Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa
File:                     ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa (raw, json)
Hash identifier:          hadYw/rjLe6PzMwE+QqIetxBVfRBE3arGiEpG3Cw8fU=
Subject key identifier:   A2:A8:60:5B:23:13:A5:41:3B:63:4F:9F:50:91:13:0B:50:43:A0:4D
Certificate issuer:       /CN=496c1a5a-5b64-430a-8aea-c56d0c350c78
Certificate serial:       010D0C9F4328584B7DECC4F2DAE2AB862945DC68
Authority key identifier: B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     26938
IP address blocks:        208.76.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c4:f2:da:e2:ab:86:29:45:dc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496c1a5a-5b64-430a-8aea-c56d0c350c78
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=a4397cdc-3574-4df3-967f-9c89f961b442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:5a:1e:ad:b8:6b:b4:59:bb:24:a6:99:bb:
                    ad:9b:79:7f:35:d7:e9:6a:e4:f8:a4:e6:77:78:98:
                    06:6e:ab:b8:18:8a:e4:8b:9f:c4:84:57:b7:14:35:
                    13:71:35:6e:cc:10:3c:e1:0e:fe:e9:ca:1d:f4:5e:
                    c5:f4:47:3a:5b:7a:e4:8e:23:6a:2c:17:02:25:e9:
                    94:db:85:ed:7e:8f:19:6a:80:85:4a:86:a5:f9:5e:
                    13:e3:c1:82:83:66:f1:1b:0f:45:6d:56:e0:1c:bf:
                    f4:6c:e4:58:6a:a2:8c:fe:99:ff:31:3b:d4:0e:1d:
                    30:aa:3f:5f:0a:19:17:a8:67:e8:7f:4d:04:c8:cf:
                    cc:2d:99:8e:a7:12:55:4a:28:f6:90:0e:0d:ad:40:
                    94:a2:60:bd:2b:aa:d0:61:b9:c4:f9:09:c2:63:31:
                    72:f3:6d:38:22:05:c4:80:e6:62:90:96:5c:bf:a3:
                    46:33:64:f7:0b:aa:b2:39:9b:05:3e:19:57:7f:d2:
                    13:1e:ef:19:49:a9:51:5d:64:40:39:2d:4b:6a:c8:
                    e6:f8:d7:cd:14:45:7c:7e:f9:a0:ea:c6:13:1e:da:
                    c6:e8:bd:88:c2:42:9f:68:52:b5:25:eb:ad:46:46:
                    0d:96:73:69:39:54:1b:f0:92:5d:50:17:9f:b9:d8:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A8:60:5B:23:13:A5:41:3B:63:4F:9F:50:91:13:0B:50:43:A0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl

            X509v3 Authority Key Identifier:
                keyid:B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b8:1f:98:be:ea:eb:22:0d:d7:e7:d9:e5:0c:e2:58:1c:3d:
         81:7d:9f:fb:c3:07:23:47:f5:3b:47:9c:d6:1b:12:09:ed:8f:
         b2:f1:02:e5:85:41:07:f4:1b:88:fe:f1:c8:c8:8c:1e:37:a3:
         0c:83:cd:81:96:6c:0a:7e:a3:86:3e:71:d1:ab:90:92:a2:be:
         df:2f:37:16:6e:6e:96:38:29:8a:13:e1:3b:cf:a2:3d:3c:49:
         7c:63:41:ea:24:e0:6f:1f:a0:11:07:0b:2c:ef:b3:95:27:84:
         8b:fb:0d:f2:7e:53:23:8d:50:f2:f5:42:b6:2b:65:26:c7:cb:
         9b:cc:62:49:22:cd:2f:ff:bc:30:a0:e9:de:1e:a3:33:40:ce:
         ef:0f:63:b6:85:1f:9d:38:7c:2b:b1:76:36:ac:a8:02:9f:c5:
         32:d7:8f:74:1a:9d:39:7d:dc:6f:1d:2e:0a:1f:81:29:de:83:
         9d:cc:02:0c:01:df:0f:d5:e1:4a:8a:fa:9b:fa:e7:77:24:7b:
         eb:9e:89:a1:08:06:44:39:a9:80:25:cc:c5:93:5f:0c:65:df:
         36:48:eb:53:cf:50:04:ba:ba:ab:d2:f3:6c:f8:92:7c:b8:c3:
         af:f7:ae:c5:84:50:20:52:73:0a:ad:77:6e:99:07:11:a6:42:
         9a:ee:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:49 2025 by rpki-client