Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/5b81b807-e2e8-3c1c-9739-7bff320ed738.roa
File:                     5b81b807-e2e8-3c1c-9739-7bff320ed738.roa (raw, json)
Hash identifier:          IMiT9p4GYkMoP9GxWa1X8vM0okA4zr9Hzk679lxkDbk=
Subject key identifier:   05:A4:15:E4:7C:75:25:F0:4B:0B:84:5B:54:B3:FB:38:03:9C:86:8C
Certificate issuer:       /CN=6f206706-c108-40c1-8f2d-14fbbf92d951
Certificate serial:       010D0C9F4328584B5B073859E297E8495D7FD640
Authority key identifier: 1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/5b81b807-e2e8-3c1c-9739-7bff320ed738.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     32484
IP address blocks:        158.120.74.0/23 maxlen: 24
                          158.120.74.0/24 maxlen: 24
                          158.120.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:38:59:e2:97:e8:49:5d:7f:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f206706-c108-40c1-8f2d-14fbbf92d951
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=d009ad25-fbfa-4b08-baf0-1a5c27f4cffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:5d:08:fa:cd:aa:de:2e:6b:33:e3:ab:93:
                    43:b2:17:69:ff:22:88:29:ac:bb:8e:76:e6:04:66:
                    e3:d7:ff:c4:c6:29:11:55:37:96:f5:eb:9b:5c:c7:
                    90:d4:f1:9b:61:7d:2c:2a:2d:e1:ae:7e:4a:28:62:
                    d5:1a:0a:eb:fb:5c:2d:52:7e:9b:27:9e:0b:32:2b:
                    cf:91:e0:59:48:ab:bb:87:8c:b9:a9:29:39:53:c1:
                    15:de:3b:34:7b:c6:9b:d6:4d:ac:55:2b:f8:fa:39:
                    a5:e6:3f:e0:5c:ff:8a:48:6c:5a:37:c6:5d:38:23:
                    fe:8b:3e:6b:17:f2:20:42:70:43:9c:83:03:82:ad:
                    5c:c6:87:f3:55:0a:32:dd:e9:80:b7:d5:33:82:99:
                    c7:9e:90:46:93:79:af:44:d2:24:17:dd:65:16:34:
                    f8:c9:7b:b8:d5:ea:fa:a2:41:b9:2b:6e:17:1b:56:
                    d0:f9:1d:64:bf:32:ac:07:c9:eb:a5:a3:c2:c5:7a:
                    36:0b:8b:28:81:2c:60:cd:5b:40:81:eb:09:4c:19:
                    d4:e0:27:07:af:39:d6:41:2e:71:b3:c8:e3:88:07:
                    ce:20:bd:93:3c:9d:9b:3b:a0:42:23:c9:e7:e3:e6:
                    5c:44:44:df:63:f4:f1:bd:b4:cc:26:bc:f4:66:e6:
                    44:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A4:15:E4:7C:75:25:F0:4B:0B:84:5B:54:B3:FB:38:03:9C:86:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/5b81b807-e2e8-3c1c-9739-7bff320ed738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:4f:1f:69:8f:50:24:38:35:4c:66:fa:87:32:e3:5a:b6:09:
         71:d0:90:1b:81:b6:fc:2a:61:49:ec:39:49:f8:06:02:2e:80:
         02:cc:1c:a8:5e:49:0b:e4:fb:2f:3d:c5:19:87:76:b6:d7:90:
         d7:a8:df:c1:df:c5:e4:61:05:57:a9:1c:4f:f2:9e:62:60:8b:
         e0:03:92:28:2e:f7:b2:e0:10:28:ed:fb:90:1d:3a:27:1d:3d:
         8f:d9:90:74:f7:ed:ac:41:2c:fb:15:fe:53:89:74:2a:e7:ed:
         20:4d:62:5f:bd:01:ca:39:37:0f:03:6e:0c:44:61:8d:b9:ee:
         7b:25:ca:ac:65:8b:1d:04:b1:7a:5f:7d:b9:16:9a:19:65:d2:
         e6:16:75:1f:38:1e:64:11:00:43:1a:0c:52:bd:8f:f9:d2:d6:
         15:f9:d5:31:c2:95:be:fe:d3:07:fb:6b:0e:5f:1a:b8:79:09:
         c0:b7:3a:ec:59:b6:4e:90:e9:0b:36:83:ff:d0:41:42:73:b5:
         a8:47:3b:9d:89:ab:74:4c:f1:5f:3e:e4:8d:d8:e1:48:6d:1d:
         33:09:e7:db:e1:e4:5d:7a:18:8b:70:dc:25:18:2b:47:03:e8:
         c2:61:f6:2a:28:b4:fe:e4:b5:ee:16:d0:25:ba:c6:6e:11:e2:
         99:6e:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:40 2025 by rpki-client