Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/6d2ceda2-d8ab-3808-93b1-84b302bf2b98.roa
File:                     6d2ceda2-d8ab-3808-93b1-84b302bf2b98.roa (raw, json)
Hash identifier:          b9828mwarvyfFNaQP/4uan7kJnEx7lmI4+FQwy6mGbg=
Subject key identifier:   F3:E7:CB:E1:26:2C:7B:67:2A:76:D9:03:F2:40:62:51:F3:9A:1C:C7
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584B9E07D60A13AAC815287672D8
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/6d2ceda2-d8ab-3808-93b1-84b302bf2b98.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     22709
IP address blocks:        97.75.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:d6:0a:13:aa:c8:15:28:76:72:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=843b23fe-07e9-4fef-9805-ce302c9ac3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:11:0a:fd:b8:d8:27:2b:5f:5d:e4:41:c2:
                    dc:fd:ea:15:f7:71:ad:51:5d:3f:d5:c3:78:d8:68:
                    37:db:0b:2a:01:0c:d7:60:76:61:96:86:7e:10:e0:
                    ce:fc:5f:ea:ab:cd:ac:13:08:cd:95:0a:27:9e:66:
                    16:2f:58:e7:d8:b4:24:da:21:8b:6a:73:98:73:ac:
                    77:7c:a5:52:69:3c:99:65:45:53:09:60:80:72:61:
                    e0:22:bb:62:d4:8d:27:26:9d:c8:94:f6:0d:a0:dc:
                    09:95:c3:b2:fe:19:e5:03:11:bc:10:92:1f:f6:4b:
                    c6:17:b8:a8:e5:97:05:1b:b6:0a:a7:2e:b6:3c:8a:
                    63:1a:e1:61:ed:e9:3d:5e:76:3a:17:a6:3d:0d:8c:
                    a9:26:1c:8a:30:4e:fa:46:06:75:79:20:c9:3d:c4:
                    33:98:93:a6:10:6e:e1:ae:01:93:95:a7:e0:01:62:
                    7e:c8:81:d3:90:c6:3e:71:2b:fd:01:5f:55:9a:58:
                    9e:88:96:ef:9b:40:86:3b:5b:ca:16:58:d0:dc:36:
                    dc:cf:68:ba:ce:2f:4b:c5:37:b0:f2:ca:72:dd:26:
                    f4:d8:66:84:ad:f9:dc:f3:90:6d:ab:dd:27:90:9a:
                    d4:7d:ed:7a:b2:5a:da:d5:85:10:3b:7a:7a:9f:ce:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E7:CB:E1:26:2C:7B:67:2A:76:D9:03:F2:40:62:51:F3:9A:1C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/6d2ceda2-d8ab-3808-93b1-84b302bf2b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.75.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ac:c6:f8:5f:73:56:0b:d1:47:23:e2:02:65:9f:06:48:fa:
         7d:6a:fe:7e:6c:db:02:9f:bb:0a:d7:ab:76:09:09:91:88:40:
         55:a2:52:ce:85:13:67:27:13:05:62:f4:a9:25:dc:4b:e7:68:
         16:06:49:32:fe:2e:b0:18:0c:80:4e:0a:ef:b9:35:ea:46:7c:
         2c:75:8a:3e:0b:1d:30:90:9f:72:fb:e2:27:12:d6:b1:b5:d0:
         5e:e9:b8:c2:e4:79:8f:70:21:d3:ef:94:a8:37:a9:f6:c8:87:
         02:75:f3:b3:21:58:a2:7c:e7:c8:7c:41:3c:26:90:43:37:c3:
         03:f0:86:49:d8:16:3c:4b:5e:12:e7:12:91:89:37:93:c2:f0:
         70:d2:ce:b2:db:23:96:1f:d1:61:e2:8f:c1:44:01:4f:dc:e2:
         d9:af:cc:0b:1c:8e:8c:4f:16:de:7d:b2:fa:e0:5e:01:e4:76:
         0d:b2:e8:c0:64:c4:d2:24:5f:84:6f:62:8a:dc:52:28:c2:fb:
         4e:de:be:3c:3b:e9:77:01:c4:70:0c:b8:6d:ac:35:8a:70:ba:
         e4:05:47:80:7c:b4:da:66:21:23:b7:17:66:7f:81:86:1a:a3:
         ff:40:bd:a8:7b:b2:31:c3:f0:8d:a6:eb:cf:04:f5:bc:68:b7:
         88:08:ff:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:49:43 2025 by rpki-client