Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27de5258-bc83-3da3-b0e8-20381f226aef.roa
File:                     27de5258-bc83-3da3-b0e8-20381f226aef.roa (raw, json)
Hash identifier:          OlKA4c3IAOK/FVmMyjDPfM2e6lyzzXMBBr8NURcSjYs=
Subject key identifier:   23:A5:AA:B2:78:B2:58:1B:A8:94:E5:4B:33:26:0C:70:40:34:1C:C6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F521A64444024FCEDA9E800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27de5258-bc83-3da3-b0e8-20381f226aef.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        72.238.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:1a:64:44:40:24:fc:ed:a9:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=74c48270-6750-454d-92b7-80974e7e3a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9d:45:fc:cb:5c:70:3a:2b:49:4a:c3:7f:26:
                    68:dc:5f:b0:d1:4a:f1:d3:46:07:8e:f9:3d:c8:9b:
                    9d:dd:a0:13:2b:72:db:e1:dc:8c:e6:54:ea:44:c4:
                    db:e5:4d:19:35:e8:b6:39:6c:9d:f4:30:99:d4:91:
                    be:32:8d:70:1b:75:4d:3b:12:40:62:29:24:8b:d5:
                    f0:4f:d7:78:45:cd:a9:6e:e7:fb:f2:a5:5a:df:6d:
                    4e:e1:72:12:ca:fd:a8:a3:11:47:61:d2:22:27:88:
                    f1:63:b4:a1:2e:1a:44:b6:8a:12:19:ef:d1:6e:b8:
                    de:73:a8:1e:bd:57:2b:de:fd:ae:85:58:a6:a6:0a:
                    dd:83:2d:31:09:0f:bb:db:65:29:a2:04:7f:2a:20:
                    3e:e7:42:df:40:9c:08:4e:c2:5b:6c:b1:d7:ae:72:
                    59:7f:b0:3f:34:33:16:b3:0e:76:ba:11:a6:de:2c:
                    43:61:0c:71:a4:a5:c6:32:40:41:a1:19:66:0f:db:
                    07:77:06:87:52:af:f0:79:48:91:96:a2:25:77:95:
                    52:5c:6a:75:d6:b3:75:82:e4:0b:a2:85:f2:0f:6d:
                    cb:a6:a5:ad:75:65:e6:b9:32:f4:c8:3c:17:da:28:
                    87:b8:31:2e:90:f8:12:2f:93:9a:72:1d:fc:f0:36:
                    72:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A5:AA:B2:78:B2:58:1B:A8:94:E5:4B:33:26:0C:70:40:34:1C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27de5258-bc83-3da3-b0e8-20381f226aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.238.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:0d:01:56:8c:33:b8:96:d5:7d:57:37:1c:68:ae:7f:77:
         b7:0f:07:08:f2:a0:3a:cc:91:9c:c5:7c:aa:3a:48:c3:e8:f4:
         63:ae:b0:ea:94:04:e9:39:7a:f8:fd:7e:3c:a6:0d:c8:4b:c8:
         ac:8e:4e:ee:8c:6d:bb:f3:05:9e:d6:17:81:e1:86:52:28:d7:
         1f:38:5e:04:07:6c:60:69:34:26:30:b3:4b:76:67:dd:fd:dd:
         40:6b:46:22:78:57:63:30:24:eb:3d:83:66:64:3c:31:a3:e9:
         bc:81:bd:03:79:77:2d:9b:17:eb:ca:77:be:e0:9d:00:53:01:
         1f:8c:37:29:15:2e:a6:cc:c9:80:b4:07:6d:00:60:88:5c:88:
         6a:9a:27:7d:16:19:bc:76:53:e2:1f:0f:a4:04:05:58:25:39:
         12:30:30:24:95:6b:34:4a:3c:bf:f9:dc:c3:7f:23:33:56:e8:
         28:be:c0:20:63:f4:f7:95:3c:49:ed:a0:05:5c:a4:94:84:45:
         68:9d:dc:b3:c3:61:58:28:8a:77:f2:52:43:31:f5:3a:db:1a:
         0e:98:f1:cf:18:3d:be:aa:ed:d8:54:73:03:3a:16:9c:71:6e:
         f9:db:d4:11:5f:73:27:1d:be:fc:e3:8f:55:f8:fa:0d:f1:b3:
         70:20:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:59:44 2025 by rpki-client