Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6ae27afd-279e-378f-819f-a9dd3c95365f.roa
File:                     6ae27afd-279e-378f-819f-a9dd3c95365f.roa (raw, json)
Hash identifier:          TQoomBOMaU1UQdJ8oagDpEyy1lVSHrJt0/KJZ5VCKxw=
Subject key identifier:   CB:41:D4:0B:B2:AF:9A:7F:CB:EB:95:51:90:64:53:F9:22:B9:DF:97
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584B7B2207329148CDAFD33853C0
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6ae27afd-279e-378f-819f-a9dd3c95365f.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     20454
IP address blocks:        96.47.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:22:07:32:91:48:cd:af:d3:38:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=565018c7-2643-47da-ae4a-da083da10f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:43:6b:51:f3:da:29:24:ab:10:50:8c:b1:8c:
                    05:dc:a8:9c:f7:1f:cf:04:21:02:be:1c:58:bb:9c:
                    32:4a:b2:b0:59:90:c2:88:81:19:3d:b5:62:36:41:
                    19:da:ac:38:31:db:45:22:5a:5a:53:ec:5c:a2:0b:
                    2f:19:3a:8e:be:3c:bd:5e:6f:cb:00:cf:0a:cc:0e:
                    57:e0:ba:43:a2:73:3f:5a:9c:32:c6:be:ca:d1:a0:
                    26:8a:1f:ab:d8:74:29:01:f2:e5:1f:d0:ac:5c:08:
                    58:e7:eb:c1:5b:f6:31:f5:e0:1c:13:0a:5f:59:73:
                    24:d5:e1:cf:73:7a:a9:cf:68:4e:2a:c4:75:6f:dc:
                    e3:de:98:a1:d4:1c:ee:df:cf:a8:f8:32:af:05:30:
                    82:8f:7f:18:6a:5e:9f:a3:d8:5e:f9:fd:3f:d1:43:
                    c7:55:db:5c:c8:57:c0:d0:5e:ed:09:01:5d:53:e9:
                    ba:03:b3:24:72:a6:5c:24:0b:7a:b5:61:e3:c8:06:
                    95:b6:de:90:7b:d5:b6:33:93:26:cd:52:3c:ec:48:
                    10:58:4d:ec:a1:36:99:b9:00:90:b7:04:ca:39:79:
                    c9:5a:5b:2c:a6:95:37:bb:4d:c4:86:01:84:0d:b4:
                    13:0a:27:06:9c:dd:3e:a1:e1:c2:6f:3d:94:30:46:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:41:D4:0B:B2:AF:9A:7F:CB:EB:95:51:90:64:53:F9:22:B9:DF:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6ae27afd-279e-378f-819f-a9dd3c95365f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:52:c0:7a:e1:ea:14:31:44:3d:e0:58:25:cf:16:e7:77:ed:
         d7:f0:a8:8f:2a:94:c3:53:4c:73:8f:2f:2f:e5:5a:95:d1:de:
         3e:eb:78:47:5c:04:fe:c4:f9:4a:2d:03:30:17:29:f4:f1:52:
         6b:e6:e8:49:97:0b:39:d1:74:90:01:44:16:1e:90:7c:14:15:
         e3:3d:c9:40:29:bb:ce:53:4a:b9:cc:17:d5:cc:62:29:b1:2b:
         24:82:20:80:ba:75:7a:44:b9:38:ef:c0:d2:d4:86:42:8c:27:
         36:3d:83:62:70:11:ba:a3:19:03:63:9d:b6:a6:5d:91:ab:28:
         d1:2b:34:d4:0a:68:b2:de:84:f7:5e:0f:88:ae:fa:7e:2c:8a:
         95:63:00:64:13:81:51:55:b0:94:f6:3a:69:cd:fe:74:90:9f:
         e8:69:c6:d4:df:26:64:1d:53:f6:91:a3:21:4d:b2:1a:13:e3:
         a6:58:82:52:4f:49:fa:c0:52:25:1c:1b:33:4c:58:2d:1c:09:
         8c:f9:f1:63:5b:02:c9:34:b8:ae:73:74:0f:71:c7:58:30:73:
         0c:fa:4b:e8:51:ac:0e:85:6c:91:d1:6c:ae:24:13:e8:c3:5d:
         ad:5e:37:0f:26:75:0d:78:f6:8d:f1:65:1c:40:be:cb:e7:50:
         67:9e:fb:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgcykUjNr9M4U8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz
ZmU0MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk
NTY1MDE4YzctMjY0My00N2RhLWFlNGEtZGEwODNkYTEwZjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0NrUfPaKSSrEFCMsYwF3Kic9x/PBCECvhxY
u5wySrKwWZDCiIEZPbViNkEZ2qw4MdtFIlpaU+xcogsvGTqOvjy9Xm/LAM8KzA5X
4LpDonM/Wpwyxr7K0aAmih+r2HQpAfLlH9CsXAhY5+vBW/Yx9eAcEwpfWXMk1eHP
c3qpz2hOKsR1b9zj3pih1Bzu38+o+DKvBTCCj38Yal6fo9he+f0/0UPHVdtcyFfA
0F7tCQFdU+m6A7MkcqZcJAt6tWHjyAaVtt6Qe9W2M5MmzVI87EgQWE3soTaZuQCQ
twTKOXnJWlssppU3u03EhgGEDbQTCicGnN0+oeHCbz2UMEZh9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtB1Auyr5p/y+uVUZBkU/kiud+XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3
OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvNmFlMjdhZmQtMjc5ZS0z
NzhmLTgxOWYtYTlkZDNjOTUzNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw
MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0
M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm
NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxSwHrh6hQxRD3gWCXPFud37dfwqI8qlMNTTHOPLy/lWpXR3j7reEdc
BP7E+UotAzAXKfTxUmvm6EmXCznRdJABRBYekHwUFeM9yUApu85TSrnMF9XMYimx
KySCIIC6dXpEuTjvwNLUhkKMJzY9g2JwEbqjGQNjnbamXZGrKNErNNQKaLLehPde
D4iu+n4sipVjAGQTgVFVsJT2OmnN/nSQn+hpxtTfJmQdU/aRoyFNshoT46ZYglJP
SfrAUiUcGzNMWC0cCYz58WNbAsk0uK5zdA9xx1gwcwz6S+hRrA6FbJHRbK4kE+jD
Xa1eNw8mdQ149o3xZRxAvsvnUGee+zc=
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:08 2025 by rpki-client