Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa
File:                     0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa (raw, json)
Hash identifier:          9Nf1cCGYrbZbjookJnr3eIABPEPQl8z7OHHhju7qq5Y=
Subject key identifier:   0F:24:85:29:73:50:84:FB:1B:62:A1:63:6D:25:5D:B1:62:7A:94:DC
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584F35FF863B6B7AF739D37ECC00
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa
Signing time:             Fri 18 Sep 2026 01:48:09 +0000
ROA not before:           Fri 18 Sep 2026 01:48:09 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36103
IP address blocks:        97.75.224.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:ff:86:3b:6b:7a:f7:39:d3:7e:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Sep 18 01:48:09 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f2b7529b-b994-4abd-a2a4-74fc0a47f3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:00:f6:c7:88:5f:bd:ff:8b:51:48:40:d3:
                    09:ff:f8:bb:a3:57:17:ad:e5:f8:be:c8:3d:48:f6:
                    bb:5a:99:a2:3d:da:28:aa:ed:d5:21:1d:30:e2:f4:
                    cc:ff:79:6a:13:56:05:a7:35:d2:5c:54:06:21:27:
                    ce:6b:45:83:8c:14:7f:87:89:44:de:0e:76:b8:07:
                    66:e8:72:47:43:3e:ac:28:7b:ac:ad:8f:1f:dc:56:
                    55:46:a0:a1:1f:72:60:b0:ab:07:88:81:c2:c4:36:
                    ce:4b:e0:92:1c:c0:97:7a:70:ca:6b:9e:c6:a4:6a:
                    8d:d0:a6:bb:21:02:2c:55:64:69:27:d9:5c:ca:51:
                    40:58:90:fb:64:28:2b:70:16:88:fc:66:e3:52:ca:
                    89:f9:eb:ee:3f:28:41:39:41:e4:6c:43:2d:05:57:
                    24:64:79:6e:76:93:43:d3:03:fb:1c:40:ca:8b:a6:
                    f4:bd:af:2c:61:83:5e:d3:9d:77:bb:24:78:df:bb:
                    02:06:3c:82:f0:be:6b:26:c3:af:2b:1e:f4:13:90:
                    8e:6a:f2:b0:3d:ab:83:d9:e9:bf:c9:10:a2:62:93:
                    31:6b:71:61:60:89:61:29:34:64:64:f9:82:7d:dc:
                    97:5c:5d:2e:dd:10:e2:a3:6d:32:c8:0e:9e:c6:58:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:24:85:29:73:50:84:FB:1B:62:A1:63:6D:25:5D:B1:62:7A:94:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.75.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ae:50:d9:cf:76:f2:d8:51:f5:36:f4:10:cb:de:2f:96:5a:
         9c:0e:43:cb:b0:bb:f6:42:d4:ee:98:8d:f6:c9:10:ef:f3:31:
         40:c1:a9:19:93:17:f2:20:40:d3:3b:8f:0d:63:4d:c2:47:13:
         35:8a:db:54:b9:a6:81:67:63:d3:ad:4c:37:dd:3a:77:d0:7e:
         f4:15:70:c8:00:b0:d6:bb:09:65:22:01:4b:9d:6c:46:7a:80:
         b0:47:3b:22:2a:9d:f7:7a:a8:e9:85:a3:f7:bc:ba:96:69:37:
         f4:b9:82:a9:de:94:40:6a:49:5c:2d:ee:40:74:d5:68:11:eb:
         c3:21:90:1d:ec:e3:85:df:2d:bc:15:f6:f0:d1:ea:31:91:cf:
         f2:11:e5:cf:86:15:e3:5c:eb:ad:42:88:7a:78:6a:16:89:0e:
         85:c0:43:ae:af:e3:43:0c:57:23:9c:f0:f3:5d:93:bc:59:eb:
         a0:45:b6:a1:68:02:84:9c:59:4e:60:cf:47:31:19:9a:d3:0f:
         24:64:b2:22:63:63:b6:39:5f:93:9f:0e:d7:bb:d8:af:a2:f0:
         26:9b:4b:24:a3:1c:60:a5:82:03:98:3f:55:06:90:e9:64:0c:
         8c:f5:f4:0d:a6:6a:90:b4:55:39:e2:05:19:7c:b0:f4:c1:c0:
         09:6c:da:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 11:37:53 2026 by rpki-client