Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e206f1-fdd3-3013-9be4-0e25717c8b47.roa
File:                     03e206f1-fdd3-3013-9be4-0e25717c8b47.roa (raw, json)
Hash identifier:          Oqq5o/uWsjvGStlIaB9zNy2GJG2oSskF/dSwj9X9JdY=
Subject key identifier:   A7:BE:CA:A1:8F:33:80:5E:E2:0C:CB:DC:3C:1E:D8:90:27:15:04:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAD4457583B0CB24450B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e206f1-fdd3-3013-9be4-0e25717c8b47.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        76.31.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:d4:45:75:83:b0:cb:24:45:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=2ed26738-3a6b-447b-80b4-c630ea54b336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:9d:af:bc:b1:cd:27:db:1e:ec:b9:d8:4c:
                    08:47:30:f8:d6:a5:68:5a:d4:22:99:a4:c2:b3:3c:
                    c5:24:af:bb:37:f2:4f:a3:24:cd:d6:8f:f3:08:b2:
                    05:af:ec:5e:29:3d:c0:cb:ca:1d:dc:ae:4d:85:5c:
                    a4:3e:dc:38:c9:09:c1:e0:50:b8:32:65:86:c6:dd:
                    77:68:f1:5b:e8:1e:b3:29:17:d2:40:d2:55:0b:e0:
                    cd:c4:de:62:36:c1:ae:8b:e0:0a:e3:1a:3c:26:c6:
                    c9:01:76:90:3f:1b:42:f9:6d:5d:87:0f:d2:a7:54:
                    92:63:72:d6:bf:24:4a:50:d8:68:fa:23:27:ec:22:
                    eb:d8:1d:18:34:bf:69:96:41:3b:5a:ab:76:7f:76:
                    2d:75:50:bd:5f:96:c8:66:a0:8b:3c:6f:fc:6f:52:
                    bf:77:c2:fa:78:ae:75:b0:2d:20:bb:70:81:7d:8f:
                    a7:28:71:22:37:ef:02:44:82:93:1e:5b:f1:37:96:
                    b4:b6:55:df:b7:27:9b:bc:09:2a:85:f8:7c:a2:7b:
                    c3:48:72:6e:fb:5a:83:3b:fd:25:17:d0:1a:a0:1a:
                    0a:55:59:c3:59:63:38:5a:a2:28:84:13:df:ab:dd:
                    69:8d:67:5b:03:13:74:ea:ed:29:e2:26:09:35:40:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BE:CA:A1:8F:33:80:5E:E2:0C:CB:DC:3C:1E:D8:90:27:15:04:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e206f1-fdd3-3013-9be4-0e25717c8b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b4:55:23:a8:ef:62:ac:bf:5a:0a:7c:79:26:32:c8:53:05:
         76:6c:89:1e:d1:3f:ee:fb:33:3a:36:29:89:27:0c:0c:b8:08:
         28:de:41:09:d8:c6:31:dd:77:ec:c6:61:ff:03:1e:fe:81:cf:
         8a:8c:55:db:d2:d1:23:6c:8a:cd:04:92:c3:f1:4e:43:7d:4e:
         c8:54:39:8c:7e:ff:09:66:98:95:b7:0c:bf:6d:ad:7e:70:56:
         f0:4c:93:1e:2d:35:90:5f:3d:f7:a6:6f:ab:94:c7:26:79:7d:
         26:03:36:c7:e6:8e:86:1d:a4:85:97:ab:35:e5:e3:77:7d:ba:
         3e:ff:37:db:96:87:c7:e8:30:0a:35:eb:3a:ad:72:54:e9:5a:
         b0:a3:da:0b:11:ef:9c:08:38:66:50:bc:61:5e:71:d9:93:a2:
         ec:52:31:d6:2d:2c:30:c1:01:a8:c8:d8:ee:0c:ae:a3:68:da:
         0e:2e:a1:99:52:f5:00:61:db:84:a5:78:4f:53:b6:af:d9:ed:
         a4:78:f8:84:00:3f:49:02:73:e0:dd:2e:b7:d2:bc:3a:65:ff:
         6d:d6:a8:be:93:73:6b:97:23:59:d8:0d:92:29:f6:e7:ba:0e:
         9e:3b:ad:e5:eb:15:13:32:7f:f3:4d:45:b2:9f:36:1f:ba:f8:
         e0:de:13:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqtRFdYOwyyRFC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
MmVkMjY3MzgtM2E2Yi00NDdiLTgwYjQtYzYzMGVhNTRiMzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06dr7yxzSfbHuy52EwIRzD41qVoWtQimaTC
szzFJK+7N/JPoyTN1o/zCLIFr+xeKT3Ay8od3K5NhVykPtw4yQnB4FC4MmWGxt13
aPFb6B6zKRfSQNJVC+DNxN5iNsGui+AK4xo8JsbJAXaQPxtC+W1dhw/Sp1SSY3LW
vyRKUNho+iMn7CLr2B0YNL9plkE7Wqt2f3YtdVC9X5bIZqCLPG/8b1K/d8L6eK51
sC0gu3CBfY+nKHEiN+8CRIKTHlvxN5a0tlXftyebvAkqhfh8onvDSHJu+1qDO/0l
F9AaoBoKVVnDWWM4WqIohBPfq91pjWdbAxN06u0p4iYJNUB3iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKe+yqGPM4Be4gzL3Dwe2JAnFQQsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDNlMjA2ZjEtZmRkMy0z
MDEzLTliZTQtMGUyNTcxN2M4YjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTB8EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFK0VSOo72Ksv1oKfHkmMshTBXZsiR7RP+77Mzo2KYknDAy4CCjeQQnY
xjHdd+zGYf8DHv6Bz4qMVdvS0SNsis0EksPxTkN9TshUOYx+/wlmmJW3DL9trX5w
VvBMkx4tNZBfPfemb6uUxyZ5fSYDNsfmjoYdpIWXqzXl43d9uj7/N9uWh8foMAo1
6zqtclTpWrCj2gsR75wIOGZQvGFecdmTouxSMdYtLDDBAajI2O4MrqNo2g4uoZlS
9QBh24SleE9Ttq/Z7aR4+IQAP0kCc+DdLrfSvDpl/23WqL6Tc2uXI1nYDZIp9ue6
Dp47reXrFRMyf/NNRbKfNh+6+ODeE1o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:39 2025 by rpki-client