Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93c85987-ab07-3464-b605-80bc0b63bc02.roa
File:                     93c85987-ab07-3464-b605-80bc0b63bc02.roa (raw, json)
Hash identifier:          qRj5ts8iTh1Vs17wnD1jF/7IpYzcE68aI2TK5sVwNSo=
Subject key identifier:   27:02:58:0C:8C:F1:FF:5E:16:51:DD:D0:14:35:73:A8:4D:6F:89:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA437F0E0D1C60F65767E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93c85987-ab07-3464-b605-80bc0b63bc02.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        174.162.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:43:7f:0e:0d:1c:60:f6:57:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=4b1c23af-b9a6-488a-832e-e183d3142e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:62:30:e7:96:0e:f1:66:9b:96:5d:d4:4c:30:
                    79:11:ab:e5:61:19:d5:59:87:55:cd:aa:ba:5a:06:
                    b6:f9:de:f6:b5:15:29:f8:88:94:37:47:3a:5b:e6:
                    ae:1d:77:45:7e:df:87:8a:18:22:5f:55:77:b2:1b:
                    c7:81:68:e4:8f:58:04:ed:bf:9f:ce:2a:c0:37:49:
                    70:96:0a:8b:0c:94:10:18:2e:23:3d:31:fa:e0:0b:
                    de:00:48:04:85:e0:e0:9b:fb:02:5f:18:12:13:a8:
                    74:4e:48:ae:10:5f:db:33:22:19:bf:53:9a:6b:4f:
                    71:e6:b7:ed:b5:79:28:42:ae:21:e2:a5:de:eb:1a:
                    9d:7a:0d:69:39:b0:68:46:87:dc:36:d0:a6:5d:a1:
                    c9:f0:b5:48:bd:39:12:6e:3c:c1:bd:cc:25:63:9a:
                    66:e6:2d:82:d4:af:fd:7e:12:9b:aa:e5:db:63:9b:
                    08:8b:b5:5b:76:73:6c:79:93:40:b9:d8:74:f0:d3:
                    4d:a6:5d:78:e6:47:7d:4f:1d:17:49:91:d7:8c:37:
                    07:24:7e:79:70:1f:63:48:73:36:80:8f:d2:2b:ce:
                    5f:c3:6d:04:37:96:b2:38:b4:6c:9b:4d:12:88:a0:
                    14:6a:8c:36:69:2c:0b:9c:28:48:c8:92:c0:4a:fe:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:02:58:0C:8C:F1:FF:5E:16:51:DD:D0:14:35:73:A8:4D:6F:89:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93c85987-ab07-3464-b605-80bc0b63bc02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f7:aa:af:9e:77:60:0b:83:2c:57:42:4f:a2:bd:b5:34:1c:
         79:ec:09:27:9e:48:4b:15:2d:c8:ad:af:bc:7e:c7:40:dd:6e:
         d4:af:80:d7:3a:4a:4b:7b:80:df:ee:99:6b:03:8c:2e:c9:c2:
         d0:9d:73:79:9d:c3:eb:a7:a6:04:84:10:b0:5e:24:58:f4:04:
         41:d1:b2:91:7e:51:9f:9d:d1:34:2f:9c:f9:df:59:0c:24:82:
         3f:d5:9c:ea:b1:da:8a:d5:19:db:5a:33:ee:8f:f2:31:f3:a0:
         85:fa:39:64:cc:0a:91:e5:6a:a8:8e:d0:98:8e:8a:0c:0d:b5:
         1e:df:b7:29:a8:02:f3:39:b7:93:21:a2:71:4d:73:bb:84:83:
         04:7e:0e:5d:c7:5c:6f:f3:ce:89:60:ed:2e:56:39:69:9c:1f:
         8b:c9:83:ce:1f:34:7a:13:68:3e:61:56:f3:01:da:20:02:4f:
         7f:68:dd:e6:29:11:4f:1b:78:c2:80:98:bd:7e:d7:8b:03:0b:
         09:f2:a6:74:31:de:d7:5f:44:60:de:69:77:e0:14:79:de:3b:
         9b:0a:dc:ac:7d:cb:63:88:27:e9:16:87:82:b2:29:81:7a:73:
         ca:b2:0b:5b:83:1b:a3:43:6f:21:1e:71:79:31:cb:04:ff:7a:
         8f:3f:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:24:03 2025 by rpki-client