Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/435905e5-34de-3007-9134-d658d6493896.roa
File:                     435905e5-34de-3007-9134-d658d6493896.roa (raw, json)
Hash identifier:          kuHSpY8dcahVjTJTouLwLqDMuWLhRZp9/NiZjgDwrFI=
Subject key identifier:   F2:95:5B:5B:BF:93:98:92:76:7E:DC:95:A2:8D:35:B1:8A:37:0C:99
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F4328584B153C11820F76160BC359D180
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/435905e5-34de-3007-9134-d658d6493896.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     63414
IP address blocks:        76.10.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:11:82:0f:76:16:0b:c3:59:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=5190ccf1-57f9-4012-bb37-4c2c881aacdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:ee:d1:1d:98:71:9b:e1:7d:58:a6:3e:86:
                    2b:e8:94:b4:7c:57:bf:78:2e:b9:35:78:a6:5a:0b:
                    29:f4:d1:70:03:bd:49:95:93:12:f8:96:6e:24:a8:
                    6f:db:b8:e8:c1:9a:2a:b8:f3:b4:34:aa:0e:a2:c7:
                    93:1f:26:21:1a:0f:c4:d4:d1:32:c0:e2:37:9e:9f:
                    47:cc:9b:3d:31:4c:5b:5b:fe:18:dc:7c:f3:13:2d:
                    3b:3c:14:a3:51:18:a4:82:3f:23:8b:fe:a2:6c:d2:
                    ca:02:8c:b8:28:e7:aa:42:ee:25:a4:22:cd:a1:56:
                    8f:12:33:13:33:a3:84:05:8b:1c:5a:cd:5e:f8:ee:
                    1a:e8:f5:aa:5b:b9:ea:c8:fa:d8:ed:4d:de:23:e1:
                    e5:7f:07:59:b3:da:3d:2e:7f:b7:5a:6b:8f:d9:e7:
                    08:84:18:2c:5f:90:86:99:e9:a3:1e:d3:3b:f5:dc:
                    3a:55:47:83:d2:df:6a:f6:df:bb:32:a4:e3:de:55:
                    9e:36:0c:5f:6b:84:85:b5:35:84:58:78:a9:a9:f4:
                    2a:51:ad:6d:7a:28:20:0d:d4:e1:54:9b:84:12:65:
                    a4:cf:dd:6f:cf:eb:50:27:24:8f:54:14:52:87:04:
                    ea:e7:b3:e1:12:56:27:7d:35:51:84:e7:a6:83:49:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:95:5B:5B:BF:93:98:92:76:7E:DC:95:A2:8D:35:B1:8A:37:0C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/435905e5-34de-3007-9134-d658d6493896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d3:c9:13:b4:40:e5:1e:fc:5f:ff:a2:4c:d7:cd:da:66:bd:
         07:fd:af:b5:9e:92:3d:4a:3f:4f:4a:4b:19:c7:37:27:ee:24:
         94:58:cb:37:85:ef:98:f4:28:eb:3a:a9:97:2b:a4:e8:85:11:
         d0:77:51:f4:27:c0:96:bd:83:38:d3:a9:d8:72:bb:94:07:f5:
         00:c9:95:f3:71:60:62:45:13:e1:d6:b2:81:79:d4:00:69:5d:
         f2:53:e0:0d:f9:f5:13:7f:a7:58:01:9a:fb:a0:2c:73:6e:19:
         16:dd:cc:a1:5f:71:d3:12:d1:71:ec:17:9f:a1:c0:0d:3a:d6:
         19:b6:43:4f:1a:19:2d:b4:e1:de:10:ce:e8:a9:22:80:a5:4c:
         5e:6d:01:90:af:ad:17:a1:84:fd:9f:6b:75:15:79:00:18:5e:
         8a:a5:d6:4d:39:3f:df:65:a7:57:56:cc:26:ff:73:77:9e:63:
         3d:ad:d3:75:8f:09:d9:21:2c:99:39:a7:a5:02:5a:b7:cb:58:
         1e:66:20:f2:69:64:ce:65:ec:d2:c2:8d:cc:bf:72:76:40:5e:
         83:58:f3:6e:20:a3:23:42:ba:7a:ec:19:47:cf:33:aa:5d:49:
         b5:af:56:e2:2d:ca:a8:c3:f4:a9:a5:95:67:2c:21:46:ec:e6:
         24:6d:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 04:12:38 2025 by rpki-client