Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa
File:                     8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa (raw, json)
Hash identifier:          cxSCYyTufu6f/m7Oo9+lnIuMJBz/hCy4QsGDUAUhx7g=
Subject key identifier:   A7:D8:93:F3:72:4F:64:F9:E2:A2:14:B8:FD:12:CC:26:26:37:CF:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7E0EB418E98E91B3F5600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        76.115.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:e0:eb:41:8e:98:e9:1b:3f:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=7a9172e6-5078-4311-8db5-6a9c1aeaf133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:c9:d8:65:39:a7:2e:e1:20:22:7d:90:46:
                    a3:ae:e6:c5:c0:07:a6:1b:54:ea:68:17:12:d9:aa:
                    01:dd:88:5a:14:03:0c:07:39:5b:cb:71:58:52:be:
                    d6:00:2a:55:1d:ad:c0:61:32:cb:87:3f:5b:2f:55:
                    58:90:58:0a:53:36:a1:2b:c0:94:1e:15:c9:41:12:
                    83:31:a5:f3:76:07:a2:bf:75:46:32:e6:cf:26:4b:
                    58:be:80:85:20:2c:3c:71:82:e9:ee:07:21:db:5a:
                    90:cb:9d:93:84:72:85:71:a1:01:c8:c1:af:c5:83:
                    2f:b5:4a:ee:ad:3a:bb:c6:15:94:6c:be:d1:63:71:
                    87:76:7b:91:e6:04:32:24:1a:ce:a1:4e:f6:35:de:
                    83:6b:6d:79:20:bd:c7:e8:39:88:03:f7:d7:03:74:
                    ae:91:fa:96:1f:3b:40:63:28:aa:01:bb:2b:c1:00:
                    7d:b1:e1:41:d9:7d:16:c1:e4:96:48:79:6c:58:31:
                    7d:d8:ae:2d:82:ac:00:03:9c:74:d4:39:1d:72:ec:
                    7f:8a:01:63:7b:cf:b0:41:ae:b2:e2:e9:82:a6:06:
                    dd:0f:b7:2f:29:18:d8:28:d7:81:b7:9a:62:86:43:
                    96:50:13:3e:c6:43:65:04:57:70:ad:34:af:93:98:
                    ae:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D8:93:F3:72:4F:64:F9:E2:A2:14:B8:FD:12:CC:26:26:37:CF:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:df:c3:14:b3:1c:a0:1c:a3:c9:eb:66:f0:d3:eb:e5:6a:fb:
         4e:0f:10:91:4d:51:30:85:3e:e4:89:6d:ea:be:82:e8:51:29:
         57:bf:be:71:f6:ca:d3:9f:e0:7b:de:76:83:5b:7d:90:04:c6:
         87:37:30:fb:46:77:c4:7d:3b:bd:7e:ce:e4:3e:4a:c7:48:37:
         f2:7a:4b:7f:cf:96:da:94:9a:99:ef:b1:97:98:f6:d4:c6:13:
         3f:31:8e:06:27:fa:97:5f:db:58:de:97:eb:ff:bd:4a:35:3a:
         e1:ce:72:f4:dd:85:e7:41:04:b6:72:54:75:f0:42:68:95:9d:
         86:a2:04:d1:11:5e:6b:29:fe:ee:d5:d0:87:42:d2:dd:54:43:
         44:3d:db:43:d1:c8:fe:6b:f3:4b:c1:bc:66:d4:06:dd:15:40:
         34:ab:34:e1:0e:1e:39:54:a7:da:a0:ca:43:dd:e6:6f:1f:2c:
         06:f6:64:ee:fd:2d:7a:1e:64:a9:2e:f1:e0:83:bd:07:b5:6a:
         72:a1:05:20:ac:3f:e7:82:fe:3d:dd:ae:cc:c4:eb:a1:e1:13:
         e5:d5:37:d6:95:71:70:eb:14:48:14:09:d7:f5:75:6e:cc:28:
         4e:49:e1:9d:a1:eb:fd:da:a8:da:c9:51:e6:c6:b3:ea:79:5f:
         e4:40:4f:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp+DrQY6Y6Rs/VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
N2E5MTcyZTYtNTA3OC00MzExLThkYjUtNmE5YzFhZWFmMTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVrJ2GU5py7hICJ9kEajrubFwAemG1TqaBcS
2aoB3YhaFAMMBzlby3FYUr7WACpVHa3AYTLLhz9bL1VYkFgKUzahK8CUHhXJQRKD
MaXzdgeiv3VGMubPJktYvoCFICw8cYLp7gch21qQy52ThHKFcaEByMGvxYMvtUru
rTq7xhWUbL7RY3GHdnuR5gQyJBrOoU72Nd6Da215IL3H6DmIA/fXA3SukfqWHztA
YyiqAbsrwQB9seFB2X0WweSWSHlsWDF92K4tgqwAA5x01Dkdcux/igFje8+wQa6y
4umCpgbdD7cvKRjYKNeBt5pihkOWUBM+xkNlBFdwrTSvk5iufwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfYk/NyT2T54qIUuP0SzCYmN8+7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODAyM2M4YjgtZjA4Zi0z
NGE3LTkxZmUtYTY1OGFhNWY2Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHNgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ3fwxSzHKAco8nrZvDT6+Vq+04PEJFNUTCFPuSJbeq+guhRKVe/vnH2
ytOf4HvedoNbfZAExoc3MPtGd8R9O71+zuQ+SsdIN/J6S3/PltqUmpnvsZeY9tTG
Ez8xjgYn+pdf21jel+v/vUo1OuHOcvTdhedBBLZyVHXwQmiVnYaiBNERXmsp/u7V
0IdC0t1UQ0Q920PRyP5r80vBvGbUBt0VQDSrNOEOHjlUp9qgykPd5m8fLAb2ZO79
LXoeZKku8eCDvQe1anKhBSCsP+eC/j3drszE66HhE+XVN9aVcXDrFEgUCdf1dW7M
KE5J4Z2h6/3aqNrJUebGs+p5X+RAT4M=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:22:13 2025 by rpki-client