Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/37d8317a-63d8-3727-8121-5e81bc5e9a95.roa
File:                     37d8317a-63d8-3727-8121-5e81bc5e9a95.roa (raw, json)
Hash identifier:          7iX790s6dbp9QafPuNyBHsBf2FVJ/hmVle5xdYvEpC8=
Subject key identifier:   E4:0C:C0:F9:EB:1E:22:96:BF:A8:56:28:DA:6E:7C:96:31:A3:F3:21
Certificate issuer:       /CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Certificate serial:       010D0C9F4328584B8EACC77D2718F003A7ED7B40
Authority key identifier: 12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/37d8317a-63d8-3727-8121-5e81bc5e9a95.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        72.13.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:c7:7d:27:18:f0:03:a7:ed:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=0d706c7d-9399-4839-92f5-76feb8491aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:4e:bc:1d:50:8a:b7:6d:e6:f7:f9:ab:1d:
                    4a:e8:b6:f6:35:d2:16:f1:0f:14:b9:93:a6:e6:82:
                    2c:ac:a8:82:4a:83:54:e8:33:5d:90:62:b0:8a:11:
                    08:d1:bd:85:33:d3:fa:b3:f7:f9:96:d7:bd:0b:5e:
                    89:c7:a4:e0:25:44:89:4e:87:3c:c8:ad:68:c2:b1:
                    b5:54:e6:8a:79:1b:ba:b9:02:90:99:75:82:69:55:
                    e1:38:c2:fb:b6:76:a7:8f:12:84:10:35:1f:9d:02:
                    3c:f2:0a:6a:a8:ae:6b:66:7e:d6:cb:00:5d:ad:07:
                    84:9d:20:7f:d3:a1:37:1e:4c:5f:fe:fa:06:2d:63:
                    12:b2:98:8d:e9:11:29:eb:d3:98:d8:57:77:2e:30:
                    74:84:79:a6:15:1a:cc:8e:6d:04:b7:16:b6:93:f1:
                    10:85:c6:bd:e5:69:24:65:a5:e0:45:28:f4:8e:6b:
                    ae:65:f8:48:0c:f7:58:43:54:5a:57:b7:8b:ed:ed:
                    11:e0:aa:9b:bc:aa:8a:a2:f1:cb:32:32:cf:97:ac:
                    8b:46:08:7b:66:81:bd:28:fd:f8:c4:0f:00:c3:96:
                    29:fd:cd:d3:42:d5:14:08:52:03:a8:aa:b9:d6:fa:
                    0b:8d:09:91:15:54:9b:3f:44:a7:c8:f2:19:51:4c:
                    c9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0C:C0:F9:EB:1E:22:96:BF:A8:56:28:DA:6E:7C:96:31:A3:F3:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/37d8317a-63d8-3727-8121-5e81bc5e9a95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl

            X509v3 Authority Key Identifier:
                keyid:12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:99:7c:b7:e7:6c:fc:61:3c:17:4f:85:01:df:d8:51:72:
         e1:79:df:d1:90:24:16:bf:26:14:b8:f4:c6:11:86:fc:51:ce:
         f9:ff:34:99:23:8b:9f:3e:fe:de:8f:97:39:77:d7:ec:98:9a:
         0f:57:31:ee:ba:6e:96:f4:fd:b4:37:2d:1d:60:de:10:34:2b:
         80:2c:66:45:05:4a:d6:b0:f8:5e:5c:5c:0b:c5:4d:a6:f0:50:
         87:d2:2d:8d:63:90:ef:3b:d2:11:7a:7a:38:5d:a9:82:6c:0a:
         24:c3:93:68:4a:ae:d0:5c:29:38:fb:78:4c:85:24:ab:93:b6:
         d2:65:70:d4:0b:93:4a:a7:c0:7e:4a:76:b8:13:19:92:77:f8:
         88:16:55:66:e5:cc:6c:73:47:eb:66:bd:3b:a3:b6:e5:a1:fb:
         ed:fd:6b:86:9d:93:ef:1f:42:e1:b1:8f:22:ac:ec:d1:51:d8:
         c5:6b:5d:2e:23:d8:6c:92:92:9f:ab:da:64:20:8c:de:93:ed:
         49:65:3e:4e:f6:da:21:46:e5:50:b6:e9:b5:06:66:54:03:58:
         8b:a8:be:79:dd:ca:34:34:d4:ac:67:d7:bc:50:6d:b0:2f:be:
         f3:2d:f9:34:56:7c:a6:b0:0e:73:0c:5b:31:b7:36:8f:88:2f:
         fd:6c:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:53 2025 by rpki-client