Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5242d2ac-68de-3d0a-8d7d-605dc24ebed9.roa
File:                     5242d2ac-68de-3d0a-8d7d-605dc24ebed9.roa (raw, json)
Hash identifier:          PmHt772QfmXzJlARHa1DEaXFZhDcObqJuokTnLTG9uo=
Subject key identifier:   2E:C8:E3:89:E6:2C:DE:5D:A6:BB:3D:92:5C:21:4C:CD:79:94:64:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA879C47EA04930D394400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5242d2ac-68de-3d0a-8d7d-605dc24ebed9.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        76.112.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:87:9c:47:ea:04:93:0d:39:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=83b7458d-b756-4124-853c-d0b862703b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:12:72:fb:9f:b6:fd:ad:b1:57:ff:dd:f7:
                    66:00:1d:5f:df:5e:ee:a6:0a:e8:14:a2:75:e1:9f:
                    14:e4:cd:8e:1d:f9:ce:5f:bd:38:5f:f1:03:5c:22:
                    70:e4:d0:dc:73:7f:30:d5:71:16:91:79:06:9e:aa:
                    3c:49:5c:a2:d9:0c:4d:a8:af:3a:2a:38:dd:b9:64:
                    d7:3d:7c:a2:45:2c:f3:67:e3:b6:76:a9:bf:5e:37:
                    08:b9:72:77:fd:ac:b6:fc:7c:fd:d5:a9:79:71:0a:
                    e9:e4:12:c7:7c:d5:b0:40:28:96:93:b7:c7:79:b5:
                    c1:f6:c9:52:44:23:23:38:c2:d8:0e:8f:7e:7b:04:
                    d7:1e:1c:67:38:9c:d8:9a:fe:96:4d:60:3a:07:26:
                    9d:d2:9c:e2:d1:54:83:da:cf:1d:3e:62:ef:47:92:
                    67:6f:37:a1:a1:55:10:5c:21:98:76:d6:47:eb:f5:
                    8b:aa:41:7a:8b:98:df:23:ac:29:63:db:3d:eb:7f:
                    61:ec:74:76:dd:b4:83:45:f8:d2:89:8a:88:17:46:
                    e9:f6:62:14:28:b8:1d:8e:68:7d:f0:41:0f:1e:b5:
                    2a:37:0f:e0:90:0e:b5:cb:08:52:29:8f:ce:ee:5c:
                    db:fd:00:cd:67:63:55:ed:be:00:af:8a:e3:4f:e0:
                    91:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C8:E3:89:E6:2C:DE:5D:A6:BB:3D:92:5C:21:4C:CD:79:94:64:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5242d2ac-68de-3d0a-8d7d-605dc24ebed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.112.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:f4:86:46:be:f1:c6:fa:70:d3:2e:72:ae:73:09:3a:55:91:
         71:30:1c:fd:9a:f2:a2:31:8d:52:e0:c7:87:04:a8:95:f0:74:
         70:2b:40:13:0e:10:81:24:a2:b6:9a:f3:0d:38:5b:b8:ad:9b:
         9d:f6:51:b7:6d:aa:92:5c:11:c2:26:12:d2:37:00:3e:7e:e0:
         a6:30:91:90:df:2c:be:46:8e:3b:2a:37:a2:23:07:85:de:2a:
         ed:7b:40:ef:38:6f:75:ed:78:f9:22:38:61:a4:4c:dc:60:7e:
         ff:04:dd:96:3a:3e:49:c7:b5:f4:f0:10:98:4c:37:5c:57:de:
         cd:54:64:ac:76:0a:68:be:2d:00:74:71:ea:93:aa:7f:94:ce:
         d5:98:82:a7:f9:1f:b3:81:eb:46:ae:3d:3c:9d:c1:5c:d4:d9:
         81:1f:c9:11:63:f8:8c:27:1b:b6:46:3c:33:c4:ea:37:ed:5f:
         34:10:ce:00:cd:53:4f:64:22:52:be:41:59:44:28:51:95:4b:
         a9:68:c8:a6:f3:a5:39:e7:07:2c:dd:ae:fb:d6:fe:25:d4:7f:
         dd:4f:f9:9b:5d:16:d6:b5:e9:57:d4:e5:71:89:49:30:60:00:
         44:31:96:0d:62:81:df:1b:43:76:1c:03:c9:84:02:a6:d5:74:
         05:31:ef:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:03:09 2025 by rpki-client