Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e16e1dd-ed07-35c5-9a54-552be669ed5b.roa
File:                     7e16e1dd-ed07-35c5-9a54-552be669ed5b.roa (raw, json)
Hash identifier:          kDdJ/hF1SbaB4XDWoZWQYqHj31o3CF2z4wf8RsbuIdw=
Subject key identifier:   96:0D:5E:01:06:BE:C9:D0:F9:1B:35:AF:77:B1:B4:96:47:6C:F6:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A93724C6FF6A194CA07800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e16e1dd-ed07-35c5-9a54-552be669ed5b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        76.31.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:37:24:c6:ff:6a:19:4c:a0:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=2bba5269-cca8-474a-9853-9a3c03c95b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:63:f4:87:23:f0:54:83:b3:8d:cd:0f:7e:
                    35:1d:01:e2:94:25:78:af:79:27:c9:59:52:23:84:
                    55:21:cd:22:10:f8:f2:f6:75:cf:bd:c4:6c:fd:21:
                    1c:6b:92:ae:79:22:45:7c:ac:00:9c:5a:02:1f:4d:
                    c0:01:ff:90:92:d9:1c:23:27:a8:3a:24:b3:5c:2e:
                    3e:0f:c4:e5:b5:40:6b:c4:12:1b:f5:58:96:e3:02:
                    4c:4d:71:11:33:55:27:44:dc:e5:93:d9:89:71:39:
                    1a:00:d0:ad:0f:e0:27:60:cf:64:04:19:f6:89:b1:
                    3e:a1:03:6c:eb:16:be:be:2f:6d:9b:52:d8:25:9a:
                    74:15:51:aa:26:95:a6:31:2a:c4:ae:ba:1d:ec:49:
                    b0:87:d2:9b:51:66:a5:b6:dd:4f:cd:c4:34:84:25:
                    f7:26:28:f7:23:af:33:30:b8:35:ee:5f:0e:c9:12:
                    74:1d:a6:a0:0e:30:76:5d:21:9c:ce:be:30:ec:63:
                    88:ec:a5:2b:a0:56:2f:bf:d5:e6:05:05:3e:1c:c7:
                    72:6d:f9:92:60:79:22:6a:2e:c0:0e:fa:a1:a3:27:
                    ac:71:02:38:f3:85:07:ee:1e:1c:6d:b5:7f:33:3d:
                    9c:61:36:d1:d0:7b:31:8c:d4:55:5a:63:03:1a:77:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0D:5E:01:06:BE:C9:D0:F9:1B:35:AF:77:B1:B4:96:47:6C:F6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e16e1dd-ed07-35c5-9a54-552be669ed5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:70:30:fd:26:af:d7:7b:44:81:c6:3a:00:8f:58:10:2f:5d:
         dd:3c:4a:eb:ca:3f:99:5a:58:1b:ef:70:4c:5d:e6:27:4b:70:
         f0:16:b2:ec:ca:d0:2a:b6:40:d5:eb:52:61:d9:66:36:7b:c3:
         6d:f1:31:be:38:a5:f3:39:e4:97:fd:59:b8:90:6c:bf:49:f7:
         ce:e0:f8:4b:a1:26:03:48:8b:f3:88:50:bd:75:df:a5:de:27:
         bb:07:b6:95:17:09:e1:54:45:16:5f:3e:8a:b4:20:ff:d2:30:
         4c:7b:d1:96:57:44:3f:c5:92:ae:50:2e:b9:7a:1d:45:54:cd:
         41:28:26:a1:f6:3d:86:56:25:1a:b0:59:09:79:43:b9:4a:b7:
         6d:d9:e2:d4:ea:2a:77:71:8d:89:8f:59:1c:c6:30:57:1a:9b:
         36:24:f4:25:5d:08:f6:67:98:cf:b5:2f:d8:85:94:db:dc:95:
         7e:f7:9b:71:ad:25:0d:06:f1:8b:69:38:b9:55:35:77:08:42:
         7a:12:0e:48:7e:f1:83:5d:39:2b:3d:a0:99:68:bc:9d:fe:2a:
         15:88:6e:1d:7e:e9:33:ba:58:c6:da:89:f4:e3:6e:27:f9:26:
         61:8d:b6:2c:d9:ca:c2:36:1c:ff:66:b9:12:85:4f:22:09:86:
         98:82:b3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:34:46 2025 by rpki-client