Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f84d48a7-f7c4-33e0-92ec-0eba6caff7e0.roa
File:                     f84d48a7-f7c4-33e0-92ec-0eba6caff7e0.roa (raw, json)
Hash identifier:          RTZjYNuoCBL4xF/H252HKrYfifta16o0VdjoxODtMG0=
Subject key identifier:   38:67:C2:D0:D3:A3:4B:72:BD:C3:5D:97:C6:D5:16:34:D0:81:9B:87
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584B08ABF020B78784F17200C940
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f84d48a7-f7c4-33e0-92ec-0eba6caff7e0.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     18825
IP address blocks:        209.92.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:f0:20:b7:87:84:f1:72:00:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=8e632cf0-32ba-47c2-9bb5-34d29ae2ff8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bf:1b:87:2d:47:04:8e:fa:92:c1:1d:61:e3:
                    1d:16:b4:98:a6:b4:5a:7a:17:cb:53:c1:26:77:f4:
                    dc:b7:a7:f0:68:f3:06:10:69:f8:f6:d3:b8:79:1f:
                    eb:7a:e2:7f:a0:56:cf:d7:2c:62:c3:80:89:6a:31:
                    b5:1f:33:03:9e:d9:4d:b4:4d:47:b0:4a:c1:df:9f:
                    f0:95:94:53:a4:02:84:02:89:95:f1:a7:ee:fd:cd:
                    a5:8e:94:62:b6:68:1c:6d:d9:a6:bd:80:89:82:58:
                    be:29:16:19:6a:7e:f6:9b:1e:1b:a9:6f:fb:9a:3c:
                    67:23:1c:fe:d0:0a:b9:29:22:22:cb:d3:3e:8c:8a:
                    33:21:2b:d6:36:d6:77:ab:45:58:d2:2c:bd:a1:10:
                    35:c2:b1:07:f6:11:29:0e:6a:86:f8:a3:b2:bd:3e:
                    f5:8c:02:0b:5f:3d:7e:ef:62:36:b2:55:7b:99:82:
                    8a:0c:5f:9e:b1:92:b8:6b:40:65:ce:25:9f:60:90:
                    6f:21:18:f8:1a:d7:c2:20:4d:8c:3f:73:88:be:40:
                    ef:3c:de:de:fc:08:17:91:e5:68:b7:fc:88:12:28:
                    33:3c:c7:24:ca:f9:ea:85:60:49:1c:68:d4:09:3f:
                    c4:3a:e7:d6:a4:6e:c2:21:43:db:91:0a:6a:a6:7a:
                    89:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:67:C2:D0:D3:A3:4B:72:BD:C3:5D:97:C6:D5:16:34:D0:81:9B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f84d48a7-f7c4-33e0-92ec-0eba6caff7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:ab:ec:16:48:8c:75:f0:e3:0d:86:e8:86:5a:af:2f:4d:
         aa:f7:48:84:72:94:38:07:5e:8b:aa:a3:af:72:0d:7b:3c:e5:
         33:ac:46:0d:8d:32:83:a1:a7:1e:ef:dc:8b:6f:8d:20:53:6d:
         f9:0f:c7:8d:ea:52:de:b1:94:bc:1b:7b:b6:70:35:87:93:6a:
         67:d2:62:b7:b0:65:53:d6:72:5c:02:17:5d:f4:84:ba:53:d3:
         7b:9b:9c:ba:46:d0:bb:0c:e4:1c:cb:e7:85:17:6b:b4:cd:1f:
         3d:b3:93:c9:20:4a:e7:87:51:a6:52:39:72:69:44:f4:d9:84:
         24:77:2a:8e:88:28:a7:bf:36:c2:a7:4e:24:2e:fd:64:e4:2a:
         aa:5a:0c:1c:b4:bd:dd:28:b8:55:91:7b:97:27:1a:b7:31:b3:
         25:b1:bb:5e:77:ac:2c:6b:dc:63:af:a9:dd:95:81:b9:70:57:
         c8:81:c8:ed:b2:67:cd:07:7c:2a:f9:2f:d8:5c:4d:fc:6e:c9:
         1d:2f:76:d4:5c:8a:66:3e:43:80:57:4e:a6:ef:d6:e8:fe:8d:
         a3:7e:12:06:14:53:8d:6e:f7:48:c2:56:aa:de:a0:f6:2c:fb:
         64:bd:08:35:87:72:e5:d2:85:00:1e:a1:5d:ea:49:eb:a9:1a:
         5b:78:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:19:47 2025 by rpki-client