Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27786fc1-12e1-39b0-be5e-b55d45da0178.roa
File:                     27786fc1-12e1-39b0-be5e-b55d45da0178.roa (raw, json)
Hash identifier:          fwBE4j+9i5y1c2vNWjqetV0LRg1sq4rKD/1SAt/Zl6k=
Subject key identifier:   2B:09:B3:39:11:AA:EF:A4:7E:C6:45:FA:DB:12:52:0F:E7:08:92:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9946E78585D74551E0460
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27786fc1-12e1-39b0-be5e-b55d45da0178.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        174.168.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:94:6e:78:58:5d:74:55:1e:04:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=b73b65cd-f593-4692-91af-824556742a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:c4:e0:d0:d9:91:ae:af:75:38:35:b8:a4:
                    6e:2d:46:d1:6c:9e:ce:e8:b2:fc:bf:7d:06:e4:43:
                    b7:ee:49:cb:88:27:aa:65:f5:77:e9:d3:02:b1:ff:
                    83:be:ed:53:c9:da:b5:97:dc:79:14:ee:60:b8:22:
                    9a:04:f2:e2:a8:c5:fc:fa:b0:8c:d5:45:60:9d:3e:
                    1b:d0:4d:22:df:d4:3d:f9:68:cb:df:27:11:67:99:
                    26:f3:64:33:15:fd:96:01:8a:63:0c:97:fd:7e:b1:
                    1d:cb:5e:4d:8f:97:11:7a:51:a2:11:46:b9:20:c5:
                    28:08:1b:58:28:9c:d9:6f:9a:dc:fc:4a:eb:47:9e:
                    3a:d3:96:77:3f:41:f8:6c:3b:32:27:a6:c1:bf:21:
                    07:45:8f:d6:d6:39:e9:2f:a4:cc:d7:01:31:51:f1:
                    76:5f:8d:9b:43:1e:30:33:6d:c4:97:b7:a4:2d:83:
                    e3:e9:83:22:c3:51:58:ad:1f:d2:d0:05:24:23:bc:
                    28:e6:20:32:a8:a4:fb:c7:0b:b7:d3:fb:6c:cb:8b:
                    97:e2:84:35:88:ac:d6:5d:86:b7:65:39:83:9f:9a:
                    61:c5:30:0b:60:c3:dc:77:68:ce:7c:9c:5f:0d:f5:
                    6a:ea:72:a5:eb:cc:a4:15:29:10:bc:82:6d:ad:3c:
                    34:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:09:B3:39:11:AA:EF:A4:7E:C6:45:FA:DB:12:52:0F:E7:08:92:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27786fc1-12e1-39b0-be5e-b55d45da0178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.168.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:22:aa:ae:63:93:64:2e:ea:0c:73:af:c8:54:a6:f8:3d:8c:
         36:5c:5c:0e:43:57:09:b7:83:86:dc:d5:36:78:7e:b8:7d:24:
         1c:67:a2:ce:3e:a7:9a:22:6c:d2:69:4b:64:81:95:59:cc:c3:
         1f:b0:3c:23:69:1e:f6:96:fb:dc:bb:d5:40:ac:0d:40:f2:11:
         58:c3:93:12:2e:16:36:18:27:f4:4b:e4:73:cd:2a:bb:7a:74:
         ca:4a:4a:5f:82:0c:06:6c:51:c2:20:a9:05:e9:21:f3:2f:41:
         1f:11:8f:88:35:3c:05:7a:1e:44:12:93:db:54:d6:03:eb:47:
         32:c0:37:72:2d:f9:af:a2:7c:78:c4:aa:5c:fc:72:f5:0a:b7:
         b1:5b:7e:9a:56:d1:e6:d3:61:2f:74:24:a7:d0:7b:3f:4e:f3:
         43:da:20:af:01:67:47:c8:18:7b:b6:98:34:d2:56:5e:4d:6f:
         0b:5e:b4:32:45:f9:58:f9:f2:16:ec:4d:10:b7:d7:44:52:6c:
         ee:7a:f2:ca:66:06:0f:0a:99:e2:cc:f7:d6:12:29:37:6f:4b:
         65:42:1f:f3:28:d9:ca:13:16:02:15:21:55:0c:af:4f:71:58:
         f6:15:c6:43:78:ac:64:ce:ec:21:aa:de:84:aa:9a:dd:1d:74:
         b8:01:59:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:17:12 2025 by rpki-client