Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa
File:                     982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa (raw, json)
Hash identifier:          qsymMcFhbwWILe5Pn+DTGGyiPSI3NahchOI6SajZ5Og=
Subject key identifier:   91:CD:07:7E:42:A7:49:90:FA:A8:12:DA:41:CC:00:E5:1D:29:CD:27
Certificate issuer:       /CN=293ffb60-5163-4ccd-8c12-c520cba4608b
Certificate serial:       010D0C9F4328584BAEC7B46D9B4D9CD877BD2A40
Authority key identifier: 6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     42495
IP address blocks:        208.76.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b4:6d:9b:4d:9c:d8:77:bd:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293ffb60-5163-4ccd-8c12-c520cba4608b
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=d73a3d55-d0ef-4164-9c32-16b73ce9be04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:72:2a:7a:9d:de:93:15:86:d2:ab:32:bb:ef:
                    75:ab:54:6a:5d:d2:5c:f1:59:9d:9c:75:9f:59:45:
                    02:7f:2f:d3:8e:3c:4b:87:50:d0:5c:5e:bb:ac:38:
                    bf:02:04:a4:98:29:d5:aa:7d:bf:69:84:17:79:83:
                    56:e8:e1:b3:d7:f8:e4:61:d0:d2:42:0f:83:74:90:
                    9b:39:1e:fd:9e:75:e7:35:f0:8a:b1:80:5a:75:e9:
                    ee:8f:3b:af:70:95:fc:c0:02:d2:05:af:e0:04:1d:
                    a3:48:2d:05:6a:b1:6d:34:a3:dc:7f:00:9e:30:64:
                    44:e7:18:e6:3c:e7:7f:d7:f7:94:b2:f8:7b:7d:4a:
                    92:f8:e5:69:f4:e6:07:d9:db:c4:60:4d:96:92:48:
                    c0:1f:a5:96:7b:a8:05:38:6d:37:1e:6f:e0:8c:6c:
                    63:c6:3e:b2:71:6f:3c:12:8f:5a:ad:45:db:d0:54:
                    c0:37:08:e2:07:37:09:39:de:08:86:95:02:4a:3b:
                    34:1a:31:14:ab:d3:0b:08:86:7a:3e:62:27:06:80:
                    c1:87:e8:4a:1f:28:40:8b:59:45:93:7e:dd:56:4b:
                    18:7b:cc:dd:51:cf:df:c2:41:2e:69:5a:d9:81:4c:
                    27:b3:d9:21:e8:51:2d:44:c6:a5:e9:11:d4:f0:70:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CD:07:7E:42:A7:49:90:FA:A8:12:DA:41:CC:00:E5:1D:29:CD:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c7:ef:c5:b1:0c:d0:9e:7a:06:0a:48:ec:12:9c:89:38:85:
         64:c3:03:4e:69:6a:11:31:8b:9c:a4:41:7b:d8:78:ea:6d:f0:
         23:17:a0:ab:b6:10:b1:24:37:ba:18:9e:2b:a1:ca:1e:88:94:
         67:f5:16:d2:75:69:eb:4a:f9:64:32:7a:f5:78:e1:6f:ac:5f:
         e4:13:d9:c6:04:ac:b3:36:78:bd:16:df:56:f6:38:c8:53:51:
         32:29:9e:b7:e7:27:54:36:b7:59:59:75:c5:2e:c7:f5:58:b6:
         0b:b0:51:3a:87:fa:4f:70:10:fc:4d:c8:1d:1e:82:fc:90:d8:
         db:1d:42:6f:30:f8:0f:b6:34:d7:36:0a:1a:f8:f5:79:fd:10:
         36:f2:d6:1b:07:65:3d:30:57:b1:fa:3b:88:66:2d:98:f4:43:
         74:11:b6:75:12:44:eb:2a:2b:66:cc:85:3e:f8:3f:48:92:74:
         d3:49:21:77:58:fc:7b:d7:26:c2:8c:eb:ab:ae:3e:66:52:03:
         07:cf:85:7c:84:37:7b:a2:5d:a4:5d:dd:6f:d5:04:1c:94:93:
         9c:f8:ad:a9:79:a1:2f:62:5b:48:52:41:78:e1:e2:a8:0d:40:
         06:b8:57:68:ea:38:f6:97:ae:8f:9e:4e:35:56:97:5a:de:be:
         f0:99:ca:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:23:29 2025 by rpki-client