Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c8c9e4b1-5795-3a05-9ff7-663667d8324d.roa
File:                     c8c9e4b1-5795-3a05-9ff7-663667d8324d.roa (raw, json)
Hash identifier:          H/CJZ5vkb3lOZLijiGhsAQiMOx2F5wHQc+BGVYcfcfY=
Subject key identifier:   74:C7:3F:9C:F4:3E:05:0B:CE:FA:1F:75:01:51:F9:49:CC:F4:E6:D6
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584B8EAD09A9407FE987C3A28C60
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c8c9e4b1-5795-3a05-9ff7-663667d8324d.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     62610
IP address blocks:        75.127.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:09:a9:40:7f:e9:87:c3:a2:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=a5fd9887-b6fb-4534-93a9-20aadeba4079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:16:85:e4:19:e4:61:82:c5:b3:ee:ec:c1:
                    fc:f1:2f:ba:7c:12:e1:17:07:a9:12:20:78:80:e1:
                    83:c8:40:14:41:dd:d4:98:15:47:18:56:fc:6e:6d:
                    52:d6:5c:aa:08:6a:b4:c2:e6:23:d1:58:1e:4a:c3:
                    32:51:0c:8b:91:cb:94:45:69:bf:7f:95:d8:ed:da:
                    bd:0e:a5:ab:e2:07:dd:4f:ec:8e:3d:ff:6a:ca:bd:
                    e9:91:de:b3:35:4d:87:dd:f3:89:b6:a3:f3:25:90:
                    31:eb:e6:8d:78:75:1c:45:e5:77:f2:86:40:a4:14:
                    98:3f:d6:7a:41:28:65:21:85:ec:78:a2:9e:e2:e4:
                    a1:33:35:e7:41:e2:b1:cd:56:08:7d:50:cd:70:91:
                    f8:44:d3:f5:bf:f2:92:52:65:42:55:ef:e4:bc:f9:
                    59:9a:d1:35:13:b1:d5:89:cc:37:62:03:ea:bb:a9:
                    46:d9:6d:93:60:78:e6:f3:dd:52:61:a1:07:6e:28:
                    6a:17:a9:6e:eb:30:bf:9f:e8:c0:8e:08:c5:b4:7c:
                    ec:5e:86:9c:76:2e:62:fb:16:a7:40:95:7a:a3:59:
                    75:f9:e5:84:96:a3:27:1d:75:f6:30:ad:16:bc:1b:
                    70:d4:84:8e:08:0f:e4:39:bc:43:40:d5:45:08:df:
                    d4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C7:3F:9C:F4:3E:05:0B:CE:FA:1F:75:01:51:F9:49:CC:F4:E6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c8c9e4b1-5795-3a05-9ff7-663667d8324d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ad:2d:38:7d:31:a5:35:2e:ac:a9:0a:e2:a2:fa:dc:82:9a:
         c4:94:05:5f:03:a1:7d:1f:be:56:83:1b:e6:f4:e7:16:b0:5e:
         4b:94:98:4a:32:74:ca:f9:30:e6:41:45:5b:03:9b:fa:12:4a:
         77:af:d2:cc:8f:8e:b4:f2:aa:34:fd:88:f2:01:ff:97:14:a6:
         64:7e:d7:1d:dc:c0:77:3f:8b:2f:8c:20:61:94:49:61:c2:3e:
         eb:57:da:2e:33:a1:fd:c3:7a:73:0b:1e:2e:36:47:2a:2f:0b:
         ab:3a:9b:6a:d6:fd:64:19:be:71:1a:93:db:92:ba:e2:87:c0:
         15:93:ad:dc:39:ee:39:3c:3d:b4:0a:a0:11:08:33:9c:ed:5d:
         16:79:0b:60:15:b9:5f:3a:82:3c:fe:1f:86:e4:92:7a:37:27:
         84:3b:c5:ce:b7:0c:f1:3e:bc:ee:ac:3e:05:d9:5f:8c:06:80:
         37:a7:be:6c:de:5c:92:b4:fc:77:ab:3c:50:bf:70:9c:99:d1:
         ba:9c:e9:d8:f9:a0:38:1b:90:f2:a6:94:d9:03:58:a7:3f:70:
         d4:df:41:44:d2:01:5d:43:9a:e5:c7:73:bc:03:a0:92:16:92:
         42:37:b9:a1:f6:4a:c7:32:ba:8a:06:20:8c:c8:0b:c7:27:d0:
         4b:1e:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:48:30 2025 by rpki-client