Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/15517722-9148-367f-a7ca-24241b0f3879.roa
File:                     15517722-9148-367f-a7ca-24241b0f3879.roa (raw, json)
Hash identifier:          apASQXm5QcuWZR2p8BE3eB9E6KPCLSNQX68r5MVw3yM=
Subject key identifier:   72:8D:DB:75:A4:51:A1:AE:7E:54:66:70:4C:A3:71:BC:A5:4D:51:DD
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584B9E07C8C29C312FEF8D973880
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/15517722-9148-367f-a7ca-24241b0f3879.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     22504
IP address blocks:        76.164.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c8:c2:9c:31:2f:ef:8d:97:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=401a995c-8412-4611-ab21-007ba7392ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:68:c5:21:d9:3b:c5:af:29:7e:74:ca:62:
                    fa:8b:2f:d8:a6:58:46:2c:67:8a:95:eb:94:e7:2e:
                    63:e6:43:4c:03:ba:42:a3:80:e3:4a:ac:d6:21:58:
                    e5:1e:d4:82:9b:3a:ca:e4:28:38:24:bf:b7:9d:b6:
                    8d:43:6f:99:a3:bd:3d:b3:d7:b9:51:1c:06:e5:1e:
                    74:c6:5a:39:1d:70:57:39:f7:96:be:eb:bf:f3:54:
                    9b:ec:13:48:d2:6c:83:c5:17:cb:99:57:30:d4:52:
                    4a:57:ec:3a:ef:f6:c3:e2:b3:5a:ba:61:95:b5:a1:
                    e4:22:28:a0:01:7e:14:57:a4:c2:4e:89:1f:71:71:
                    14:23:f1:a0:31:92:ba:22:88:26:47:b5:8a:11:3a:
                    b5:ea:69:50:db:0d:99:27:8b:8c:7d:a7:08:43:64:
                    5e:5f:4d:6d:58:fa:c0:59:62:8b:bd:82:e5:4b:e7:
                    13:f5:53:98:fd:69:e9:85:f8:d7:3b:82:24:ba:c9:
                    c1:e0:af:5e:ba:9a:4a:98:4a:21:a4:20:76:c3:e8:
                    72:39:b7:c7:e4:72:a6:9b:eb:59:57:4c:cd:04:df:
                    61:fa:d6:c3:c6:95:0b:02:90:82:c6:63:85:22:e8:
                    79:80:1d:24:f5:2c:c7:0e:83:08:ea:3d:c0:e4:29:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8D:DB:75:A4:51:A1:AE:7E:54:66:70:4C:A3:71:BC:A5:4D:51:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/15517722-9148-367f-a7ca-24241b0f3879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e2:24:62:85:ec:8e:f6:10:42:43:8f:20:ee:1b:cf:9e:7a:
         11:46:0d:26:0e:75:2e:69:71:f1:cd:9f:9a:b7:50:6f:3c:0e:
         32:d7:98:53:9c:3c:9f:d9:2e:fc:92:61:bc:32:19:b9:de:3b:
         26:39:ce:5b:1b:1d:be:03:b8:ab:31:37:10:31:af:09:22:26:
         fd:fe:a1:35:78:44:38:57:34:05:5e:e5:0a:01:8c:68:0a:93:
         df:68:4a:23:0a:db:0c:49:3a:9f:55:2c:15:65:06:9f:d7:a1:
         3c:4b:65:be:c4:52:c9:71:5b:e2:c8:81:75:05:bf:df:96:17:
         b7:d6:87:02:27:4c:03:5c:da:a7:3b:a6:05:45:91:b2:4c:b9:
         81:16:9f:90:ee:9c:3f:67:fc:7e:bf:96:f6:30:f7:98:2e:13:
         77:b9:a4:24:a3:fa:f5:0c:cc:b5:12:cf:55:f8:48:81:bf:1a:
         6b:b2:b6:b4:88:02:ff:d5:a2:b5:84:b0:de:b1:ad:5b:1b:f2:
         e2:8d:0d:c4:5b:2e:ef:31:4b:f9:55:62:72:2f:67:ef:1a:00:
         9a:57:97:b1:b4:b9:35:a9:3e:5e:74:dc:c9:94:11:bc:7b:f5:
         e5:15:3b:4d:df:e3:43:11:e5:ec:a7:9f:e8:d8:20:98:10:65:
         c7:ec:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:03:50 2025 by rpki-client