Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7e4daf2-24f9-3491-87fd-3b1149537b3d.roa
File:                     a7e4daf2-24f9-3491-87fd-3b1149537b3d.roa (raw, json)
Hash identifier:          751JXQiFBx4ob08ulJgoy+7C0Ib3BwJw5+jSHjzYy0M=
Subject key identifier:   46:4E:A3:41:EB:28:24:81:22:AF:A8:50:45:40:84:2A:4D:D2:9F:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA871B4B67C0660046D400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7e4daf2-24f9-3491-87fd-3b1149537b3d.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        76.112.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:87:1b:4b:67:c0:66:00:46:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=36333e59-998a-4bea-b902-23db59107210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:65:a2:75:71:d8:88:b0:e5:f5:7d:9c:af:
                    d0:bc:31:73:77:28:f9:f6:03:cf:af:c7:7c:a1:f4:
                    4f:25:2a:59:32:98:89:46:16:be:79:7b:4a:c2:7c:
                    45:eb:ab:46:04:e1:cf:78:73:0b:6a:11:f5:90:e4:
                    92:3a:67:83:99:4c:af:d8:54:9d:a5:67:06:46:67:
                    56:e5:05:c3:2c:e4:ff:f2:58:c7:5b:90:71:9d:c2:
                    c0:ea:a3:c6:61:23:15:a2:cf:91:32:c5:81:da:5a:
                    19:02:ab:ce:4d:ad:85:45:06:88:02:24:04:68:ce:
                    df:b5:d6:5d:1b:55:96:c7:50:60:b0:25:c3:e5:53:
                    9d:1c:5e:00:22:24:61:2a:ff:ce:ca:a0:23:fb:41:
                    1a:dc:85:77:6b:e6:53:7c:4b:4e:e4:1f:6c:00:b3:
                    df:84:b8:d3:a7:42:2e:09:dc:75:7e:60:38:fb:37:
                    c9:e3:0f:10:72:0a:df:d8:58:5c:ef:2d:e3:89:bf:
                    12:47:4c:56:d9:61:72:23:48:92:d3:9c:d9:95:60:
                    25:c6:40:89:72:c4:75:12:3c:23:4f:64:8a:9a:69:
                    ec:bd:3b:61:25:72:08:af:69:8d:5b:1f:12:e6:78:
                    1d:b7:54:55:64:a2:28:c8:fd:f9:71:8f:4d:db:5f:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4E:A3:41:EB:28:24:81:22:AF:A8:50:45:40:84:2A:4D:D2:9F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7e4daf2-24f9-3491-87fd-3b1149537b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.112.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:27:e6:c5:33:55:94:a2:52:ff:bc:f8:32:b5:4f:01:46:4c:
         ca:6a:2e:aa:bb:f4:33:3a:9a:ae:99:b6:0a:a9:9f:4b:c6:9f:
         34:d6:64:cd:45:d2:34:ee:3f:51:93:18:f4:ca:a5:5a:8b:28:
         af:40:0f:0d:88:a2:cc:e2:11:ed:46:b9:f0:de:cd:80:14:48:
         87:b7:d0:0b:3d:ec:cb:1b:3d:30:12:f1:1d:98:fa:a5:6a:93:
         b2:95:85:10:9f:15:9d:01:01:5c:23:cc:81:bf:36:25:48:64:
         3c:23:bd:cb:2f:4d:52:4f:3d:c3:93:ca:2d:e6:1f:ff:32:79:
         c3:c8:41:42:69:7e:5b:b6:69:3b:e2:c7:08:ae:10:2e:bc:26:
         ec:de:e1:cc:4c:8a:cb:55:b4:bc:e9:6e:12:a2:a7:90:d7:e0:
         0e:39:61:70:8d:ba:b0:62:bc:c3:df:27:d5:16:f3:15:cf:c0:
         19:f5:08:33:b3:85:3a:81:08:05:42:1d:cd:77:50:b4:83:c2:
         6d:95:81:61:0d:95:32:a3:77:54:ab:f7:6e:fb:e0:ee:0a:79:
         a8:23:9d:19:d7:06:29:e8:d7:7e:e0:5b:55:b3:a2:cc:71:a3:
         b2:7b:ee:5f:a9:ad:90:a1:78:dd:4f:ff:f6:1c:c1:e1:07:da:
         51:e4:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:45:23 2025 by rpki-client