Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2dc06a22-db8c-36bb-b152-eba31714116f.roa
File:                     2dc06a22-db8c-36bb-b152-eba31714116f.roa (raw, json)
Hash identifier:          okTafkb4DlYyjREopHYOPQKm16L2ONWx1ET78O80X1E=
Subject key identifier:   BA:FB:ED:87:E3:2C:7A:8F:85:B6:32:F4:1E:43:4B:F2:23:EB:3F:C1
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584B7B21F8BB7774B8DE49C8C3C0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2dc06a22-db8c-36bb-b152-eba31714116f.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     36829
IP address blocks:        141.195.98.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f8:bb:77:74:b8:de:49:c8:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=51703c74-e8bb-4a35-944b-0883e4139bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:42:84:e6:fc:b4:4d:41:2d:ac:bc:66:52:
                    18:dd:fe:d0:de:2c:4b:1a:58:e3:d1:63:1c:e9:a7:
                    fc:82:56:5e:b7:2f:ec:de:ca:56:bf:f0:66:ef:ad:
                    df:d9:cc:0e:c7:b6:3a:f6:a0:82:fb:60:36:35:1b:
                    53:cb:44:f5:ca:58:c3:79:65:c3:56:01:59:d3:cb:
                    71:f0:19:66:b3:23:e3:98:3b:e0:bb:fb:a4:3b:24:
                    3c:75:22:08:e3:9e:81:b2:17:36:06:68:0b:09:87:
                    d3:e9:1e:a3:60:98:c3:9c:df:5f:d1:19:7b:41:49:
                    0a:3d:fa:50:eb:6b:32:c1:ea:32:7e:4f:9d:03:9f:
                    c0:9a:f8:f5:6c:90:86:4b:7b:89:af:aa:34:a5:55:
                    3a:69:bb:e6:e9:64:0d:f0:89:d6:1f:d9:5d:76:bf:
                    51:c6:48:fb:08:70:be:17:62:59:84:d7:aa:c2:21:
                    14:7f:9c:fb:24:94:c9:eb:63:70:a6:00:84:2f:2a:
                    7f:dd:f7:a5:dd:b1:4c:90:b9:08:6b:a3:d9:f0:56:
                    73:54:8a:47:b7:de:96:a3:e3:b5:52:aa:0e:27:99:
                    fd:15:90:ff:44:4e:89:0e:68:be:14:19:11:7b:8b:
                    0f:37:4f:f2:3c:96:30:38:5a:3c:cc:55:bf:b6:95:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FB:ED:87:E3:2C:7A:8F:85:B6:32:F4:1E:43:4B:F2:23:EB:3F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2dc06a22-db8c-36bb-b152-eba31714116f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:45:52:26:73:16:f1:f9:09:7d:56:05:c2:c8:7d:14:11:fe:
         e0:1a:ed:05:ea:9e:9c:1a:4b:7d:8e:1d:fc:d8:ab:ff:16:4e:
         56:5f:4d:84:63:c4:aa:17:49:60:fe:8c:48:0d:1e:38:1f:27:
         a0:07:82:bf:0c:52:7e:70:1c:dd:50:e6:a5:1a:9a:42:0f:29:
         ea:06:f5:4a:f1:fc:7b:2b:41:f3:0d:77:c7:6f:67:8b:ff:d2:
         c8:a2:a8:f5:d6:8d:bf:9a:c6:f8:cd:3a:30:30:cd:fb:64:02:
         15:a7:d1:01:28:51:24:e5:b0:27:92:1b:c2:fc:b9:32:c3:a7:
         16:e8:8c:25:0f:c2:bb:1c:93:e0:5c:14:e6:11:d2:7a:0c:b3:
         48:3c:70:3a:7a:c9:63:8c:be:e2:42:08:e3:da:87:d8:7d:51:
         fb:2e:f6:78:87:fa:5a:1f:ee:54:5d:ac:30:0f:82:51:65:db:
         b1:4a:c6:db:7e:84:ca:dc:3f:b4:4d:b5:e0:0c:7e:c5:61:02:
         52:df:53:a4:af:84:fc:85:2f:e2:0b:90:65:be:e1:27:b1:8a:
         f9:74:07:93:23:24:fb:0f:16:70:95:7f:7a:7e:6a:d5:3a:2d:
         df:e9:6e:01:83:4d:3f:ec:e8:d1:51:89:b7:bc:a8:7b:70:7f:
         60:99:ce:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:00 2025 by rpki-client