Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2a6e926d-acf4-3249-be9b-9a8609a07acf.roa
File:                     2a6e926d-acf4-3249-be9b-9a8609a07acf.roa (raw, json)
Hash identifier:          myg93L8xsuCtE+Xo4bPYonH/ydOcR8/7H3u7NJml+DU=
Subject key identifier:   DA:7D:1B:35:F9:98:68:E5:B8:F2:B2:F3:AD:F3:D1:AA:5C:2F:E0:75
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B5B7B778E42373406E2E1AE00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2a6e926d-acf4-3249-be9b-9a8609a07acf.roa
Signing time:             Mon 29 Sep 2025 16:55:02 +0000
ROA not before:           Mon 29 Sep 2025 16:55:02 +0000
ROA not after:            Sun 28 Dec 2025 17:55:02 +0000
asID:                     0
IP address blocks:        96.58.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:7b:77:8e:42:37:34:06:e2:e1:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 29 16:55:02 2025 GMT
            Not After : Dec 28 17:55:02 2025 GMT
        Subject: CN=9a138854-1a00-401d-a1a6-a7a2280d3606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:94:f4:a9:68:26:7c:d3:11:08:7e:3a:72:
                    d0:f1:65:98:f8:f2:4a:f6:7e:b3:0c:44:ff:b6:44:
                    d6:c7:a7:3f:a6:9b:f5:9c:24:29:15:5d:0a:6b:83:
                    7a:38:5b:8a:23:65:ea:03:81:2a:c4:e1:62:71:ee:
                    f7:98:fa:ac:a2:a4:92:b8:3f:7e:68:10:12:88:f5:
                    7c:25:8c:69:db:51:b0:e1:e9:af:d1:0b:2d:a0:a3:
                    38:5b:a5:2a:f1:5e:ab:34:fe:83:c6:78:a2:0c:7f:
                    dd:e9:0d:a2:16:b8:36:42:d1:e8:fa:bd:18:d3:cd:
                    8c:be:24:a4:00:31:e1:bb:14:d6:bf:5c:70:09:99:
                    64:f9:72:df:9b:5e:52:ff:b9:3a:69:80:a7:f8:04:
                    e0:42:bc:b1:c5:8f:1b:ba:cd:25:9e:a2:9b:b4:06:
                    17:86:61:43:2f:fe:1e:74:ec:b5:7b:46:66:d4:47:
                    da:7a:11:6f:a9:b6:b5:ee:17:e4:7e:e9:a8:bf:ae:
                    5a:82:42:84:9b:ef:2b:79:85:60:db:87:4a:95:49:
                    32:1b:01:f6:7f:13:64:d2:88:2e:0a:b1:c8:bc:3a:
                    19:82:bb:e6:e3:1f:1c:73:22:3d:6e:8f:5e:9b:6d:
                    dd:93:78:f4:6b:2f:77:16:a4:ef:8b:d7:d7:0d:ae:
                    be:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7D:1B:35:F9:98:68:E5:B8:F2:B2:F3:AD:F3:D1:AA:5C:2F:E0:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2a6e926d-acf4-3249-be9b-9a8609a07acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.58.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1b:95:d4:9f:1e:d3:e4:e2:43:d4:71:f9:d1:47:de:27:b5:
         0e:19:ee:e8:de:59:78:d2:c3:c4:42:cd:a3:04:cc:ff:e9:12:
         c6:3d:f9:51:0a:1c:9e:d5:a1:19:54:22:87:06:5b:64:28:87:
         2e:f9:75:22:a8:68:d7:3c:f3:23:78:b0:80:4d:27:73:9c:c2:
         fe:71:64:50:55:ad:32:51:32:17:63:97:37:7e:dc:ab:e0:95:
         d7:aa:47:c9:f7:68:ee:df:9b:34:d2:17:b2:94:6a:40:75:33:
         0c:35:85:ef:86:08:df:c3:44:fe:72:43:95:a8:7f:08:d1:11:
         5b:96:c9:b5:29:47:8b:71:1f:3b:f9:78:c7:4c:45:2c:c4:b7:
         bc:97:6c:83:aa:3f:48:af:64:3b:6c:e8:98:ee:39:45:14:8c:
         0e:70:a1:4c:7f:f0:99:59:38:1e:f8:85:e0:a0:d7:13:1d:fe:
         21:07:2f:8a:0e:c8:ec:ab:03:91:52:36:9a:bd:54:de:73:68:
         f3:64:23:a2:30:e4:2d:36:80:86:9d:17:e5:03:cc:01:2a:61:
         6c:e2:81:0b:34:04:0a:3b:df:30:23:02:d4:04:c0:c2:6c:62:
         0d:3e:9a:02:f7:46:37:d7:94:e8:01:ca:3e:b1:97:af:ba:c8:
         c1:5c:74:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:57:44 2025 by rpki-client