Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/8c9df701-6004-3070-80bb-178ea3b5cf17.roa
File:                     8c9df701-6004-3070-80bb-178ea3b5cf17.roa (raw, json)
Hash identifier:          E5cswhmF0axUXM8J3E9P3ldtQSOBBxnB/vjQP2uhl/E=
Subject key identifier:   6D:92:95:1A:17:F3:3B:36:1F:1E:B7:68:DF:9B:56:44:70:BE:5A:52
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584B5B0765D97C110A2742A22680
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/8c9df701-6004-3070-80bb-178ea3b5cf17.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     1273
IP address blocks:        207.189.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:65:d9:7c:11:0a:27:42:a2:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=d90b3f9b-87ab-4dcd-9572-743e5df15e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:2e:fe:2e:f4:58:7b:8b:0a:7b:df:8b:a4:
                    59:59:5b:1f:66:a9:b2:86:48:48:5c:3d:0f:77:0e:
                    ee:82:7e:da:83:d1:d6:a6:36:aa:9b:33:a3:e8:7c:
                    ca:83:70:af:5e:26:4a:90:fa:79:22:8a:88:60:6d:
                    9e:ef:ad:52:6b:8b:be:a8:93:1f:da:2e:ce:03:45:
                    0f:e5:21:4f:87:53:a0:01:45:75:69:7c:0a:e6:83:
                    93:c6:a9:7b:2a:39:f4:7b:76:43:6e:27:8e:5b:1d:
                    12:0e:0f:33:99:2c:d2:fd:1a:5f:fd:4f:d5:eb:21:
                    9b:db:b8:b6:cb:1b:4c:5e:f7:59:00:24:05:5f:7f:
                    f2:c8:83:8d:c7:68:ad:7f:77:e7:5f:73:bf:8d:de:
                    3e:a3:9f:0a:99:24:43:c2:be:c2:74:a3:07:36:ff:
                    7e:dc:4c:e9:2e:c1:c4:ec:49:b4:55:a0:27:1c:a5:
                    58:9b:6d:f3:74:4f:c9:4a:c5:c4:bf:53:94:94:d3:
                    0b:cc:54:ae:93:b5:10:17:33:06:fa:af:22:70:17:
                    20:b4:e1:9b:78:26:96:e3:9b:c6:2b:91:25:e3:67:
                    3a:c8:e8:ca:e4:02:ad:16:e6:bb:fd:2a:3b:c5:7f:
                    9e:24:0b:76:7b:b9:32:24:de:a9:0b:ec:70:80:5f:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:92:95:1A:17:F3:3B:36:1F:1E:B7:68:DF:9B:56:44:70:BE:5A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/8c9df701-6004-3070-80bb-178ea3b5cf17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.189.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:1c:3e:d7:ae:e6:99:20:46:4a:a5:a3:93:8e:42:21:4e:c7:
         10:c7:f3:94:0a:a0:5a:6e:c8:97:8a:a3:75:4d:e6:74:df:4e:
         9a:74:20:17:12:71:07:11:de:02:1c:5d:5c:81:f7:ee:db:cb:
         c8:70:9b:22:05:cf:d1:46:8a:78:61:f6:32:a0:47:0c:98:50:
         c6:18:35:3a:56:78:7b:2a:35:1a:48:66:aa:6b:2b:ab:62:f2:
         bd:7d:9b:10:e8:5b:0a:b9:51:fe:d7:86:3d:9f:b0:b6:ff:42:
         de:4a:ef:85:b7:f0:51:8b:02:94:06:82:d9:8f:32:da:19:fc:
         f6:70:7c:df:eb:80:5d:00:f1:f2:a2:62:87:65:04:34:6f:ce:
         bd:4f:54:35:91:15:67:3a:ce:1a:2e:2f:74:41:73:31:d2:b2:
         10:0b:de:00:e5:5f:11:d6:78:2a:1e:4f:03:c4:5f:41:a5:25:
         37:05:c0:d9:84:cd:ce:c0:99:94:43:b3:2e:f0:23:5b:6b:80:
         09:9f:6b:c2:81:a4:6c:62:36:93:0d:6f:b7:64:12:6e:62:ac:
         d9:e1:0f:e7:08:78:98:4d:93:b8:2c:89:a6:79:71:f0:7b:3b:
         43:d8:81:41:18:53:b3:0d:fb:b3:62:3d:b1:a6:3c:08:6d:ff:
         c8:f1:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:55 2025 by rpki-client