Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/14785958-f1c1-3664-a79c-bd7704359051.roa
File:                     14785958-f1c1-3664-a79c-bd7704359051.roa (raw, json)
Hash identifier:          hStO5RD6Q9ec6ki3JhERZ3tNx7QvZQcISJr0zrl2scQ=
Subject key identifier:   91:6A:84:89:68:0F:C6:26:63:E3:06:30:EA:47:81:44:0B:84:D7:1C
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B9CA23B3CC702BA90D98A8400
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/14785958-f1c1-3664-a79c-bd7704359051.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     23473
IP address blocks:        96.63.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:3b:3c:c7:02:ba:90:d9:8a:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=8292db83-d9a6-41d3-9f16-8d99651bbb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:8e:ff:20:ff:a2:ad:e7:d3:57:30:0d:56:
                    32:c0:e4:e5:58:ca:99:73:88:d8:e2:6b:4a:55:1d:
                    30:ff:46:cb:53:ef:6d:1e:3b:8b:2d:fd:3c:fe:ae:
                    4f:b1:06:67:9b:c4:8d:2c:87:90:ad:5d:56:2c:83:
                    21:1e:74:0d:b4:62:c6:91:a2:9f:31:f4:99:fa:58:
                    8c:e2:3c:17:b8:47:d5:2a:81:8a:68:bd:7c:d0:b8:
                    48:b9:33:81:23:b9:4a:07:2c:89:6b:e6:32:25:49:
                    c9:d7:c5:ef:88:0c:87:ab:60:13:f5:83:5e:11:5a:
                    dd:71:e6:23:c1:0a:a8:18:c9:12:19:43:47:1c:a1:
                    52:58:b0:ca:7c:e5:f3:64:50:ea:da:4f:a9:50:0c:
                    22:30:07:82:c8:8d:14:13:21:52:7e:ab:e5:da:68:
                    c0:80:c2:04:e3:df:0a:57:90:3d:68:fc:2b:85:42:
                    08:58:e2:22:97:a5:fc:34:c8:55:2e:db:89:ed:3d:
                    57:0c:d8:f1:84:ff:c8:81:9f:ed:5d:f7:05:b2:f8:
                    39:b8:b1:39:df:75:41:75:cc:3a:87:1e:e0:d4:43:
                    f2:3a:46:7c:65:08:1a:6a:f0:76:55:c8:57:a9:7f:
                    94:1e:d8:13:e7:92:0a:17:0f:61:cd:5e:0f:47:2f:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:84:89:68:0F:C6:26:63:E3:06:30:EA:47:81:44:0B:84:D7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/14785958-f1c1-3664-a79c-bd7704359051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:bd:06:ce:8d:a6:6f:77:18:07:ee:3f:71:0f:e6:fc:e0:
         eb:22:7e:98:92:5e:30:f9:18:73:60:f1:02:e5:62:7e:f8:d8:
         e8:61:21:34:d7:08:1f:2e:a0:59:53:bb:8f:e1:88:6c:69:64:
         4f:e1:11:11:b8:fe:8f:5d:15:77:fa:d4:05:65:6d:b0:f7:1a:
         d8:4e:eb:0b:f4:dc:ea:a6:91:e6:cb:2b:a1:9a:e7:80:e1:59:
         59:fb:97:ac:16:04:45:cf:b5:41:e6:a4:af:2d:0e:0d:e9:65:
         1f:91:d4:d6:a7:56:a8:25:d4:a8:34:2e:98:96:4c:59:78:ae:
         02:00:f9:10:85:dc:1a:e3:d4:4a:70:e1:1c:a1:d7:bf:52:ec:
         2f:0e:e6:64:6b:40:c0:96:69:3c:53:f5:3d:4b:e5:8e:b5:f1:
         3c:df:87:b8:c5:5b:4c:28:c0:9c:d0:68:7a:5d:e2:90:a7:4b:
         eb:9f:e6:6a:b2:22:65:dc:d5:fa:07:77:af:c8:c1:d2:81:d0:
         42:f9:97:2a:6e:fc:17:78:d2:71:85:f4:ab:a7:3f:b6:80:ec:
         c2:71:72:bf:93:40:d7:d0:3a:32:c9:dd:07:6f:e7:94:57:cd:
         ae:0e:4c:f1:07:e1:a1:ac:c9:76:44:43:d9:81:ea:9f:5e:0a:
         71:96:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:13:25 2025 by rpki-client