Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa
File:                     0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa (raw, json)
Hash identifier:          6RoNRezI8keAlFpAOsFACIXZEjAODBe7xDsURXXmd+c=
Subject key identifier:   10:93:30:AB:30:E4:05:B6:2A:AD:9E:F3:B1:B4:F5:BD:6A:AD:66:FC
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584F4973A5CD85F199A4D1FC9060
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36103
IP address blocks:        97.75.224.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a5:cd:85:f1:99:a4:d1:fc:90:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=31035ed8-158a-413a-a3b7-76b0281cee69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ad:04:ad:0e:c8:c1:49:a5:be:5d:84:a9:e4:
                    77:e8:61:ab:b4:5b:61:75:db:90:cd:87:3a:c7:ff:
                    92:09:68:6d:fa:07:97:e6:8d:d9:80:c1:a0:42:66:
                    8b:2d:e9:86:29:0b:36:a8:2b:18:36:d7:f1:e4:76:
                    26:a1:eb:2a:6a:b6:46:07:76:c2:f0:c9:c4:8c:90:
                    b2:bd:d9:f8:cf:8b:f3:ec:89:cf:7d:34:e2:3b:7f:
                    41:67:c4:af:92:27:5d:08:13:28:31:4d:6a:74:fd:
                    7b:2f:b8:3d:22:f5:70:a4:9f:67:9e:30:50:c2:20:
                    ba:cf:9a:2a:fa:dc:84:60:69:a7:8a:c2:b4:3b:4b:
                    47:0f:cb:ef:dc:d5:71:a7:91:f8:41:d8:ee:d2:34:
                    7b:c6:5a:3c:d1:35:3c:21:a9:15:49:d0:3b:d1:20:
                    e6:24:3b:54:7f:68:20:b8:7e:97:8b:11:a4:13:79:
                    f8:e1:dc:b0:a1:6b:85:1b:48:25:0e:eb:b6:cc:b0:
                    66:a6:58:5b:d0:5f:1c:4d:eb:f5:9f:4f:58:bc:94:
                    05:68:02:32:86:8f:97:a9:d7:97:34:44:91:ea:2f:
                    f5:a2:35:de:9e:cb:ad:36:59:94:a1:b2:c6:11:3c:
                    96:bc:d2:34:9e:7f:89:15:34:dd:3e:db:43:aa:66:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:93:30:AB:30:E4:05:B6:2A:AD:9E:F3:B1:B4:F5:BD:6A:AD:66:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.75.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:14:ec:59:4c:1f:72:b1:63:56:28:e2:65:dd:4b:0d:dc:a0:
         5f:4e:0f:1c:46:9d:ce:c2:81:7d:f4:c8:96:64:80:a2:cd:61:
         e7:7f:86:70:f6:08:60:e2:43:15:85:70:ee:de:6a:d6:2a:8a:
         b4:ce:f7:9d:69:f7:e3:d3:eb:6c:d7:6a:c9:2d:14:00:16:51:
         53:25:f0:12:6e:bd:27:09:d8:cd:79:d0:9c:a3:16:a6:f1:71:
         52:8a:36:98:65:21:db:79:99:f7:4e:d7:a7:35:8c:9c:c1:34:
         5b:b6:ad:5c:2e:47:2c:d9:94:0b:40:33:11:b4:0d:89:90:b0:
         ab:44:da:b5:7f:d5:08:64:7c:fa:ab:c5:47:7d:59:2a:86:1d:
         fb:d2:f9:ce:0b:64:92:b4:f2:76:b0:66:59:c1:1d:e7:10:19:
         af:76:8d:42:26:58:f1:ce:ba:5c:4a:b2:78:ee:10:02:a1:35:
         5e:5f:29:26:39:36:01:d1:1c:bc:18:11:7f:ce:71:e0:b5:e4:
         11:ea:5d:56:81:40:ef:cf:4b:70:8a:ae:64:8e:f3:a5:23:84:
         04:6b:17:d2:5e:a3:48:2e:29:11:98:2d:1e:b4:06:57:46:f4:
         88:9e:98:84:4b:0c:d1:69:a7:86:e2:4f:ec:dc:2a:45:61:13:
         d0:49:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:32:59 2026 by rpki-client