Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85c8d11c-0716-3932-b0cf-95ad5f3513f4.roa
File:                     85c8d11c-0716-3932-b0cf-95ad5f3513f4.roa (raw, json)
Hash identifier:          SHHO3XZmOg1M+87vEifOnXy12oCwuJpgZQ0LviJubyo=
Subject key identifier:   1A:9D:9E:A8:50:CF:BB:04:0B:05:A4:87:D2:8D:AD:17:09:38:42:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7EDC4C348015CBCE9F600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85c8d11c-0716-3932-b0cf-95ad5f3513f4.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.147.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:ed:c4:c3:48:01:5c:bc:e9:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=4df34939-bb79-4112-ad6c-75836dff6f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:1f:3f:6a:12:1b:64:4f:9d:1a:e9:1c:eb:
                    ec:81:52:65:d4:18:a8:1d:c5:a8:31:fe:e7:18:20:
                    7c:30:e2:9c:8e:6b:b6:e7:69:ad:22:77:bf:17:e7:
                    8e:79:34:43:9e:bd:7b:6b:3d:01:a1:34:95:58:e0:
                    ec:03:b8:66:4c:8f:76:fc:b0:02:b4:73:9b:37:09:
                    80:96:3b:82:62:d8:fb:9f:d5:12:93:30:14:2a:1b:
                    e2:35:2f:7a:4e:02:d9:ea:a0:57:8c:36:82:43:dc:
                    69:8a:25:02:c2:32:ef:46:0a:c0:51:e5:77:10:ea:
                    05:7a:15:e6:f1:c2:19:57:d0:13:69:83:92:84:5a:
                    24:2e:cf:f6:ca:65:57:98:83:65:3c:2e:22:e9:e0:
                    77:02:9c:2a:4c:55:6d:97:3e:9d:fb:5e:42:cb:c0:
                    65:49:7c:57:ef:57:0a:e5:30:99:94:e0:af:df:98:
                    39:87:e9:2f:17:a6:03:0b:7e:b3:a9:12:15:37:8d:
                    97:00:67:68:d1:ce:07:da:84:e5:39:e8:92:0e:5e:
                    7b:4e:ed:8b:c9:d6:f7:e8:0e:e4:c5:41:bf:15:42:
                    88:5e:9e:83:8a:02:dc:f2:ee:f1:3a:23:d8:5c:4c:
                    be:ec:83:b0:0a:f3:2f:86:55:41:dd:8c:c2:3c:d6:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9D:9E:A8:50:CF:BB:04:0B:05:A4:87:D2:8D:AD:17:09:38:42:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85c8d11c-0716-3932-b0cf-95ad5f3513f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.147.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:42:fa:e4:b4:28:91:cb:3d:a0:b1:52:a6:76:63:0b:8d:60:
         f9:3b:50:e5:19:36:6f:87:46:a5:db:f5:51:53:d8:37:3f:ce:
         ad:fd:cc:5d:41:d8:55:45:13:6a:08:84:40:c4:fa:7a:b6:94:
         4b:ff:0a:16:09:ca:ee:9f:f5:90:e6:d4:b7:6d:84:eb:36:8e:
         51:87:cc:13:69:d0:03:c8:03:d8:26:65:56:cb:d0:d0:40:32:
         97:de:50:0a:5a:f8:f3:af:4a:cd:fd:53:f5:98:f7:61:4d:d1:
         3e:69:b4:7c:bd:f7:ee:33:1d:b6:af:c3:7f:66:36:d6:f5:19:
         da:ae:e0:2d:26:8b:4d:ed:94:b0:c0:4c:c0:df:22:4b:2d:3c:
         f4:d2:05:a4:eb:03:45:0c:2e:f5:4a:15:0d:06:83:7f:c8:8f:
         84:37:7f:75:e3:f5:37:0c:22:73:0a:56:b7:46:33:67:11:ac:
         6a:d3:95:f1:e8:4d:e7:cf:9f:7f:3c:0d:e0:74:c2:7c:fb:d8:
         07:f1:24:bc:af:f7:1c:c3:ac:a5:c0:7e:f3:be:a7:0a:a4:3f:
         8c:12:03:ba:5e:a2:19:a7:ae:27:c4:6f:49:62:e5:d2:05:af:
         bf:48:a3:47:8a:e0:7c:cc:66:ca:08:60:66:c3:e6:d7:8e:f8:
         a2:32:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:56:31 2025 by rpki-client