Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/5ac10d14-2a11-3eb0-be51-359a31cf5d81.roa
File:                     5ac10d14-2a11-3eb0-be51-359a31cf5d81.roa (raw, json)
Hash identifier:          0QAvtEl1zwLJD9/RL5v0gG8DwL2Ce6cidDbRv51FXOI=
Subject key identifier:   AD:45:5D:90:1C:04:72:38:29:E5:93:7A:58:14:A6:58:96:24:20:ED
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F4328584B4081DEC4CA92D43C20CBEB14
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/5ac10d14-2a11-3eb0-be51-359a31cf5d81.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     36318
IP address blocks:        104.192.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:de:c4:ca:92:d4:3c:20:cb:eb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=57ae8fbf-3a45-432b-8749-2b9217d88cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:cc:d0:3e:de:da:1f:16:3b:e5:91:06:c7:
                    df:e8:8f:80:e0:89:38:75:da:23:c4:cb:3b:b1:07:
                    5e:cb:6b:e5:78:a5:40:26:3e:04:c9:08:60:40:9c:
                    df:af:a6:df:12:d0:c4:e9:9f:62:f7:94:2b:24:72:
                    02:18:55:2f:12:de:63:a8:84:47:a5:5a:79:69:43:
                    ae:50:db:e6:15:4d:56:16:dc:fa:3e:62:43:d2:58:
                    52:ca:b1:06:0e:86:55:c8:d2:6e:79:cf:52:d5:82:
                    4b:8f:17:49:12:bc:ba:34:01:86:d2:ef:10:94:0f:
                    c6:8b:05:83:75:7c:8c:57:28:29:e4:90:0e:cb:a4:
                    b9:79:68:0f:e5:1d:5f:64:a0:f9:4b:77:eb:63:ff:
                    5f:fe:de:cc:9e:ad:c7:ff:9e:43:dc:47:ce:6f:8f:
                    30:fd:be:a4:a4:80:1b:58:bb:e1:fa:6a:d7:bd:45:
                    e4:ca:92:c0:ec:22:b8:d7:7b:13:4f:f4:ac:f7:6c:
                    19:3b:c9:dc:31:1d:4e:6c:d5:c4:5c:62:47:61:f2:
                    98:c2:07:7f:51:03:a8:80:50:d9:64:36:28:b1:02:
                    65:4e:22:a9:1f:18:60:c8:db:d6:d0:bc:7c:d5:86:
                    09:7e:c3:68:21:1a:d4:f8:31:c0:f9:03:53:dc:8c:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:45:5D:90:1C:04:72:38:29:E5:93:7A:58:14:A6:58:96:24:20:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/5ac10d14-2a11-3eb0-be51-359a31cf5d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:72:6a:97:93:a2:be:3d:b6:58:7d:8c:4e:93:82:74:3a:bd:
         31:c0:0b:fe:67:b7:71:61:da:bb:47:5f:78:d2:52:fc:27:26:
         c9:b7:79:9b:13:51:52:58:3f:62:6c:8b:81:cf:59:4c:ed:9b:
         50:84:e9:7c:63:5d:fd:ef:93:73:21:fd:d4:57:eb:ea:46:09:
         27:db:5a:0d:ae:ab:a1:b2:24:e4:9c:a5:40:08:35:c0:76:e3:
         3b:62:50:36:4e:5c:ef:67:0a:bb:39:7a:9b:a1:35:13:86:0c:
         77:37:fb:a3:06:c9:2e:a3:15:66:09:cf:bd:fb:49:9b:b7:47:
         bc:ac:a0:41:12:cb:a3:1c:92:a1:58:68:bc:10:e2:a3:c8:2f:
         c2:0a:48:4e:b4:10:e5:0c:5c:5d:75:c2:54:8a:26:53:9f:2a:
         d1:5c:15:44:8e:b3:1b:3e:9c:0a:c0:6e:99:78:ec:d2:eb:25:
         24:1c:e6:25:58:a7:a3:48:e2:b6:4c:fe:8f:7e:4e:64:39:43:
         02:74:9d:07:6b:7e:8e:5a:ac:4b:b1:94:dc:0c:be:c8:07:fe:
         db:ce:00:1b:8d:be:ad:c9:02:22:e7:72:89:10:5e:e0:3f:e6:
         8a:40:6d:82:f7:90:bc:7e:f6:57:62:25:27:e5:32:61:dd:e3:
         94:41:a7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:38 2025 by rpki-client