Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa
File:                     5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa (raw, json)
Hash identifier:          N7Uxho0uwrJpPg4EBkFF5pqdWx6wAKJyoUULHq9Qinw=
Subject key identifier:   6B:DB:BA:B6:7A:5C:1C:F6:10:AF:A2:2C:59:E9:FB:A4:70:FD:0E:26
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584B1F016AB1833316317B77BE00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     262287
IP address blocks:        198.145.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:6a:b1:83:33:16:31:7b:77:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=fc214bc8-7711-416f-99ac-fea3844bbc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:1c:33:ed:47:d1:be:2f:fe:18:6f:1e:81:
                    87:41:d1:c2:13:b0:7e:b9:6b:4b:c5:05:57:8e:a1:
                    db:6e:14:73:e5:39:0a:d4:fc:46:e9:23:be:97:6f:
                    d0:71:c7:bf:32:fe:b6:c1:cd:83:aa:9f:c2:49:04:
                    c3:9e:7a:76:39:97:f5:a8:6c:54:17:5c:c3:73:a4:
                    ae:34:59:91:8b:82:ae:ac:3f:8b:65:f9:e2:3a:be:
                    3b:bf:7c:77:c9:97:49:e3:fd:68:09:5c:aa:5e:6d:
                    99:b4:ea:79:48:cc:df:6d:b5:5f:99:94:74:b0:0b:
                    d4:da:d5:23:8c:3a:f6:2a:46:7e:02:b0:4e:90:d3:
                    41:27:64:a9:7f:4e:f7:b2:a1:80:1a:e2:9e:8d:84:
                    c1:dd:c2:f9:dd:72:84:14:23:71:f4:79:0c:0f:1d:
                    a5:50:45:8a:04:95:3f:44:9a:bb:77:f2:27:78:64:
                    e6:04:c1:9a:80:45:70:61:64:51:c2:8c:15:2b:82:
                    df:dc:13:85:fc:eb:97:21:1d:67:89:b3:09:af:1c:
                    70:3a:5e:7f:cb:94:7a:45:f5:d5:e7:70:5d:7d:e2:
                    ab:ce:5d:ba:74:71:8b:3b:68:9c:ee:a0:dd:ee:7e:
                    db:b2:4a:66:74:ee:10:39:28:69:21:48:c6:82:66:
                    76:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DB:BA:B6:7A:5C:1C:F6:10:AF:A2:2C:59:E9:FB:A4:70:FD:0E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b7:ab:83:ed:2a:73:ea:b4:0e:c7:dd:ca:14:a3:7d:0e:93:
         86:d6:d1:e8:b3:d5:94:8d:86:09:cf:a3:2f:6e:9e:f7:a1:08:
         06:f0:aa:c5:4f:34:35:bd:4d:2a:9a:b1:c6:67:86:35:46:f0:
         fe:f3:84:0c:e1:c4:67:5f:31:0a:63:7d:53:f0:83:77:b0:05:
         80:4a:b0:ab:54:38:fb:31:50:f5:55:57:71:2a:15:43:ed:f8:
         49:d8:90:dc:50:9e:86:91:d6:b3:8c:a7:13:1b:04:a6:29:b9:
         12:5c:31:7d:f0:f6:4b:2f:5d:b7:81:af:57:5e:65:37:71:5d:
         d3:d7:4e:af:5f:42:99:9c:b2:c9:76:e4:9e:55:ac:66:ae:b1:
         1d:e6:33:d9:77:f8:44:5c:72:6e:a8:fa:39:81:de:eb:ea:81:
         75:68:c6:0d:d6:8d:a3:16:ad:71:94:00:58:f7:d6:2c:b0:57:
         56:5c:29:41:ce:bb:c5:6a:7c:42:ec:92:36:b6:b1:07:55:3a:
         2f:7a:6c:01:09:77:a2:43:6e:92:a1:5c:db:05:17:d1:3a:44:
         0b:20:ab:59:99:f6:fe:d6:27:02:65:ec:2b:5c:88:db:f2:99:
         1d:94:19:5b:60:5e:79:c2:b2:d3:b4:35:87:84:79:8d:55:83:
         b4:12:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:08 2025 by rpki-client