Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa
File:                     2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa (raw, json)
Hash identifier:          X/jMZQUm7ZvjEyNDAxEEk3OD8Om5YjDqZ1Z4yOxanjU=
Subject key identifier:   90:3D:98:5A:B9:89:26:B7:1D:EE:91:D5:DA:D2:8C:F9:F7:A6:A4:C2
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584B6201EEE6072268828D0776FC
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     9009
IP address blocks:        168.91.72.0/24 maxlen: 24
                          168.91.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ee:e6:07:22:68:82:8d:07:76:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=820062b0-cddf-4ef6-9955-9656bbd6c821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:72:2e:f1:07:e5:fa:7e:9b:c4:4c:c8:6f:8a:
                    3b:09:14:3f:99:74:6f:73:ce:a1:aa:be:ca:5a:95:
                    e4:6d:d6:8f:36:81:12:db:f2:73:a8:6e:31:0e:5c:
                    69:a6:c3:f8:15:48:37:c0:8e:74:93:c0:64:1c:92:
                    b4:92:3c:33:6e:69:d6:4a:9c:ca:b2:2a:18:35:2f:
                    24:1c:e2:22:7b:bb:07:fb:e7:61:f2:2e:d2:48:f5:
                    15:46:2d:a8:c0:1f:64:c6:8b:35:d0:1f:8c:31:b1:
                    7c:b8:d0:39:62:d1:96:4d:7f:c3:42:44:83:71:0d:
                    17:fa:f7:94:4d:37:27:95:69:19:58:e6:0b:bf:26:
                    3d:f8:12:7d:11:b1:84:2a:cb:5e:d4:6a:00:ad:ed:
                    0e:9a:d7:ed:21:a9:89:90:55:84:8d:52:13:9c:e7:
                    5a:3c:9e:ac:13:37:9c:4f:c0:d4:24:bf:9a:21:1a:
                    18:3a:0a:45:4f:5c:64:9c:25:2c:a6:b2:b9:f4:e3:
                    fd:ef:6c:54:87:0c:5e:fe:04:05:8d:4e:69:8d:6c:
                    78:5d:25:5e:80:6c:a8:c5:b5:da:89:b7:a5:c0:23:
                    a6:c7:e9:a4:33:15:c9:1f:80:2a:10:dc:10:9b:27:
                    b4:7f:2f:10:6a:1e:7b:28:d3:03:d2:4c:6c:48:7b:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3D:98:5A:B9:89:26:B7:1D:EE:91:D5:DA:D2:8C:F9:F7:A6:A4:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cf:4a:31:5a:f9:5e:f7:51:c2:d4:b8:53:bb:ed:5b:88:80:
         e1:14:61:b5:e5:61:94:61:46:c3:4b:5d:5d:3a:ba:5f:36:37:
         01:6a:d1:97:ee:35:9f:81:95:c6:99:88:96:64:6b:5b:e0:86:
         5c:20:5b:f5:63:f4:c4:b6:2b:80:3a:b4:98:3f:aa:69:09:2a:
         4e:3a:9c:6f:50:94:9d:ad:94:cb:cf:11:74:8e:fd:a5:a8:b4:
         f3:e3:9e:17:6d:79:9c:a3:30:64:22:c6:09:c2:1b:bf:c4:b3:
         db:5e:bd:77:5b:bd:76:ee:bb:b6:0f:c5:8e:37:b3:43:e8:b7:
         96:81:54:25:d0:76:51:68:98:bf:30:fa:04:a6:2a:2a:e4:6f:
         10:5b:76:18:df:25:8b:ae:ff:7b:da:2f:14:02:5c:3c:e1:b7:
         49:57:23:b4:d9:aa:22:33:2b:ab:24:5b:c6:fb:50:2e:61:66:
         4e:68:96:b6:42:9f:1a:2f:6f:20:e5:e5:38:03:a2:0d:ab:2a:
         cc:cf:55:40:28:34:f5:8f:e0:86:e2:42:cc:85:af:64:0e:2a:
         d4:0a:a5:16:a5:12:a5:af:17:71:ea:0e:ce:9e:59:eb:ec:0c:
         ee:d6:83:40:16:e9:5d:7a:08:e0:21:cd:cb:4d:6f:68:56:2c:
         2c:6f:0f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 13:55:35 2025 by rpki-client