Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b77aa3cf-53e4-3a53-8a15-cecb047bc211.roa
File:                     b77aa3cf-53e4-3a53-8a15-cecb047bc211.roa (raw, json)
Hash identifier:          3BxOa/l6lFMcnf1W8YarFdao9o8TavZl8JKq9owAXUw=
Subject key identifier:   25:39:4F:CF:75:7D:E0:53:D0:E3:30:BE:ED:DA:F8:9F:2B:19:3E:00
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2A2C5D675651F86FF9D96D00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b77aa3cf-53e4-3a53-8a15-cecb047bc211.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        172.96.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:5d:67:56:51:f8:6f:f9:d9:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=115de0bc-6bae-4065-8e4f-52d72de16dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:6d:0b:39:e2:09:78:e4:59:78:5f:d0:f7:
                    8c:66:b0:4d:dd:1d:ff:16:20:42:42:b9:e2:fc:a2:
                    a0:ff:20:9c:18:c9:56:2a:d6:f9:18:c0:9c:e7:49:
                    a1:86:9d:47:2b:54:98:8d:65:a0:80:24:b2:82:82:
                    dc:f7:f3:f3:f9:12:99:c5:eb:3e:b9:7d:3e:b6:45:
                    13:b5:d8:2b:46:f3:f3:f8:0d:99:4f:77:99:0a:3a:
                    a4:5f:ca:8a:5a:29:7d:14:6e:2d:55:ff:f2:0c:71:
                    76:b9:3f:c7:ed:a9:52:de:f8:79:5e:0e:c9:00:ba:
                    8f:45:fd:de:9c:de:67:44:ca:c7:77:ec:9c:d6:f2:
                    cf:35:19:8a:5c:82:29:ab:48:e1:df:66:4e:d1:72:
                    29:57:c5:7d:fe:b5:1f:cd:8a:d1:28:c7:d1:cb:7f:
                    a8:b5:19:c1:82:b1:9f:31:47:b4:03:cf:42:8c:6d:
                    83:d9:81:c1:31:e9:e6:2b:05:cb:a1:ca:ce:b6:bf:
                    41:5a:74:3e:61:22:b8:7d:93:b5:3f:3b:17:5c:47:
                    a8:7a:1c:26:bf:fd:cf:85:1c:bf:1c:4b:24:3d:66:
                    f8:51:cb:ef:76:bd:46:7a:e8:84:1a:cb:1d:f7:8b:
                    23:66:8b:04:06:25:b4:9b:67:5b:66:57:d4:a6:65:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:39:4F:CF:75:7D:E0:53:D0:E3:30:BE:ED:DA:F8:9F:2B:19:3E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b77aa3cf-53e4-3a53-8a15-cecb047bc211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7d:b0:37:e3:e0:c1:db:4e:d2:f8:70:6d:43:2a:ae:a0:ff:
         a8:4d:40:c7:cd:15:f3:dd:34:74:23:bf:1e:5e:f4:ac:b5:e8:
         1c:1a:92:93:64:fc:7e:9e:8d:7f:9d:fa:bd:dd:0d:eb:06:e8:
         ae:a7:ad:44:f5:3c:00:14:8a:f8:d3:48:eb:fb:21:44:d4:c1:
         a3:8a:90:0c:44:72:1e:a0:30:4b:c2:c6:78:31:0d:e6:5d:13:
         a3:b1:90:1d:b7:7b:11:9c:3e:1c:ee:f6:4a:4f:06:10:39:f7:
         87:23:89:80:a4:ad:56:6f:4f:65:3a:b9:d5:6c:7b:ef:14:d2:
         76:58:71:f0:30:96:be:78:96:2c:a4:71:fa:46:fe:58:4a:bb:
         c1:49:1d:6c:ab:9b:56:68:62:f0:3a:9b:5d:d5:62:12:ae:76:
         ef:15:a5:8d:fa:00:e2:33:bc:5d:22:bb:83:cb:ac:b4:1d:bf:
         23:8c:8b:84:b0:ba:e0:0b:51:cf:b8:02:37:60:34:7b:83:8f:
         34:4f:6c:cb:a7:06:f8:4e:f7:c7:10:f2:4b:20:b3:33:22:65:
         9d:2c:75:82:05:0f:bc:87:da:35:0e:90:eb:11:f7:d2:43:a1:
         f2:ea:11:9c:1d:5f:3c:12:82:9d:88:4f:af:bc:31:86:63:9e:
         e5:6b:c1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:59:52 2025 by rpki-client