Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa
File:                     eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa (raw, json)
Hash identifier:          gfhDZ3jTEBC+qrrpjynkjuB1u1U9tFq9nMhmIRYz/Ok=
Subject key identifier:   EC:21:D1:32:EA:EA:0B:CD:50:CE:D6:D5:C6:25:F0:D3:AC:4A:C1:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7D9C0400B05234CB70280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        96.249.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d9:c0:40:0b:05:23:4c:b7:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=cec6ab85-f7b1-40ad-8323-aa760da20c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ad:fb:1a:a3:93:c7:8b:4a:b6:c6:9e:f3:39:
                    b2:82:c8:80:51:e0:dc:a0:f7:f8:81:ae:4d:9d:c8:
                    df:90:03:cc:15:24:2c:45:32:fa:66:b7:77:f7:47:
                    40:d0:b7:11:ab:94:47:93:2b:93:1b:cb:09:02:a4:
                    15:c4:76:1a:76:24:b7:d9:20:a1:d1:06:22:d7:69:
                    d8:5f:3d:76:82:d3:0f:84:9d:fe:05:a6:57:1f:e6:
                    96:73:d8:8e:8b:3f:f6:44:d0:84:e4:9c:c3:f6:3a:
                    98:18:fc:23:c2:b8:a4:44:1c:fc:f8:d9:4f:90:b3:
                    dd:19:7e:40:31:ef:d3:23:ca:f1:77:a8:dc:fc:35:
                    f7:1f:76:6f:5e:dd:61:de:d9:b8:0f:c8:b9:ef:3f:
                    fe:55:d8:0f:b5:25:b6:d9:1a:c6:5c:d6:95:5c:5c:
                    bf:cb:15:ec:b3:45:e5:76:27:b0:40:99:e2:2e:3b:
                    b8:3c:2b:04:15:4c:b4:af:4a:89:39:d3:9f:47:e1:
                    3c:6f:cb:fc:11:c0:d8:1f:f0:bf:bb:7e:1e:73:53:
                    a6:cc:51:65:f8:91:be:4e:a8:a4:08:06:78:9e:96:
                    c7:75:ba:61:5c:ad:0e:6c:60:ed:bc:b3:9b:1d:51:
                    b0:eb:b9:2b:ca:e4:2d:3c:76:46:ee:59:1b:f3:c0:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:21:D1:32:EA:EA:0B:CD:50:CE:D6:D5:C6:25:F0:D3:AC:4A:C1:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.249.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:85:49:9e:21:7c:50:bb:49:7a:d2:36:c5:cc:cb:a1:65:ea:
         eb:36:64:6a:e4:02:49:49:78:b4:fb:15:ec:18:ec:9b:1d:2b:
         e5:99:89:cb:bf:ad:fd:10:1e:dd:10:af:5b:37:1f:85:41:a1:
         79:c2:3f:09:ff:87:bb:16:7f:a3:b1:c1:73:ba:f7:2f:ec:8d:
         04:b0:89:e7:93:b1:a1:60:3c:b9:75:0d:df:55:12:d6:a9:c0:
         eb:65:d9:6e:53:94:89:44:be:b9:26:22:1d:3a:f7:b7:ec:fb:
         39:0a:6d:47:ae:bd:31:3f:cb:33:18:89:a2:de:f7:f8:36:20:
         1e:1b:ab:01:76:25:b3:03:ef:16:1d:8d:80:10:2c:77:75:9a:
         f7:a7:76:7a:37:78:ea:a1:bb:04:1a:16:ba:9e:7c:05:72:ee:
         d8:9e:ad:26:0a:26:70:f3:33:a3:64:6d:5b:8a:81:65:1c:46:
         32:ce:7a:69:ac:0a:6b:7b:0b:29:45:4b:bb:8e:8f:80:85:5f:
         fc:7d:2a:fd:e1:6b:c7:be:2a:95:29:09:fb:50:da:f9:b3:16:
         35:43:05:bf:70:bd:7d:fb:c3:85:1b:8a:b1:0b:c5:6f:29:d0:
         42:32:20:13:e0:54:09:27:52:7d:6a:9a:30:45:2f:6e:38:65:
         38:e7:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:23 2025 by rpki-client