Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/b8465916-71da-31fd-8b83-6edf5fa56958.roa
File:                     b8465916-71da-31fd-8b83-6edf5fa56958.roa (raw, json)
Hash identifier:          Pl8Q67jm1yWBEbfIvnUuQ9ZEPUkEtmPHE/z1ska1Aok=
Subject key identifier:   B8:AF:FF:F5:6F:17:B0:6F:FC:ED:F6:6F:05:B0:55:CC:36:FE:83:EC
Certificate issuer:       /CN=73fe0d74-68ab-4934-afe2-84c2b7ce1ef8
Certificate serial:       010D0C9F4328584B0B76D61C6441E1F1A5826290
Authority key identifier: 90:76:93:39:16:72:AD:40:EF:F9:EA:12:A7:DA:0F:F7:93:15:36:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/b8465916-71da-31fd-8b83-6edf5fa56958.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     206934
IP address blocks:        170.75.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:d6:1c:64:41:e1:f1:a5:82:62:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fe0d74-68ab-4934-afe2-84c2b7ce1ef8
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=33b1b82c-8bf8-49ba-bda9-b6db6b835cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:5f:77:24:9e:ab:b6:20:a5:90:2f:a7:e1:
                    c1:7f:6d:d3:d8:fd:2d:f0:80:f3:ed:b1:7d:4f:30:
                    17:11:c8:43:bc:ed:30:77:c6:54:38:6c:69:04:91:
                    1a:31:33:29:da:e0:27:38:36:38:59:2b:2b:a4:c0:
                    e5:af:54:7f:1e:6d:15:b7:47:f5:a9:61:59:a0:87:
                    a0:a6:98:6e:65:b0:15:bd:a9:84:76:94:f0:a3:37:
                    9d:cb:08:0b:8b:41:90:d2:61:bf:6e:2f:e8:a4:5d:
                    2d:11:0d:a6:3a:49:4d:30:11:82:21:18:c5:3a:ef:
                    1a:0b:0d:54:0f:4a:43:2b:3b:25:0d:92:e1:10:0d:
                    50:57:31:e1:76:12:b7:05:df:86:39:35:73:63:0a:
                    13:65:33:b0:b2:fa:36:07:26:4e:ce:9b:58:f6:c4:
                    f9:a7:1a:8a:e2:ad:06:5b:5d:19:56:64:9d:22:ee:
                    23:67:90:92:56:d6:69:7e:87:66:70:d3:1c:48:78:
                    56:7d:fc:74:ba:67:3d:aa:76:66:4d:b9:ac:14:7c:
                    21:4c:80:94:d3:b1:18:23:98:80:58:65:4f:ce:17:
                    bd:ca:85:6a:95:8c:01:41:72:ef:d2:6c:25:ea:fa:
                    ad:e9:e2:e9:36:36:28:90:18:e9:f5:87:31:80:80:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AF:FF:F5:6F:17:B0:6F:FC:ED:F6:6F:05:B0:55:CC:36:FE:83:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/b8465916-71da-31fd-8b83-6edf5fa56958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.crl

            X509v3 Authority Key Identifier:
                keyid:90:76:93:39:16:72:AD:40:EF:F9:EA:12:A7:DA:0F:F7:93:15:36:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:51:5e:ce:76:73:7a:a0:a9:a1:2c:c8:16:f7:77:5c:7e:78:
         ce:69:4f:64:69:46:c8:94:44:6e:45:97:0e:8b:a5:76:08:d1:
         6e:8b:1b:bd:55:6b:06:44:a1:d7:09:d4:5a:5d:d7:a6:90:02:
         fa:2c:13:57:6d:4b:ed:4d:5e:14:42:1d:7a:34:fb:43:9f:ad:
         04:53:8b:9c:a4:7f:83:f3:02:44:7f:6b:4d:09:b6:a7:72:4c:
         3b:12:bf:46:5c:35:a6:8b:6e:bf:f9:6d:05:06:92:2f:95:b5:
         12:11:be:ba:71:cc:c3:32:10:8f:77:3a:cc:91:32:e4:cf:da:
         a7:32:ec:58:19:ad:d2:0e:63:40:45:88:49:1e:46:ff:b0:fe:
         e7:f7:c6:84:01:2d:3d:6c:bd:c3:9e:5b:cf:13:be:90:72:65:
         e1:46:ec:6c:4b:d8:f7:57:02:83:59:8f:a4:89:60:1d:0f:39:
         25:17:69:d9:cc:7d:45:4a:24:54:eb:77:18:0d:8c:73:a6:9c:
         6b:a2:52:f7:99:81:c2:ba:e3:87:40:4e:92:ee:6b:12:0e:e9:
         7f:44:9b:83:73:9e:ed:6c:fd:de:04:e5:cf:3a:15:06:2b:57:
         fe:15:f4:51:00:14:51:0e:ce:3d:e7:71:50:d7:2f:ab:12:77:
         b3:b6:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:36:34 2025 by rpki-client