Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa
File:                     d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa (raw, json)
Hash identifier:          NzMlnpbchSRpKAzOw1kfTZJWGtOc7gwI0miZfgwwRqE=
Subject key identifier:   D0:1D:6A:EC:37:EE:EF:73:C2:21:AC:61:7A:B2:7C:42:F9:27:DF:A5
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584B7DECA5729B621480F19F7F00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     61317
IP address blocks:        94.72.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a5:72:9b:62:14:80:f1:9f:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=16b3310f-5324-4289-af56-506105af1ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:e9:db:02:03:4c:3d:3d:4c:17:d0:06:98:
                    f6:58:bd:57:4b:1f:ab:43:c9:93:1e:1f:54:63:48:
                    af:43:48:6b:41:31:2e:a2:46:ad:e6:b6:91:f3:92:
                    e0:54:86:66:61:51:bb:4d:bc:23:60:45:4c:b8:71:
                    26:5f:b5:87:54:97:cc:89:0b:80:91:6e:28:63:7d:
                    26:85:b7:0c:1c:47:71:cb:f7:f4:9a:dc:3b:03:f8:
                    b6:23:88:d3:55:1f:fa:d8:d2:41:6a:4f:38:98:4e:
                    5d:dd:e0:bf:f3:ca:43:17:83:df:c9:79:99:66:88:
                    1e:0e:d9:c6:58:5f:3b:5c:b4:c9:ee:fe:6a:58:a0:
                    e4:eb:6e:48:a9:9b:76:8b:8c:39:ee:82:a3:bb:7f:
                    8f:0c:ea:99:33:7b:4c:9c:be:03:65:6d:51:80:7c:
                    23:21:a6:7b:26:82:ab:90:21:dc:56:ea:46:5c:e4:
                    2e:07:56:bc:43:34:5d:0f:55:cd:2d:bd:70:07:38:
                    6e:ac:6d:e3:17:19:92:af:64:7e:18:56:71:8c:4d:
                    63:ac:9e:1e:53:51:04:a7:aa:50:b6:10:aa:11:58:
                    b2:27:d1:42:ff:f0:0f:b0:81:75:01:75:60:39:03:
                    5c:68:be:f8:22:21:b6:90:4a:35:30:5f:c9:15:dc:
                    47:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1D:6A:EC:37:EE:EF:73:C2:21:AC:61:7A:B2:7C:42:F9:27:DF:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.72.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:72:62:f5:e5:6e:2d:f3:4d:e8:91:8d:21:32:17:7c:90:e0:
         49:c2:e4:1a:1c:d6:c5:11:b6:4c:35:fd:54:59:61:3a:9b:dc:
         e8:6a:79:70:da:a8:44:52:84:16:bc:00:da:17:0b:cd:42:ba:
         87:a4:a3:32:51:d9:70:37:02:ff:56:26:6b:9d:83:75:5e:53:
         bd:c8:07:10:0d:9f:fa:57:85:0d:8e:72:e5:f0:4e:96:95:31:
         4a:1d:e3:cf:c7:02:ce:f1:03:08:42:ce:4f:2c:b9:1c:8a:c0:
         8c:43:c3:8a:1d:24:c5:c3:16:1c:14:a2:e5:bd:cb:ee:c8:0f:
         79:68:b2:34:3e:a9:e6:9d:17:9a:8f:4e:8e:3f:b9:70:73:e6:
         c4:18:83:34:6f:84:08:14:8f:8d:7f:a4:60:16:af:8b:7f:82:
         ac:e0:a4:4b:c5:a6:f3:c6:77:50:3f:53:4d:9b:85:20:dd:34:
         9c:ba:73:9c:5e:45:1b:b5:98:cc:44:23:74:70:ad:e9:ae:b1:
         4b:09:f7:87:ea:15:00:c7:fa:1b:f7:07:a7:82:2c:65:cd:34:
         c5:80:22:a7:e1:63:37:cd:b0:03:f1:ad:30:a2:24:7d:e3:57:
         2c:f3:eb:f0:67:8a:0f:3b:0c:27:f3:60:e4:6f:f3:9b:62:6f:
         4f:e3:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:23 2025 by rpki-client