Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa
File:                     01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa (raw, json)
Hash identifier:          33BfneSX4hL9VnerQRTpGBxk7kDHglbgqFSLyxF3ONY=
Subject key identifier:   44:52:01:E8:C7:C7:F7:1C:FE:8E:9F:35:8F:0F:EF:F0:DA:93:F0:10
Certificate issuer:       /CN=77dc753c-bede-4a42-99ae-484402f9795c
Certificate serial:       010D0C9F4328584B8BE2311B07648ED1C77FB3C0
Authority key identifier: A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     399337
IP address blocks:        209.151.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:31:1b:07:64:8e:d1:c7:7f:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dc753c-bede-4a42-99ae-484402f9795c
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=8621075d-d41a-4276-8c0c-8d3e537ca88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:97:ec:b1:e1:4b:ba:5f:54:1c:b9:1e:6c:
                    0f:98:32:d9:01:ea:c1:b0:6d:96:bb:c1:04:95:b0:
                    97:c8:2e:74:5f:41:ab:ea:05:b4:3e:40:34:aa:fb:
                    1c:47:71:e2:b3:a8:09:e7:ad:cc:c2:73:74:72:16:
                    e8:34:36:43:60:e6:b0:ea:59:91:42:31:45:bf:50:
                    c4:bb:66:39:10:cf:fb:a1:e7:3d:92:1f:95:9a:1b:
                    71:b8:45:74:46:a0:37:74:be:92:bc:be:2a:65:2c:
                    a1:21:c7:64:ec:93:b4:c2:1c:fa:5e:24:90:ec:db:
                    76:2b:da:b3:dd:af:2a:de:20:21:92:b2:e9:b9:95:
                    cb:8d:da:19:f8:f3:aa:cd:21:eb:ed:41:b9:85:7d:
                    b7:87:77:34:e5:52:99:5c:86:95:2a:25:52:23:1e:
                    7d:79:93:86:14:ec:b7:f0:9c:6a:53:9f:77:0e:5c:
                    29:b4:52:18:60:fe:63:19:da:ac:85:f0:42:76:75:
                    85:5f:14:50:62:b0:5f:21:e7:f9:bf:5f:f0:58:db:
                    7d:1a:3b:bf:16:c6:cb:b0:61:2d:a9:d5:08:dd:69:
                    91:93:59:b7:5d:d2:b3:7e:0e:8d:15:3d:bc:4c:37:
                    12:98:80:c2:c7:88:28:2e:09:21:63:ac:17:8b:96:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:52:01:E8:C7:C7:F7:1C:FE:8E:9F:35:8F:0F:EF:F0:DA:93:F0:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:46:4f:96:47:73:c5:e8:0a:19:52:4b:2b:f7:12:fc:99:ca:
         a7:6d:4d:3d:56:97:bb:e5:85:e6:45:03:5d:c1:ed:ea:10:9f:
         73:97:ff:41:18:b5:19:4b:aa:c2:46:49:fa:80:13:0e:64:da:
         d1:32:12:4a:3c:40:07:30:26:b0:40:67:fb:b0:08:4f:09:1e:
         6a:88:58:16:3b:88:05:81:68:93:6a:6a:5d:40:99:fa:ef:91:
         66:de:63:4d:b2:b8:21:9f:fb:58:ed:11:bb:56:32:47:2d:50:
         af:05:9c:a8:fb:ba:38:65:70:fa:c4:3d:68:4c:af:43:59:41:
         d4:6b:70:7b:72:fb:bb:53:62:28:d7:03:1a:12:4a:6d:1d:6d:
         39:d1:bb:a4:90:41:58:d7:ae:9d:77:11:e9:7d:fb:f7:49:23:
         86:be:7c:e4:24:80:4b:75:7a:2d:a4:1c:94:66:62:3d:62:c4:
         7a:97:fe:16:fb:76:b1:e7:1a:3b:2c:b4:4a:df:16:75:c7:a5:
         f6:9d:68:13:4f:9a:b4:bb:2a:32:7f:43:db:cf:3a:74:81:b9:
         3e:e3:f5:f9:c5:2c:e9:4f:22:6e:6b:11:59:4c:ba:36:47:b4:
         65:9f:45:03:c5:6c:d1:e2:a5:e1:8b:f0:41:a2:3f:3f:df:0d:
         5f:46:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:11:55 2025 by rpki-client