Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4217901-bb22-3d9d-8964-d9588aab10ae.roa
File:                     f4217901-bb22-3d9d-8964-d9588aab10ae.roa (raw, json)
Hash identifier:          /6T1spQxkLViwbonJ4YclDqTnyDJIBfJxW8MV8fW9lI=
Subject key identifier:   08:A1:1F:6C:19:5A:05:6F:5A:27:19:27:DC:95:94:2B:8C:50:85:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A999DA3E3F04B832D340F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4217901-bb22-3d9d-8964-d9588aab10ae.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.147.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:99:da:3e:3f:04:b8:32:d3:40:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=210b2b7b-d4c4-45b2-b3aa-82efe05db12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:e9:de:3d:a0:ec:4c:9e:55:ea:fc:15:b6:
                    b9:74:e1:a1:80:6c:25:07:f9:6e:17:94:6b:63:4b:
                    22:c4:27:94:91:f1:ad:4a:29:68:41:54:3b:04:a3:
                    ae:7c:7b:c4:20:81:05:a0:73:bb:58:ed:06:dd:0b:
                    36:8e:d0:b0:82:60:5e:89:e5:2c:f4:13:3d:50:34:
                    de:da:83:67:50:c4:51:5a:d3:b3:ff:f5:d0:fc:49:
                    1f:fd:59:55:a8:df:85:94:65:1e:2b:ed:05:ea:83:
                    bd:18:12:cd:9b:fd:f8:07:46:e6:78:88:3e:fb:cd:
                    b7:46:df:28:ae:61:35:e6:46:0b:91:e1:28:19:31:
                    88:49:79:26:3f:7e:ce:f3:4a:4e:ef:c7:30:ac:98:
                    8b:6b:d8:f5:3f:02:5a:81:62:e4:e1:f3:18:57:ff:
                    95:16:f5:3b:2f:f0:9e:1b:5f:4f:0e:07:ab:82:7c:
                    e9:32:cb:39:11:8d:b9:fb:ee:94:14:0e:a5:33:7f:
                    72:8c:e9:f4:ad:d5:0d:69:e3:f4:a1:c3:23:79:c3:
                    e9:26:31:20:d9:6a:84:1c:45:a4:a2:4d:d8:82:a3:
                    18:c8:bf:86:d8:18:8f:68:47:6b:10:62:a1:a6:2d:
                    22:7a:c2:d1:e0:4c:b0:3e:a7:ad:f0:37:37:1a:fa:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A1:1F:6C:19:5A:05:6F:5A:27:19:27:DC:95:94:2B:8C:50:85:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4217901-bb22-3d9d-8964-d9588aab10ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.147.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:b1:4a:d7:5b:f1:fb:06:47:0d:f5:fb:6f:63:d6:7d:fb:
         42:10:4e:89:49:dc:1f:58:1b:0c:a7:bd:47:af:ee:64:aa:d7:
         96:46:01:ad:55:87:9a:d3:ac:64:ed:fd:43:91:40:4b:4c:06:
         a2:5d:d7:61:79:32:8a:ba:f4:bf:1e:a5:28:81:d4:5a:5e:07:
         65:ab:e7:f0:01:a0:d9:86:88:17:09:e2:24:bc:bf:a5:94:b0:
         fe:ac:f6:aa:dd:05:74:fe:18:d3:c4:42:d5:c7:07:4b:6c:81:
         f5:46:43:07:ef:2b:0c:a9:cb:97:7d:b0:36:ac:a2:86:e8:1e:
         b1:08:9e:f6:80:47:ef:23:aa:30:69:b8:54:ef:16:0d:8c:8a:
         ac:fd:50:71:00:83:21:7b:1d:88:74:22:02:ac:8e:ae:0f:74:
         42:c0:54:9e:c1:20:ee:48:c6:38:56:c4:4a:a4:7f:5d:36:ca:
         4e:a2:fc:15:02:a5:ca:ed:68:a4:cf:c0:d9:58:e8:6c:23:7d:
         be:44:b0:03:76:32:5a:1a:6f:da:48:36:1f:4d:e3:ec:22:84:
         39:17:ca:1b:59:df:a6:1e:c8:33:bd:97:25:c5:54:17:a0:b7:
         8b:3d:a7:98:40:d3:6e:16:9f:72:4d:6f:80:17:98:c3:08:15:
         19:0a:e7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:44:23 2025 by rpki-client