Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c972ea-081a-3c2c-9bb0-88fa722e7dff.roa
File:                     d4c972ea-081a-3c2c-9bb0-88fa722e7dff.roa (raw, json)
Hash identifier:          TAQYNZNaQcbN0I1Z/W/MQ074/pR7nYjQquuYCdGt6c4=
Subject key identifier:   AF:F8:63:FF:10:8B:B8:DF:3E:F4:6C:29:50:51:CA:67:B2:CD:36:AD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B5DD1F08A9F96FACD5F86D545
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c972ea-081a-3c2c-9bb0-88fa722e7dff.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        207.37.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:f0:8a:9f:96:fa:cd:5f:86:d5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=84109d6e-b2dc-4f8b-a503-ea07d8a758bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:40:df:cb:fa:cf:4b:fb:5d:0b:83:30:3d:
                    0d:c2:a3:a2:a5:3e:b8:b0:bd:80:f1:95:51:dd:38:
                    ca:fa:35:94:2c:d8:9f:0c:8d:e3:9a:47:1e:d9:f2:
                    bc:15:41:c0:db:b6:c0:d3:ca:5c:19:be:31:12:3d:
                    cd:7e:b7:c1:d6:36:af:b3:6a:cb:63:10:5c:db:40:
                    e1:18:72:f3:53:1a:48:f6:47:c5:f8:56:7e:10:44:
                    fb:01:8a:4d:c3:cf:12:d4:0d:09:54:c4:c5:76:7d:
                    9c:93:1d:c3:37:be:7a:d6:c6:1e:9f:d8:de:d0:2b:
                    9e:62:20:e6:db:a5:f6:ff:01:25:96:e1:7d:e9:66:
                    4c:62:f8:c6:78:43:c1:39:d8:cb:bf:98:09:68:22:
                    b8:ee:3f:ea:1c:3d:44:55:43:42:f8:29:4d:cb:3f:
                    25:4f:c7:92:c9:d9:27:15:85:c3:75:aa:84:95:ee:
                    00:e8:4e:3d:a0:ef:6e:88:d8:74:37:32:16:ac:22:
                    d2:32:b7:ea:41:9b:77:a5:73:5f:ad:f4:7d:b2:c1:
                    73:fe:6b:8b:61:34:62:e2:72:8c:07:4c:ff:a3:62:
                    09:a8:7e:9b:66:57:04:fc:52:a4:de:d8:81:80:1e:
                    7e:0d:60:fa:c5:24:f2:a0:ab:9d:9d:51:05:53:cf:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F8:63:FF:10:8B:B8:DF:3E:F4:6C:29:50:51:CA:67:B2:CD:36:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c972ea-081a-3c2c-9bb0-88fa722e7dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.37.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5c:fa:bb:19:e6:b3:14:8b:2b:d6:ab:52:2b:3b:e2:4d:ab:
         ab:a0:dc:27:ad:27:8d:95:05:c0:04:8d:02:33:18:2b:3d:ae:
         91:d0:7f:5e:a6:a5:ef:5d:12:c2:fb:3b:cb:8e:a8:50:59:11:
         31:14:e6:73:56:ee:ae:0a:a8:54:22:1b:f8:b9:59:75:a9:86:
         55:a6:28:ba:f3:7a:b9:5f:1e:58:75:47:0e:68:50:11:73:6f:
         2d:a0:f3:62:cf:b4:85:63:e3:bf:4d:cc:e9:bf:a2:13:02:1a:
         7a:61:27:52:74:8e:ac:f7:3e:08:1d:31:90:fc:33:0a:65:8e:
         6e:75:ad:d6:60:82:60:f7:0c:6c:b2:9a:40:50:17:e1:9f:30:
         35:19:3d:a6:ea:05:42:b5:68:21:d2:7b:0c:70:8f:c4:0e:21:
         a5:1d:98:54:3d:17:95:86:19:2a:ad:48:df:2d:54:29:5d:d9:
         18:79:d0:48:82:ab:7a:5e:15:cd:9d:ae:b5:f4:c1:9e:49:65:
         13:62:26:a5:fa:8a:c7:50:44:1d:33:8a:74:72:e2:96:f6:2e:
         a9:35:10:81:a8:9b:79:a2:9e:ef:d4:ac:a8:51:18:85:4f:be:
         4c:b6:26:bd:41:3e:a3:4d:cd:a5:ca:72:2a:fa:08:f1:db:33:
         12:6b:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:24:27 2025 by rpki-client