Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/1f71de79-d7a3-323d-b703-ce8a0834c7d2.roa
File:                     1f71de79-d7a3-323d-b703-ce8a0834c7d2.roa (raw, json)
Hash identifier:          0Chuur4l79KzmlXqJ4sPSG3EN07ip7ro8LhzKOlFRXE=
Subject key identifier:   76:02:3A:7B:A0:E8:C5:42:06:D8:0E:F9:8A:87:58:55:BD:5C:FE:3F
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584B59A1CDB0AE225F231E5B6180
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/1f71de79-d7a3-323d-b703-ce8a0834c7d2.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396948
IP address blocks:        146.71.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:cd:b0:ae:22:5f:23:1e:5b:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=adf5dd57-07be-41f9-82f4-6d3b18c5fd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:82:d6:f5:8f:0f:06:28:82:e9:0a:dd:82:
                    c0:4f:fd:d8:c1:33:0b:e4:65:05:cd:fd:4f:07:74:
                    e7:82:a6:29:3e:9f:52:c1:c0:92:e3:58:99:df:49:
                    45:71:8d:a1:b3:24:e4:ec:2d:b3:33:12:df:a1:27:
                    17:b2:81:36:04:f8:72:f7:7f:05:ec:21:d3:b3:fb:
                    59:70:15:f7:87:3f:09:0f:bb:e4:1e:9d:c3:81:d1:
                    35:3c:13:a5:d6:58:c3:59:7d:10:e1:5a:22:29:13:
                    66:af:ed:8d:7b:04:99:3e:f8:1a:ef:e3:ad:7a:7e:
                    91:de:b7:b4:2f:ac:de:67:ca:64:f3:9c:9c:93:87:
                    63:92:91:dc:17:b7:37:3f:de:a9:8b:9a:41:11:53:
                    25:e3:5f:a0:70:b1:c6:d6:ba:99:a3:39:31:9f:0a:
                    38:6c:d5:fc:60:99:06:fe:a0:1f:23:90:4e:73:8a:
                    ec:f9:93:97:b0:91:d9:f8:5a:63:60:3b:16:62:d8:
                    e0:87:43:8d:46:62:59:cb:bf:59:ab:87:02:c2:19:
                    1e:3f:c2:43:75:de:cc:53:bd:52:de:34:25:e9:4c:
                    d1:24:58:61:6d:01:f3:66:30:90:6a:de:b5:d4:2e:
                    d0:9a:7e:4b:4e:94:04:35:85:ba:38:f2:79:ad:18:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:02:3A:7B:A0:E8:C5:42:06:D8:0E:F9:8A:87:58:55:BD:5C:FE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/1f71de79-d7a3-323d-b703-ce8a0834c7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.71.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:fb:bf:2d:a0:d9:1d:0d:01:a7:0a:7b:52:54:1b:bd:cc:
         9e:f8:53:fc:36:d4:26:6f:9d:2f:6e:b0:39:67:fc:bf:4e:ad:
         b1:90:08:ca:a9:6e:b3:90:37:9e:57:88:07:41:51:2b:df:7e:
         a1:8b:0a:60:42:7c:36:e8:c1:90:8c:d8:d4:36:7c:20:f8:52:
         b2:dd:d7:04:28:8e:8b:3c:06:4c:6f:f9:5b:5f:0b:97:ba:3d:
         c2:63:5c:a2:ef:49:d8:30:a4:a8:08:ac:0c:65:24:93:5c:6b:
         fa:ed:b5:9f:9d:e6:ca:b9:e0:c4:64:4f:0d:60:79:9b:89:cc:
         2d:66:d9:cc:e0:03:93:61:2a:af:a2:78:26:5c:03:78:0d:cf:
         c4:ff:a6:b0:05:9f:01:b2:92:0c:d6:df:d7:80:39:ff:8c:56:
         3a:e8:f6:e2:a9:b1:0e:86:fb:ab:dc:e5:e0:04:2e:03:d5:b5:
         0e:a2:0f:d0:91:6d:8a:a2:37:0a:61:7d:b6:de:95:e9:55:a6:
         3e:12:d6:e4:bd:62:84:8e:3f:77:a6:19:7c:9e:ef:85:29:a3:
         7f:5c:4f:44:d4:35:47:bc:ba:e1:f8:a0:22:44:5b:d2:32:d8:
         c1:0f:59:de:bf:d5:90:01:30:3e:fa:b0:c4:04:0e:74:65:fc:
         33:0e:87:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:35:10 2025 by rpki-client