Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
File:                     c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa (raw, json)
Hash identifier:          2SoV6DGijiQimYYijts1MOCNpj9BjxDTDCBPl+S6jtA=
Subject key identifier:   7F:40:CD:05:A5:53:9F:4D:BB:CC:3C:13:9D:0E:5B:27:B8:B8:71:B9
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584B7DECA5858E56D86003084980
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     61317
IP address blocks:        94.72.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a5:85:8e:56:d8:60:03:08:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=257c5e27-a91e-4077-b84d-9040697e4891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:7e:d1:59:09:09:7c:87:9f:6b:9a:99:47:
                    8f:24:5b:be:12:88:43:64:36:ff:08:f3:bd:3f:53:
                    b4:07:c6:ed:26:9b:02:c8:05:8a:93:45:ef:df:46:
                    ec:1c:45:29:42:40:50:6c:7a:13:2c:1f:c3:12:bb:
                    86:31:56:51:cc:93:b2:ac:d7:28:74:70:f7:5a:fc:
                    e2:22:f4:15:d8:2c:8d:94:66:2b:0a:01:cb:7b:f4:
                    ed:84:56:6f:51:e1:62:60:e8:3e:0b:db:7c:09:f5:
                    fc:7b:83:dc:4d:84:83:92:f2:46:58:ca:0e:ea:26:
                    64:7f:76:80:1f:63:af:ce:87:b7:c9:fe:ab:81:0a:
                    16:34:f5:cc:c6:36:04:87:16:4f:92:39:51:db:e2:
                    f9:30:8f:17:55:02:a5:81:87:4e:96:26:34:7e:17:
                    d5:cd:5f:8f:0a:4d:37:fc:bc:e8:f7:09:6b:21:a8:
                    5a:b6:2f:ac:0e:58:5d:58:e0:f5:08:22:0b:e8:9a:
                    16:f2:4e:4b:6e:ca:17:43:32:36:22:d0:5c:63:6c:
                    12:f2:43:77:6c:e3:83:1a:76:bd:39:c0:02:c1:79:
                    fe:ca:ff:29:b3:d3:99:32:e9:a7:9b:28:48:57:b2:
                    78:c6:96:92:9f:12:24:ce:89:71:7d:c8:3f:1e:3e:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:40:CD:05:A5:53:9F:4D:BB:CC:3C:13:9D:0E:5B:27:B8:B8:71:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.72.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:75:52:19:a1:44:87:5c:36:5d:52:24:62:05:da:21:48:15:
         7d:f2:dd:51:41:5f:df:d5:26:03:04:85:aa:b6:26:fb:c5:44:
         7d:17:4e:52:6e:eb:23:99:73:c3:17:2b:76:01:7a:85:6b:b5:
         e5:6a:bb:18:75:4e:76:f1:48:1a:69:1d:05:71:06:9c:1f:0c:
         90:17:a0:9d:b4:d9:bd:dd:bf:2e:ef:8c:6d:26:71:27:2c:e5:
         29:80:c8:b7:30:c4:2f:39:84:4f:cc:07:e9:1e:b7:cd:76:bd:
         1a:d0:53:7b:a9:e9:5a:2d:7d:68:c4:3c:ee:bf:b6:13:2f:2c:
         69:8d:74:a2:ff:9e:2e:f0:8e:72:8c:9e:d3:b3:45:0b:1d:b7:
         aa:3a:03:d3:f5:6a:31:f8:e8:d0:bd:f3:97:92:7c:b6:8d:02:
         7d:98:20:77:40:fe:e7:41:c8:1d:9e:f6:7d:06:51:c4:6a:e6:
         f1:70:41:46:73:0d:fc:e5:2e:6f:f3:fa:37:36:21:19:4e:29:
         61:73:18:77:9b:23:bf:87:66:cb:c8:95:92:58:6b:6b:ef:0a:
         f8:c0:1e:be:55:93:7c:65:c2:34:6f:41:cf:c0:0a:af:a2:46:
         fc:14:0c:bc:67:83:12:15:74:be:2d:dd:3d:cc:a1:97:38:8e:
         4d:49:57:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:27:02 2025 by rpki-client