Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/6d2ceda2-d8ab-3808-93b1-84b302bf2b98.roa
File:                     6d2ceda2-d8ab-3808-93b1-84b302bf2b98.roa (raw, json)
Hash identifier:          hBF7ewBclLZtCPeWYoKfIvKSn97i+DF4cB/WKTKevEc=
Subject key identifier:   23:AF:F8:E6:5F:78:97:1A:4E:A3:94:43:EA:B4:3B:52:03:AF:7F:2B
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584ABEB0E1C0D47D238515F82800
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/6d2ceda2-d8ab-3808-93b1-84b302bf2b98.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     22709
IP address blocks:        97.75.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:e1:c0:d4:7d:23:85:15:f8:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=24ac8d6b-1dbc-4e3f-a9ec-509bd9397afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:89:e9:3b:c6:29:0a:40:32:e4:cd:89:10:
                    ed:d6:e0:fb:00:76:cc:7f:4b:0e:e4:73:a4:4a:33:
                    63:ed:ee:0d:23:4d:de:c7:5b:c1:d4:e6:bc:25:6d:
                    9d:1d:b6:5f:a2:73:b7:1c:d2:be:1a:ab:92:ec:b9:
                    1a:14:78:d3:5e:30:61:91:7a:e1:7e:cd:ab:64:ce:
                    34:89:b6:d5:a5:7c:75:a7:33:a5:78:27:d2:6e:ba:
                    45:6e:66:a8:60:72:f4:57:89:57:0a:1c:c9:ca:1c:
                    a5:9f:9e:22:4d:dc:a5:65:92:dc:69:d9:12:90:cd:
                    19:f8:ef:6a:64:94:92:62:5e:4f:a3:48:5e:56:c7:
                    cf:6a:b0:07:1a:74:28:5d:ba:13:92:03:2d:a2:39:
                    46:66:84:13:e7:b4:50:71:66:10:97:88:42:55:1d:
                    0d:eb:0d:ae:31:db:b3:b5:f0:6b:ba:19:fa:16:9c:
                    a0:1b:54:e2:99:8f:0b:8e:1f:31:bb:4d:cc:79:05:
                    40:09:c9:b1:1c:1d:76:67:09:87:a4:86:3a:bc:e6:
                    29:73:ec:a9:40:d6:84:ef:6e:f1:6a:28:68:83:ff:
                    27:53:82:48:c8:f8:d2:cd:11:1d:8f:47:3e:77:51:
                    d8:4f:e3:2a:70:88:0d:74:9d:f4:1a:35:d2:d4:66:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AF:F8:E6:5F:78:97:1A:4E:A3:94:43:EA:B4:3B:52:03:AF:7F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/6d2ceda2-d8ab-3808-93b1-84b302bf2b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.75.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4a:df:19:93:e9:88:26:99:50:f4:06:a9:9e:1f:11:d8:78:
         e4:a1:a9:12:4f:f0:03:57:4c:47:9e:6d:65:b6:df:be:f3:e1:
         20:98:aa:37:4e:ee:7c:f7:52:7a:d2:7b:da:bc:1b:9a:e7:2a:
         7d:e3:12:99:b9:db:39:39:c3:fb:54:c2:f4:5b:94:c7:f2:fa:
         30:97:b9:e3:03:45:41:43:4f:1a:69:79:d4:e7:d2:7b:1f:12:
         84:34:77:dc:96:92:8e:e0:50:9e:e1:41:59:f0:ed:40:f9:17:
         a8:84:00:71:f2:91:ee:d5:c2:1a:56:f8:e4:68:19:03:e8:a2:
         86:b2:eb:91:ab:58:05:43:68:ee:7d:a8:09:cd:55:ef:cf:06:
         9d:5c:d4:16:28:4f:bd:04:9a:02:03:9b:65:3c:dc:dd:fa:d3:
         fa:78:e2:a6:7a:fe:82:53:72:34:25:49:92:69:50:6d:af:11:
         c4:a1:20:1a:b5:2e:03:31:b8:37:a1:13:72:f3:e5:19:d7:eb:
         ed:db:2c:e9:31:18:d3:1a:3b:51:ae:01:6c:03:10:6e:ad:65:
         5f:81:be:1d:1c:73:65:63:d7:76:1d:ca:d4:eb:90:ee:f3:3e:
         54:93:66:d0:86:35:71:38:e4:63:dd:ec:72:02:52:2a:53:de:
         0c:b8:80:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:54 2025 by rpki-client