Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa
File:                     a68996cc-64bd-36b9-b93b-500d1edd511f.roa (raw, json)
Hash identifier:          h7e0vKq0GNA7BwMeSDMufGU7+4IjS/U1UGH6dfyWk1Q=
Subject key identifier:   33:35:02:ED:6F:23:8F:5B:6A:2F:6B:E0:67:A5:96:5A:6D:0B:4F:21
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584AB650DEE21FD63A6F330EAD00
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     20278
IP address blocks:        172.93.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:de:e2:1f:d6:3a:6f:33:0e:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=f1655db9-47bc-4973-9bf0-50b2740ee4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:ad:23:8f:bb:43:34:26:77:d6:79:61:43:
                    74:e3:7d:a5:54:46:aa:a6:6a:23:87:3e:17:98:39:
                    df:e3:a5:05:41:44:c1:0f:4e:b3:02:56:a3:4e:d9:
                    a6:4a:28:0e:28:c0:16:d1:28:d3:d5:4e:d6:d5:4c:
                    62:25:40:1c:ff:04:cd:9d:8c:36:60:2c:05:16:64:
                    0f:0c:9f:1a:c0:1e:af:f9:f5:6e:ee:70:81:c2:1d:
                    c6:e0:2f:49:4f:c7:e4:df:71:c5:fb:83:81:eb:91:
                    c8:16:70:d4:a9:44:7e:c1:76:56:66:05:7e:42:36:
                    a7:6d:27:86:bb:39:9c:90:2c:53:b3:c3:fc:75:e3:
                    e0:1a:c7:e4:27:f6:6a:13:49:98:a8:05:cb:bf:af:
                    52:6d:62:4e:69:3d:89:f7:1b:97:e9:c3:bc:3c:b0:
                    b7:80:92:0a:d7:d4:a6:2c:b3:ad:47:fc:69:30:87:
                    ba:d0:f8:2f:9c:eb:45:c9:3b:62:1b:3d:52:ba:6c:
                    94:f1:db:4b:53:ca:72:26:ed:38:f3:65:f7:33:14:
                    be:16:3b:75:12:fc:15:a7:37:0c:37:58:17:08:75:
                    e6:4e:56:e7:86:50:d4:9a:43:5d:00:29:95:13:1d:
                    1f:45:d1:3e:f6:0e:98:7d:59:30:9c:04:27:f8:85:
                    55:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:35:02:ED:6F:23:8F:5B:6A:2F:6B:E0:67:A5:96:5A:6D:0B:4F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:31:5e:b1:85:5b:0c:50:d1:64:98:51:7e:c7:0f:f9:02:7d:
         76:7f:d1:74:81:c9:ea:58:c5:ae:4e:e8:38:dd:d4:cb:2f:5c:
         32:f0:5f:73:99:9f:c5:f0:ae:b7:f3:ea:e6:c6:84:e4:14:79:
         cc:75:47:d6:d2:eb:b1:9e:27:31:ee:e1:07:63:08:bf:e7:0b:
         a0:65:05:73:68:57:fa:a6:88:de:de:eb:10:cf:03:2a:80:2b:
         11:a2:fa:77:fa:c3:40:25:bf:4b:fa:27:b0:b7:6e:13:86:f1:
         06:0a:7d:f3:7d:72:25:27:62:f2:b3:4f:09:2c:f1:d7:12:34:
         e2:76:2d:1a:76:cc:db:e2:7e:fc:77:1a:9e:c9:cf:e6:9f:61:
         19:7e:4a:8b:7b:4c:b1:0b:b3:26:4f:f4:f8:7c:86:69:c5:b1:
         9e:39:c5:14:4c:a7:f8:5e:32:ab:73:8d:1e:6d:27:09:7e:a1:
         44:ae:62:d1:8b:54:c3:32:69:ce:c0:9a:ab:41:00:8b:8c:d7:
         35:52:bf:dc:56:14:dc:d7:d7:7a:e9:43:30:6e:3e:a8:99:31:
         8f:e8:bc:82:00:71:f9:35:6d:3a:a3:c8:15:c6:56:11:cc:a2:
         2a:aa:99:aa:d0:7b:f3:7b:72:66:93:f5:71:3e:a8:6e:d0:f3:
         0e:e5:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:57 2025 by rpki-client