Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/5955cb22-960a-3b66-8581-bd158c564119.roa
File:                     5955cb22-960a-3b66-8581-bd158c564119.roa (raw, json)
Hash identifier:          WX5JioKPPUFGBlEcKNgS+qn4PYiTESU6ws6FK1YdLUg=
Subject key identifier:   A6:19:B8:BD:12:8F:00:64:B6:ED:C0:BD:F0:0A:2B:31:9A:72:AD:85
Certificate issuer:       /CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7
Certificate serial:       010D0C9F4328584BC2C9863CE73D9CCEEFE57980
Authority key identifier: 77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/5955cb22-960a-3b66-8581-bd158c564119.roa
Signing time:             Wed 05 Nov 2025 17:00:34 +0000
ROA not before:           Wed 05 Nov 2025 17:00:34 +0000
ROA not after:            Tue 03 Feb 2026 17:00:34 +0000
asID:                     40676
IP address blocks:        199.175.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:c9:86:3c:e7:3d:9c:ce:ef:e5:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7
        Validity
            Not Before: Nov  5 17:00:34 2025 GMT
            Not After : Feb  3 17:00:34 2026 GMT
        Subject: CN=4d9a0e1f-9b36-4575-840c-96692ea08a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:12:c6:a7:76:ae:fd:c2:cb:e6:1a:59:77:
                    e7:2c:45:c4:32:ac:ad:9d:cc:fb:94:25:ac:7a:4e:
                    68:3b:f1:c9:59:a9:6c:ec:cb:0a:70:b0:ce:8f:6b:
                    bd:51:6c:41:7d:ab:47:ad:a7:66:9e:bb:ed:05:73:
                    9d:56:0b:62:29:05:73:85:bd:61:89:4a:00:a4:cf:
                    2a:4d:c6:6f:07:d5:11:b4:fb:50:35:57:48:db:e6:
                    c0:02:43:f8:81:78:3c:44:21:ea:ec:f2:c1:d7:ba:
                    2e:5a:9e:10:23:8c:e9:92:89:0d:ab:07:bb:5f:72:
                    bd:de:18:ff:50:2e:c0:76:20:16:21:b4:b3:93:ff:
                    30:6e:1b:16:20:12:b2:bb:ff:76:b0:93:45:f0:40:
                    e9:9a:e2:f1:98:f2:a0:28:e9:8b:11:b0:be:e9:1b:
                    96:39:11:e6:d6:9d:3d:e9:8c:b0:85:31:5b:ec:55:
                    53:86:82:14:5b:5b:3d:25:47:fb:b1:95:c6:24:4e:
                    54:9b:0c:52:e9:ab:9a:6c:f3:1c:3f:38:af:5b:5b:
                    88:4d:af:fb:58:d8:97:0d:bd:68:61:5f:ef:1d:72:
                    bd:d7:e8:fd:88:0c:b4:10:c5:98:6c:df:be:5e:16:
                    30:b3:f8:b8:e4:53:79:84:ac:46:ff:05:11:e9:9b:
                    16:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:19:B8:BD:12:8F:00:64:B6:ED:C0:BD:F0:0A:2B:31:9A:72:AD:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/5955cb22-960a-3b66-8581-bd158c564119.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl

            X509v3 Authority Key Identifier:
                keyid:77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:46:07:5f:14:ca:86:3b:71:63:69:64:3d:5d:9b:ce:91:31:
         c4:63:c5:c6:26:2f:b5:09:b1:53:3d:92:e8:00:93:ba:7f:1b:
         c4:de:53:7b:af:14:b6:00:be:5d:1d:51:94:0c:64:9a:8b:c7:
         49:5b:81:d0:91:aa:a0:4f:e3:fd:d7:5f:9c:29:89:35:8f:6e:
         bd:1b:c1:3d:5b:9b:99:8d:48:3f:05:8b:3d:e9:21:44:88:cd:
         12:21:5c:eb:f3:d8:51:47:42:1e:aa:5b:c3:b8:90:a1:dc:e4:
         10:7e:04:b6:37:96:32:bc:67:d6:66:21:93:c6:db:cf:a2:c4:
         e5:13:0f:e1:74:db:1b:58:cc:3d:09:1a:ca:30:7a:e5:e9:da:
         a4:7c:9e:0a:61:b2:02:b4:32:cb:c9:c4:5e:8e:33:71:fe:da:
         4f:d5:e9:f1:57:5b:de:ca:f3:3f:be:5e:53:61:d8:41:9f:a3:
         62:a1:26:a1:87:5f:e3:50:10:c3:7b:b0:d9:a0:fa:dc:c6:83:
         87:7d:ac:f7:1d:ee:78:52:11:e4:ef:9b:36:80:fc:6d:e0:c9:
         68:53:53:fa:1c:c2:e9:cc:16:9f:4c:c3:3a:67:31:04:e6:7f:
         e1:2f:8a:b2:ba:d5:89:5d:ba:9c:31:9e:ad:2a:05:5e:26:b2:
         c8:f0:60:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:01:15 2025 by rpki-client