Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/296f5ce9-a840-35a8-92dc-98d74ae7750a.roa
File:                     296f5ce9-a840-35a8-92dc-98d74ae7750a.roa (raw, json)
Hash identifier:          b9MJt8cPupgoX01AoIcs4muWi3xR12AHrjzXsPGxZzw=
Subject key identifier:   A0:34:FF:D9:28:41:6D:E2:E7:54:19:4B:67:78:53:37:3F:70:1E:C4
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584B80B7682BBAAB7C190B2F47E0
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/296f5ce9-a840-35a8-92dc-98d74ae7750a.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     55091
IP address blocks:        198.73.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:68:2b:ba:ab:7c:19:0b:2f:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=3e357d39-0a88-4960-ab5a-3e17cddedc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:3b:89:d1:e9:42:d1:89:b1:13:66:bb:05:
                    bb:94:61:2b:7c:e8:50:9f:fa:3b:59:3f:ae:61:be:
                    5c:4b:0e:ab:27:09:79:29:bf:7a:c8:b8:37:40:bd:
                    3e:69:20:03:34:2b:ad:0c:ad:f8:39:10:2c:bd:f0:
                    5a:1f:7d:56:10:d2:7b:cc:c6:4a:be:43:b5:18:b6:
                    e3:a3:6c:a0:64:8b:20:7a:b1:6c:5b:08:e7:f8:66:
                    0c:70:c7:2d:74:83:7c:ee:4d:68:03:3c:57:0a:79:
                    f3:04:4b:10:3d:fc:6a:67:78:3c:c4:3e:19:e3:0b:
                    57:7d:98:bd:2b:1a:c4:8d:5c:33:ab:c0:23:71:8f:
                    f7:8e:df:b6:eb:df:15:2a:65:a3:7d:0d:7f:84:4a:
                    9a:8e:de:e3:2d:e6:86:e3:70:61:c9:ec:dc:3e:33:
                    0b:82:db:02:53:00:b2:9a:f8:22:54:09:8f:46:ef:
                    b1:57:e6:18:cb:07:84:37:82:ea:40:d8:a1:e5:0b:
                    29:1f:4b:d1:04:4c:f8:67:9d:16:ac:8f:89:41:9e:
                    94:a8:d4:3f:26:6b:10:30:25:d3:83:46:4c:02:38:
                    08:7c:52:bf:f0:3f:ee:48:d8:7d:8c:c7:f1:c6:a7:
                    f4:d2:32:a9:8c:7c:06:9f:4b:92:35:08:58:aa:76:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:34:FF:D9:28:41:6D:E2:E7:54:19:4B:67:78:53:37:3F:70:1E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/296f5ce9-a840-35a8-92dc-98d74ae7750a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:03:ea:3f:6c:ad:56:4f:e8:6a:cf:cb:43:c0:2f:69:8b:da:
         cd:ce:76:aa:c1:36:da:10:c1:67:4f:6f:1f:3a:6c:70:b2:41:
         fb:0f:bb:8b:16:ee:56:2b:54:81:bc:3c:f1:18:79:89:fd:ae:
         76:1f:d5:57:ff:8d:13:f4:26:3a:48:88:cf:07:3e:cf:e0:db:
         99:6f:f2:b7:7a:14:9d:df:08:c5:79:b8:d6:8c:b8:71:ac:a1:
         17:b9:ee:a5:61:da:2f:bb:2b:2a:07:b5:fd:92:20:11:3a:48:
         24:98:aa:69:96:e1:65:db:62:ae:78:c6:ae:b2:33:b2:87:2b:
         50:bc:21:7d:1a:16:80:f9:0e:cb:b1:53:f9:7b:43:81:56:8b:
         2c:2a:0e:88:b5:dc:c3:f9:ff:3c:4a:b8:36:bd:f4:fc:9c:5b:
         03:67:aa:f9:22:bf:28:6b:d4:8e:67:97:71:18:bb:33:50:13:
         4a:02:80:a7:ce:e4:12:1e:27:75:e2:94:40:4e:ed:9f:d6:59:
         a1:bc:08:3d:d4:a1:8f:79:f3:95:59:fe:3e:9d:26:84:7a:a6:
         72:8f:e3:df:d9:b9:59:15:88:9e:62:36:26:cd:a1:7e:f1:b6:
         41:bb:94:86:e2:77:2a:e1:a2:40:07:8a:f3:79:bd:37:f7:d6:
         40:14:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:14 2025 by rpki-client