Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/84669d52-d1dc-32bd-9c81-6aacf91bb40e.roa
File:                     84669d52-d1dc-32bd-9c81-6aacf91bb40e.roa (raw, json)
Hash identifier:          hxeu2u9xScA0sjxbKbUx0c5WwtYKJ7UG+1YkaGHT488=
Subject key identifier:   51:09:35:86:21:C1:47:E1:88:63:D9:E5:8B:25:BC:0E:44:48:5F:FD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B3FAC8922C19BD82895BCA440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/84669d52-d1dc-32bd-9c81-6aacf91bb40e.roa
Signing time:             Fri 19 Sep 2025 17:51:16 +0000
ROA not before:           Fri 19 Sep 2025 17:51:16 +0000
ROA not after:            Thu 18 Dec 2025 18:51:16 +0000
asID:                     0
IP address blocks:        96.42.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:ac:89:22:c1:9b:d8:28:95:bc:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 19 17:51:16 2025 GMT
            Not After : Dec 18 18:51:16 2025 GMT
        Subject: CN=bb556fa2-d171-49dc-9744-394b5a12374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:98:5f:2f:b6:d3:5b:87:dd:29:5f:a9:0e:
                    99:22:62:45:37:5a:c2:23:8c:51:5e:48:df:45:52:
                    bb:b1:14:d6:cc:75:08:69:82:c6:28:4c:fd:b2:1b:
                    b8:ac:e0:85:b6:c7:e6:12:94:8a:f7:5e:dc:ec:a5:
                    19:e5:0b:8a:a2:ae:d8:e2:57:9c:48:40:ff:67:05:
                    20:f2:d0:5f:18:7c:72:d8:76:0f:70:c9:46:0b:62:
                    f0:c5:0f:83:cf:bc:5d:7f:8e:5f:85:d4:f9:5f:43:
                    a5:fc:fa:ea:99:a9:7c:78:18:9e:76:90:a4:30:5e:
                    a5:bb:0a:56:a6:96:38:99:3a:1d:63:8b:62:77:76:
                    32:16:aa:d9:b7:09:0c:75:be:e2:25:0f:49:00:d8:
                    7f:a7:4a:9b:fe:2f:8d:15:b1:64:2f:55:d1:7d:b6:
                    53:ad:c4:d9:1d:3d:1d:70:17:58:a8:1a:29:26:98:
                    d3:2a:86:53:09:89:1a:32:6e:4c:78:87:92:6b:52:
                    9c:1c:47:f4:c6:98:c4:db:f3:e5:41:66:d6:86:5b:
                    d6:63:97:18:df:59:a1:0f:46:d6:ba:8a:b0:ea:b6:
                    cd:8a:55:b5:19:88:2d:d0:00:f4:5e:3b:ba:78:e5:
                    ff:70:a8:56:06:56:ed:0e:72:b9:e5:00:3b:45:46:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:35:86:21:C1:47:E1:88:63:D9:E5:8B:25:BC:0E:44:48:5F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/84669d52-d1dc-32bd-9c81-6aacf91bb40e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.42.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b7:73:d5:04:bb:4d:ed:fe:8f:d0:d9:8a:ab:2d:77:51:28:
         f9:59:d1:66:f6:2b:06:1b:f3:f5:0b:26:3c:21:fb:9e:b0:1f:
         d1:5e:c8:da:d1:e3:66:ab:38:68:52:da:2e:9f:e8:96:c4:95:
         da:ae:42:2c:c2:d2:21:01:90:6a:50:21:09:f8:d1:16:05:be:
         6f:59:6f:22:97:e6:ed:8c:7d:67:2c:2b:91:b5:3b:2b:2b:2c:
         b5:16:9c:5b:33:86:09:71:5b:78:ca:35:23:91:14:32:aa:a2:
         0e:da:32:4c:30:9f:63:24:a0:1f:65:b4:b6:23:65:8e:61:6c:
         d7:f4:03:86:f5:cb:48:0c:5a:7a:64:71:ee:7f:a3:62:bf:87:
         b2:0b:c4:2c:f3:d8:e4:5e:5f:c9:39:10:4c:d0:ea:dd:b8:c1:
         91:dd:48:47:69:c3:09:08:5e:31:c6:bf:52:12:b6:f8:63:fd:
         03:e2:5d:79:e7:a0:c3:dc:2c:ed:05:22:03:44:7f:a9:af:fa:
         68:10:0b:51:9b:1d:ee:d1:1c:96:f3:0f:28:32:67:61:07:19:
         99:6b:51:e1:df:f8:a9:a0:e1:0c:39:1a:1c:76:7a:ab:a8:af:
         5d:dd:04:a1:3a:36:1a:cc:46:1e:0b:46:28:e4:9e:d4:1d:d5:
         85:1d:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:06:42 2025 by rpki-client