Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/a9024e57-1560-3b52-a47e-6f71faada852.roa
File:                     a9024e57-1560-3b52-a47e-6f71faada852.roa (raw, json)
Hash identifier:          xD9Jc6LtaoxysLTv6lTY4vMFYhEUfplGEtwB/7IM92w=
Subject key identifier:   D3:2F:FE:00:14:0C:76:47:D0:31:FA:C5:F1:93:27:44:3E:47:38:0C
Certificate issuer:       /CN=12578fcd-04a5-447c-822d-aaf9f7580cdd
Certificate serial:       010D0C9F4328584BA9326BC89F9DC30036C20220
Authority key identifier: 26:00:FF:30:87:64:B4:F5:93:85:B2:60:A6:CF:8B:3D:C4:CA:24:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/a9024e57-1560-3b52-a47e-6f71faada852.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     393728
IP address blocks:        192.94.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:6b:c8:9f:9d:c3:00:36:c2:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12578fcd-04a5-447c-822d-aaf9f7580cdd
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=762177a7-4a39-43a6-a321-ae44c2b3c685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:00:6e:9b:2d:72:16:a7:06:31:86:92:96:
                    e6:3d:fa:20:e8:44:05:5a:10:da:3b:f1:93:cc:ff:
                    2a:7f:b6:1a:5a:36:6a:75:4e:92:97:93:c8:da:a9:
                    a2:d0:d4:13:af:e6:24:bc:63:11:2d:c2:c9:3b:12:
                    f8:b9:07:37:5b:2a:dd:79:a5:d5:04:69:6d:78:9e:
                    af:e1:ef:39:43:24:6f:10:17:80:6e:b5:e2:88:a8:
                    0f:83:47:da:06:59:d2:80:40:12:2d:0d:ec:98:bf:
                    cb:6e:10:4d:1e:39:17:cb:05:ee:67:52:6f:6e:d9:
                    c7:0e:bb:ee:36:6a:cf:37:e9:76:c1:a3:07:97:8e:
                    1e:6b:02:2a:af:42:e1:02:da:ab:b2:4e:fc:1a:60:
                    d0:85:81:0a:aa:75:b7:6d:65:b6:05:19:17:46:10:
                    39:d3:4f:f3:c1:a6:84:5c:25:09:88:ab:7d:f2:86:
                    e1:24:10:e3:0b:72:81:2c:34:ca:b6:f8:7d:12:77:
                    e4:45:4f:21:83:73:c8:15:33:61:15:9b:02:52:8b:
                    b3:7a:59:3f:ea:9f:63:e1:21:61:20:31:ba:9f:1f:
                    95:df:46:81:23:61:ee:d6:1c:95:02:34:0b:9a:0c:
                    0b:63:0f:e3:d2:a4:fd:55:6a:6f:d7:3a:05:5a:13:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2F:FE:00:14:0C:76:47:D0:31:FA:C5:F1:93:27:44:3E:47:38:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/a9024e57-1560-3b52-a47e-6f71faada852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.crl

            X509v3 Authority Key Identifier:
                keyid:26:00:FF:30:87:64:B4:F5:93:85:B2:60:A6:CF:8B:3D:C4:CA:24:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3d:51:87:b7:aa:d2:45:06:70:ff:5e:73:64:fe:8c:ff:a7:
         b8:d9:12:17:ea:07:f9:80:57:89:35:a9:46:46:28:ad:c5:6f:
         73:88:77:6d:d2:d3:44:60:cc:3e:09:b0:8c:84:e0:7b:ea:1f:
         72:fe:90:ca:95:a5:09:62:16:d0:db:28:eb:08:bd:a9:16:aa:
         cc:6e:1a:c5:4b:de:fb:83:48:ec:91:b4:b9:e5:ad:b9:eb:cf:
         df:6e:5d:79:a7:42:a6:5e:30:17:c2:f5:8b:35:40:33:76:56:
         aa:72:18:17:25:c6:f7:d7:9d:03:03:aa:70:8c:ba:1d:29:32:
         54:b4:e4:17:cf:b0:f1:ed:fc:e2:63:f5:26:a9:5e:c6:01:f7:
         10:38:04:73:54:44:20:46:83:80:86:78:fe:5f:62:a3:df:32:
         cb:9f:1b:d4:b4:23:d0:75:35:0b:20:7e:35:15:f4:08:72:e6:
         9c:68:0a:d7:a4:5f:01:1d:3d:50:6b:4d:1d:fe:78:fb:2e:13:
         2e:24:8b:e1:9f:75:f2:92:6a:33:b1:8c:39:17:d7:25:ee:0e:
         b2:d0:cc:72:3f:96:29:a6:4f:da:a2:b8:6e:46:75:0a:3c:b8:
         1e:e3:75:d7:ff:53:da:37:e1:53:53:e3:19:8d:ee:07:77:ae:
         f0:c4:cb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:22:40 2025 by rpki-client