Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa
File:                     b75f0928-afa7-3631-8814-783a2e20fda1.roa (raw, json)
Hash identifier:          fvlsY4frinsBCOFMjC5/gqlaDqE2ycOE5QVa1SsA3PI=
Subject key identifier:   36:CA:74:D2:22:18:C0:88:C3:39:64:4C:84:D8:47:AB:FA:3C:AE:8A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584BB02D0704CF46ECD590D52D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     54113
IP address blocks:        131.125.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:07:04:cf:46:ec:d5:90:d5:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=6cd3a0d5-664a-44b8-8531-0c9226bfb41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:8f:8f:b2:a6:6d:36:20:2c:34:2a:b7:41:
                    bc:53:63:7f:4e:98:3d:f9:da:57:be:16:3d:3f:89:
                    e6:75:2d:3f:32:f6:20:ca:e8:33:54:2d:32:ca:d0:
                    30:d7:20:ed:52:66:18:f6:eb:e9:14:0c:5f:b5:80:
                    96:5f:24:30:a6:16:84:77:16:ee:f9:54:39:68:c7:
                    42:5d:30:e2:75:c0:85:55:19:6f:21:85:b2:43:d6:
                    d0:a1:e9:91:4c:ab:9e:07:68:f7:95:1d:28:cf:08:
                    a4:d7:97:98:93:88:fd:24:ee:0e:e8:0d:e9:08:1f:
                    dd:08:73:f2:6d:c5:9b:56:4c:46:b8:b0:39:38:2d:
                    1f:30:3b:a0:bd:86:91:fc:ef:1e:76:52:55:b6:17:
                    19:3a:fd:60:18:40:0e:bb:74:38:49:b8:e3:d7:24:
                    b2:45:e8:53:8e:d3:b2:c4:0c:b1:c4:7e:9d:9f:0d:
                    83:ed:ee:61:42:e0:dc:9f:70:ea:1c:bc:d7:02:4b:
                    64:7f:31:2f:f5:09:4f:bb:14:56:e3:b4:73:e3:4f:
                    e2:7e:e3:18:6b:b6:51:10:15:53:d3:8e:c1:c9:90:
                    ff:67:c7:ff:ae:eb:b9:0e:31:55:3f:9c:2d:b4:b9:
                    7d:b5:ce:95:15:ea:cf:bc:0f:ea:58:76:d5:c5:73:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CA:74:D2:22:18:C0:88:C3:39:64:4C:84:D8:47:AB:FA:3C:AE:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d1:e7:da:0c:10:5a:bc:87:94:5a:21:14:6a:70:d2:9c:9b:
         1b:8e:b9:a7:48:e4:80:35:ee:97:60:d9:7c:a2:c0:40:f0:d3:
         ec:55:36:27:77:b5:7f:23:68:eb:9f:b4:f8:b2:1a:21:89:ff:
         9e:07:59:96:d6:37:09:ce:d8:8c:2f:6d:33:3f:3e:4f:42:3e:
         d3:34:7b:0d:1c:a2:05:65:5d:e7:cb:e6:2f:d7:da:bf:03:71:
         14:87:99:42:88:88:af:3f:65:75:59:de:a7:1a:ae:2b:ec:76:
         bd:e1:b2:1e:e2:7c:83:10:68:3c:62:60:a0:0b:71:93:3a:7b:
         34:b9:60:30:6b:bd:d1:59:6d:d1:57:38:92:de:83:c6:fa:19:
         86:9a:10:a5:6e:39:3b:6c:30:39:07:50:6a:03:64:c5:93:54:
         2a:38:f1:19:ac:66:9b:1c:49:7f:3b:8f:5e:9e:3c:ba:fa:9b:
         a8:84:63:cd:f1:a9:cc:06:b9:63:fd:19:61:c9:97:c1:d1:35:
         d9:05:bc:54:88:9f:46:e1:0a:0b:0e:b9:d7:bb:d4:25:fc:c8:
         7f:5b:b5:63:e0:1a:e0:58:be:45:a2:f2:e4:5b:7e:82:7b:bd:
         6f:2f:e2:7a:f6:ac:b5:4b:43:48:97:6a:ad:de:51:02:dc:3c:
         c1:76:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:01:01 2025 by rpki-client