb:30:
                    66:d8:e5:40:b0:d9:ae:3f:94:4d:ec:76:c2:2d:5e:
                    c8:d9:fa:c7:66:17:5c:50:d9:a4:79:44:39:4f:4d:
                    b9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:07:A3:D7:F1:A8:01:61:AC:8E:21:73:FC:25:C1:96:7D:C5:90:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78ef8179-0060-3b10-9f4b-bb50fb19719e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ea:48:b0:73:02:75:cc:f9:bd:b3:e4:f5:e0:24:89:a1:42:
         8c:f5:3e:9e:0b:61:1b:1b:f9:6e:c5:cc:56:18:79:88:8c:a8:
         1e:24:aa:d7:83:ce:15:d7:54:e5:88:cb:05:dd:a5:30:53:ac:
         5b:ca:28:a8:cf:43:8b:2a:01:3f:44:e0:1b:9b:7a:11:64:1b:
         05:3e:56:c3:e3:84:e2:a5:59:e9:40:5e:42:07:ea:48:83:d1:
         46:fe:a2:56:b1:ba:8f:32:32:d2:14:90:0e:df:f9:f7:71:14:
         cf:f8:cd:7f:8c:ec:01:84:2c:9c:ae:2f:a0:62:06:0e:2e:31:
         0d:d9:9e:a8:42:d3:09:ff:d2:48:a0:c3:6e:2d:a7:18:da:85:
         56:28:a8:db:d4:56:c1:f4:98:32:2e:5b:5c:a9:6b:36:db:27:
         24:58:66:2b:cb:62:f3:f2:07:4f:31:9d:73:6d:9c:aa:68:eb:
         5d:08:90:38:a5:be:60:a5:8c:db:c0:3c:dd:de:ce:30:d9:27:
         cb:d7:35:67:1f:0d:ac:cd:4c:5b:44:01:bd:58:02:18:df:ea:
         b7:f7:54:24:99:a5:4e:87:fb:4f:f0:e5:ba:a4:ee:22:65:45:
         4d:f3:f6:3e:bf:b0:78:9d:15:d9:eb:4d:63:f8:60:b4:ec:dc:
         d6:06:8e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:01:08 2025 by rpki-client