Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/9748637b-3ba1-390c-b464-8c7d77371bd6.roa
File:                     9748637b-3ba1-390c-b464-8c7d77371bd6.roa (raw, json)
Hash identifier:          TW0NivwUb+QJcU3QJdgSO1ly4sA/rBvfEUlfkmPJXwc=
Subject key identifier:   C7:22:05:76:76:03:F3:50:89:CB:49:B4:71:48:C7:CB:46:62:D0:FF
Certificate issuer:       /CN=73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8
Certificate serial:       010D0C9F4328584B1F016C95080967657AED1A40
Authority key identifier: 52:7B:70:BA:7C:3B:9D:0F:59:59:42:0D:91:87:3D:5D:B9:D8:84:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/9748637b-3ba1-390c-b464-8c7d77371bd6.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     62643
IP address blocks:        108.161.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:6c:95:08:09:67:65:7a:ed:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=280bf7e0-f7aa-4d83-bcd7-1e58170ae2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:23:8d:2f:3e:9e:ab:00:2b:96:5b:91:05:48:
                    29:49:f8:31:9d:3b:c0:f7:70:bf:1a:75:5d:6e:39:
                    a4:de:e1:f0:a0:04:75:e8:a4:a4:af:20:e2:29:14:
                    fd:4a:ba:08:ff:78:30:e1:49:f4:98:e1:ff:ca:5c:
                    c2:6b:e0:7a:91:64:91:94:99:39:ca:a2:73:53:a8:
                    40:b2:1e:51:5d:bc:b3:4d:21:03:df:cd:20:08:df:
                    af:8e:72:8e:57:cf:91:bb:fc:14:74:07:17:29:09:
                    3f:1d:86:2f:9f:9f:fe:15:0c:7d:cd:07:3c:9b:6a:
                    1f:20:fa:7b:26:09:36:ad:5c:c1:0a:99:6b:d2:49:
                    f2:bc:86:5e:41:57:55:26:7a:7e:4e:a7:75:c1:6f:
                    e7:14:08:d0:c6:21:20:e8:aa:b2:4a:58:ec:b4:1a:
                    0e:b1:f3:cb:4b:d6:68:7b:fa:02:ba:57:fd:fa:50:
                    4a:ea:1e:bf:6f:ec:29:d8:cb:89:d1:92:69:85:32:
                    74:9f:d6:c5:54:20:78:79:b8:39:67:08:38:e1:8e:
                    1b:bb:c0:9d:b1:8e:9f:43:a1:da:b6:51:05:8e:ff:
                    cc:29:a0:17:b3:17:ae:13:e9:b0:b5:92:ef:5b:72:
                    30:ca:4d:6f:24:12:4d:8c:10:4e:1c:cf:ab:f2:20:
                    30:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:22:05:76:76:03:F3:50:89:CB:49:B4:71:48:C7:CB:46:62:D0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/9748637b-3ba1-390c-b464-8c7d77371bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.crl

            X509v3 Authority Key Identifier:
                keyid:52:7B:70:BA:7C:3B:9D:0F:59:59:42:0D:91:87:3D:5D:B9:D8:84:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c8:b0:64:ba:39:de:21:2e:88:99:de:55:ce:de:da:0d:4f:
         7a:19:64:97:32:7b:f1:1f:22:57:cf:a4:cd:8f:a5:c5:31:57:
         d5:a3:1d:5c:53:d2:13:5f:3f:84:95:ce:a6:e3:b2:f4:4f:07:
         b5:bb:1d:39:ae:b6:dd:73:31:b7:6a:dc:bc:01:82:98:4e:31:
         60:1c:e3:53:b8:8f:ca:d7:f8:e3:57:00:6b:21:50:f1:42:bf:
         09:83:cc:60:fd:70:13:57:47:5d:83:65:e4:77:f3:f9:b0:8c:
         59:28:a7:fa:eb:a0:26:62:3a:95:40:f9:61:f1:c9:f7:8b:1c:
         0e:bb:fa:6c:af:b2:14:47:a8:89:c5:c9:81:63:d7:5b:6f:8c:
         b4:37:03:f9:e2:57:48:c2:52:9c:6f:a6:56:5d:71:8d:7b:05:
         28:4d:af:ce:d1:b9:98:f2:db:5b:ca:e2:e2:8b:ca:92:de:20:
         5a:5c:92:cb:d6:6a:61:2a:aa:71:ba:11:83:1e:5d:41:c0:d1:
         a0:0b:e8:8b:37:ac:70:fe:74:17:71:50:25:b1:d7:30:b4:3e:
         16:85:b6:dc:1a:ea:9f:26:f0:5a:ee:dd:4f:ce:5e:97:fb:7c:
         8c:ee:a4:f7:22:ee:d0:10:22:df:ef:54:9c:d7:37:ec:0f:88:
         f1:80:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:19 2025 by rpki-client