Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/180209ed-6791-3510-8e13-25fdfff23dd5.roa
File:                     180209ed-6791-3510-8e13-25fdfff23dd5.roa (raw, json)
Hash identifier:          22aHVXu/QfY4kGvMuhgp7u47kyaF3kjLaQxWp3j5S7A=
Subject key identifier:   D9:78:C2:65:DD:89:7A:E3:82:D3:53:E4:72:68:86:93:9E:6C:15:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7F3D669AC33AE10697300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/180209ed-6791-3510-8e13-25fdfff23dd5.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.34.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:f3:d6:69:ac:33:ae:10:69:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=57d59211-afd5-468c-9f1d-8e0a2f98f728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:4c:06:9c:07:e3:bb:eb:5a:82:86:91:cb:
                    f4:68:dc:ac:04:ca:e5:49:3c:ef:c8:45:50:4d:7f:
                    1e:7b:5b:79:b5:b6:73:4a:2e:cc:eb:af:17:85:35:
                    bc:d8:f4:da:43:56:1b:f1:89:d3:2c:58:86:ac:c5:
                    54:1b:6e:3e:74:42:97:ee:bb:30:65:0c:ec:ed:d6:
                    8c:eb:86:fe:55:f2:90:f3:a0:17:d0:43:e6:db:f1:
                    85:ae:13:7c:a2:59:33:bc:32:bb:6c:2c:a3:8b:0a:
                    53:ba:be:b3:9a:9c:76:de:54:e0:0b:58:02:f3:55:
                    27:34:85:20:62:8b:54:b5:8e:fe:c4:16:36:13:81:
                    be:b4:a3:cf:80:41:d3:a5:e2:fd:3e:16:bc:78:fe:
                    9a:a5:08:29:17:fd:75:58:50:cb:63:6b:db:0e:0d:
                    a0:dc:12:73:be:de:40:33:c5:1c:bf:5b:5d:3a:38:
                    9f:20:fa:e0:9e:d4:6d:c8:be:fe:bf:11:ed:7e:c9:
                    01:0a:21:33:8d:42:ea:90:b9:b4:79:6e:8c:b7:ab:
                    57:c3:91:72:34:7d:67:7b:ca:c6:64:17:6d:00:11:
                    31:a4:d7:c0:6b:92:56:f4:c0:63:12:8c:f1:e8:c2:
                    ad:1e:da:fc:a0:97:ab:45:7a:65:7e:e6:54:c2:58:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:78:C2:65:DD:89:7A:E3:82:D3:53:E4:72:68:86:93:9E:6C:15:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/180209ed-6791-3510-8e13-25fdfff23dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:dc:bb:c6:f3:b6:7b:5c:fc:ab:9c:4d:33:67:c6:50:9e:
         3a:02:f9:38:a4:26:b5:be:ce:f0:37:3d:e8:b8:60:0b:4b:df:
         ac:56:e0:db:e7:fc:5f:e5:4f:55:69:3d:37:18:e4:a5:ba:4f:
         44:70:3c:3a:d6:1e:c2:58:54:01:d1:5a:d3:8b:9d:66:28:5d:
         93:44:d7:28:0c:97:59:2b:f3:04:ca:4a:c0:fe:c7:cf:5f:1d:
         e0:0e:70:18:20:77:dc:ff:ca:d3:b0:59:d4:d7:ef:9e:77:af:
         92:84:d7:68:11:a8:60:5f:51:c6:a8:61:2c:38:91:d2:25:ce:
         87:14:bb:43:f2:0a:96:0b:df:e6:46:76:1a:bb:d1:c6:72:d4:
         fc:c6:22:e8:d9:5b:9b:7c:d5:59:66:24:5b:f4:e2:51:b9:7a:
         0c:bc:a9:4d:0c:57:b7:28:a8:8b:79:dc:a6:66:56:6b:fe:41:
         81:93:5f:ff:da:8e:c2:78:89:f2:39:fb:a1:2f:93:3d:83:cd:
         38:37:88:6e:40:3a:79:3c:9d:4b:4b:0e:2e:98:99:e8:8c:30:
         85:11:f4:dc:5e:3b:6f:0d:5d:06:79:7b:94:42:84:2f:f2:db:
         76:9a:08:ea:71:6c:ce:c4:f1:be:f3:12:38:5d:4b:2c:e7:d9:
         87:bd:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:46:20 2025 by rpki-client