Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/467239df-89dd-3784-b74a-cc1d8b1369ad.roa
File:                     467239df-89dd-3784-b74a-cc1d8b1369ad.roa (raw, json)
Hash identifier:          n58MFz4VpHHVBGxxjqdVA/fpXdDsKXbmvgK9UtMFSlE=
Subject key identifier:   98:6A:3F:64:BA:FD:44:D1:55:E9:76:E2:43:93:98:48:37:AD:E0:4D
Certificate issuer:       /CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
Certificate serial:       010D0C9F4328584B3AEC47E8C6D01A4750FBCF20
Authority key identifier: 73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/467239df-89dd-3784-b74a-cc1d8b1369ad.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     6079
IP address blocks:        68.69.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:47:e8:c6:d0:1a:47:50:fb:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=65ab59cd-04b8-4b71-a661-9ee370e9600c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:e1:92:92:63:27:1d:17:52:89:bb:5f:a3:
                    48:9b:62:38:58:0b:2f:a1:0f:f7:59:2c:32:1c:bf:
                    84:75:04:db:33:bb:c3:68:97:b1:49:16:59:f2:70:
                    b9:11:61:5f:b5:71:7a:e7:a4:b9:4d:99:2f:78:6b:
                    c7:fe:8e:59:2c:2f:33:4d:cc:1e:30:0a:38:48:be:
                    e5:56:27:db:6b:14:62:4f:3f:02:30:28:ab:cc:6b:
                    82:4d:f7:3d:8a:31:61:f5:fc:2d:c3:17:9a:83:9e:
                    2f:45:3d:62:b6:4d:8c:ec:5c:2e:a8:a1:e2:c8:8a:
                    c7:fb:c3:21:74:f4:08:a9:33:4d:2b:62:4b:92:79:
                    65:1b:fe:77:0e:db:bd:91:4c:b3:e5:92:32:82:56:
                    5a:fe:ca:c8:3f:ee:60:0d:c7:e2:59:7a:cf:7c:40:
                    f4:85:2b:3d:d9:91:2a:ee:0d:31:f8:f4:11:0a:1b:
                    71:95:44:7a:97:68:d4:b9:bf:13:d3:24:79:a1:ee:
                    bf:10:ac:c9:50:0b:4c:18:5b:3d:af:fd:75:b5:b8:
                    de:67:58:eb:2c:bb:20:a6:06:cb:bd:c2:74:82:91:
                    73:39:e1:42:e2:44:a7:4c:12:00:b2:74:fa:73:84:
                    c5:9a:30:8b:3b:f1:bd:ac:40:4b:bd:c2:10:54:5e:
                    37:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6A:3F:64:BA:FD:44:D1:55:E9:76:E2:43:93:98:48:37:AD:E0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/467239df-89dd-3784-b74a-cc1d8b1369ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl

            X509v3 Authority Key Identifier:
                keyid:73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d5:c0:df:38:6b:99:ea:95:31:80:b3:c1:3a:1a:65:61:a8:
         98:be:fa:d7:7b:eb:0e:03:2e:84:43:13:a9:41:03:52:32:94:
         c1:e3:ae:58:59:46:cd:7a:09:57:17:90:1f:d6:0d:48:52:cb:
         62:c0:69:3a:97:c1:d2:fc:dd:76:47:d9:50:29:55:f6:3e:b3:
         4f:43:34:2f:cb:dd:54:e7:56:af:1a:ac:aa:3e:66:50:70:eb:
         ab:6c:27:de:58:f1:69:d1:59:56:15:af:71:e8:a2:6c:14:cf:
         c2:75:73:3d:da:fe:d2:fe:66:fa:1a:37:2a:cc:9b:af:02:49:
         14:4b:a0:76:84:36:6c:2d:2c:5d:37:5e:ca:01:19:5f:19:5a:
         96:20:8f:04:64:8f:19:3a:9c:39:82:5c:df:16:c2:d3:e2:d8:
         77:6c:55:3d:af:0d:e7:ba:4a:2d:39:f9:bc:64:4d:5f:40:17:
         90:3d:b3:b7:29:3e:7c:1a:a3:6d:27:bf:65:09:55:f4:db:96:
         4a:80:4d:b4:d4:36:c0:41:7a:31:f5:38:cb:79:31:85:10:3b:
         18:dd:3c:d9:70:4f:ad:83:50:6a:c0:ee:4a:91:10:c9:9b:75:
         10:39:f4:93:b0:34:06:4a:c0:ac:cc:44:d2:de:59:cb:88:60:
         4e:7f:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:36:33 2025 by rpki-client