Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/885125fd-b1e8-375d-ba97-9c76fa6c5b80.roa
File:                     885125fd-b1e8-375d-ba97-9c76fa6c5b80.roa (raw, json)
Hash identifier:          j+Pe+hijNQCALEzEuHm26wItIbAv/2XGWueyvO59ApY=
Subject key identifier:   97:52:52:7C:B9:8D:AE:6F:88:CF:31:EE:8B:AD:B3:C6:4F:4B:05:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7DDB235B6A9DCD036BD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/885125fd-b1e8-375d-ba97-9c76fa6c5b80.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        76.115.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:dd:b2:35:b6:a9:dc:d0:36:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=918407ca-3ea0-4809-9e97-1aa1c9cc9ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:99:9c:fe:84:aa:8e:fd:79:80:7c:7b:ea:
                    2e:1a:58:b4:81:e9:82:77:83:84:a4:8f:71:f5:0b:
                    de:11:a7:d3:5c:3d:a1:2e:ce:89:1b:b4:7b:0f:9b:
                    ba:aa:a8:6c:8b:45:45:3f:0d:98:f1:ab:e4:ae:4e:
                    8e:7c:77:3e:a1:6a:57:30:ab:63:6e:3d:6c:dc:13:
                    b2:cd:72:ed:6a:66:f7:29:4d:dd:01:f1:1f:7a:1a:
                    13:fd:b4:d6:d1:ee:68:3c:93:6e:87:01:93:a5:30:
                    66:c1:f6:e9:c2:37:5c:23:2c:1e:8c:c7:e7:d1:aa:
                    f7:7a:91:24:b5:24:ac:e4:f4:94:f9:3a:04:68:ea:
                    7d:a9:d1:68:36:ae:af:ac:42:51:f4:39:10:3d:37:
                    11:43:ea:58:5d:46:11:b0:59:14:58:fe:77:98:a1:
                    a2:3e:2f:b8:25:42:0b:a9:37:82:98:d3:d9:76:18:
                    41:94:c3:5d:50:fb:38:27:29:c2:04:00:0c:d8:ee:
                    78:65:8e:52:68:96:9b:e8:00:59:65:ae:ef:f2:2f:
                    21:ea:51:ba:94:53:f7:8e:44:8b:87:1e:86:55:87:
                    ae:f2:c0:91:4b:03:fb:cf:f8:6b:c6:cc:b2:c6:6f:
                    bb:df:a2:62:8b:d0:e0:40:34:d8:bb:9e:2f:47:d2:
                    61:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:52:52:7C:B9:8D:AE:6F:88:CF:31:EE:8B:AD:B3:C6:4F:4B:05:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/885125fd-b1e8-375d-ba97-9c76fa6c5b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:48:21:0e:1e:e3:27:c4:c8:af:6b:f6:40:59:b1:e2:73:
         4b:8f:b9:c4:f3:94:81:0a:8b:d4:d9:94:00:ca:1f:9d:57:78:
         17:a1:73:18:d1:60:64:ce:ba:c2:f5:5a:25:68:a3:a6:eb:f2:
         b6:14:b5:45:f3:f1:e5:87:24:ca:a3:8b:23:48:9e:8b:33:a6:
         4b:0a:27:4a:26:f1:68:0f:62:17:ac:fe:14:eb:fa:ec:9b:ed:
         99:fa:4e:56:c2:55:6b:65:4d:f1:2d:51:ca:8e:78:58:c2:c8:
         5f:e8:b7:66:5b:20:54:01:29:8b:cd:c6:4c:f3:d5:28:f0:ae:
         02:cc:f2:5a:18:5c:d1:4e:52:1a:17:7c:55:74:1a:0e:3f:d9:
         b1:15:77:57:8b:7e:47:62:f4:19:7a:a6:e7:0b:bc:e7:97:0f:
         7f:cd:a4:e0:6c:02:2b:65:9b:ce:ac:2a:03:17:10:22:a6:45:
         95:b7:84:00:14:65:72:5a:19:0e:d4:16:ea:0d:84:c9:31:5b:
         91:77:ab:11:9a:71:97:5e:f3:64:63:39:a1:94:d1:5b:09:cd:
         ec:1d:06:48:fb:7b:f9:26:e3:93:08:fe:94:1c:d2:c1:7b:38:
         77:8a:21:8f:03:06:43:78:d1:42:f1:ae:2b:a0:59:30:84:d0:
         e8:05:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:43:57 2025 by rpki-client