Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d0d4be3c-dd38-3a4d-8650-560e3c598965.roa
File:                     d0d4be3c-dd38-3a4d-8650-560e3c598965.roa (raw, json)
Hash identifier:          u+7lTxz9IhgkFLSFAxQLpFDCdYCyFEUDZzQvlIe62n0=
Subject key identifier:   C8:59:21:67:F9:73:7A:D2:B0:57:CE:35:8C:5A:2A:09:93:31:78:67
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B1D9C20E0CFFF9AF7499F1100
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d0d4be3c-dd38-3a4d-8650-560e3c598965.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     0
IP address blocks:        192.67.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:20:e0:cf:ff:9a:f7:49:9f:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=a25a7888-5c00-47b8-bec7-995e4a664f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:82:7f:fd:ea:b8:70:21:43:7e:8e:15:f0:
                    9d:3d:f6:5b:73:4c:e5:f4:97:84:8b:54:14:c9:24:
                    1a:07:d7:78:ba:f4:26:68:01:0c:32:b5:e1:fe:37:
                    c4:2d:d2:70:2c:7a:69:02:38:5f:91:e8:7c:83:55:
                    41:1c:00:3d:44:c3:98:8c:c3:16:63:2f:89:e0:b0:
                    d2:bc:9c:ce:c9:64:cd:42:90:c3:9f:20:f3:53:c7:
                    c6:b6:9d:24:95:0b:7f:0e:74:f9:bd:3c:dd:26:1c:
                    64:9d:c8:c2:61:d8:ca:35:22:98:02:5f:6b:5d:73:
                    f0:87:73:21:00:7c:5f:0f:ef:01:00:5d:aa:5f:c4:
                    6e:4d:29:a0:54:87:a2:a1:fa:8b:e7:ea:7b:7b:66:
                    9e:91:6d:59:b2:64:a7:99:c0:9f:7a:ae:6a:07:d2:
                    73:19:56:0b:9a:a3:53:60:97:89:1f:93:e6:64:7b:
                    06:17:ab:85:39:bd:dc:0e:b0:25:6f:20:8d:c2:fd:
                    31:99:7f:22:c8:63:f4:ce:09:4b:8c:c1:17:bb:fd:
                    bd:00:4b:97:81:26:39:44:68:4f:33:01:82:84:c2:
                    80:93:0f:0c:20:57:e2:91:87:0e:73:c1:f1:98:8b:
                    42:a0:04:2c:75:98:7b:ed:77:61:45:ca:b5:e3:9b:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:59:21:67:F9:73:7A:D2:B0:57:CE:35:8C:5A:2A:09:93:31:78:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d0d4be3c-dd38-3a4d-8650-560e3c598965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:69:1c:15:a1:54:42:a1:a7:ea:2f:7d:9d:c5:2e:27:64:
         a3:94:24:2b:6a:d9:cc:78:9b:e9:da:21:58:3b:ea:71:7e:9d:
         65:35:54:bc:77:58:32:85:79:14:85:42:f5:46:50:1a:8a:71:
         4a:f2:6d:14:41:eb:e3:65:26:9f:be:04:ab:a0:57:8f:5a:40:
         cd:ea:81:4c:6c:70:e7:6a:01:a7:5f:08:b3:33:b1:37:60:21:
         41:5f:42:53:39:47:e0:3a:6d:e0:ae:43:59:d6:5a:a0:6c:66:
         fb:2a:bd:64:7c:80:11:bf:70:d4:d5:8a:78:1f:db:52:f5:81:
         b3:c7:64:99:fa:36:ba:7e:dc:c8:05:51:d0:46:ff:85:0a:f8:
         63:35:04:e6:91:5d:17:64:55:62:f5:b9:0e:50:d7:26:41:31:
         5e:c6:4b:6a:37:3f:02:30:18:70:e3:28:7b:ca:f4:4a:58:f7:
         35:67:93:ef:f1:ac:84:6d:56:75:33:b9:77:ae:d0:9c:37:94:
         61:d3:2c:8d:ff:7d:71:3e:9f:a0:2f:4f:0f:de:79:6a:b4:d4:
         80:05:3e:59:d2:ff:19:5b:65:55:ed:76:cc:7a:50:3f:87:9a:
         26:2e:f0:14:6d:7b:a1:af:aa:1e:19:b4:cc:05:60:a0:65:ad:
         d5:52:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:07 2025 by rpki-client