Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06136422-c0d1-3f65-8442-083934687440.roa
File:                     06136422-c0d1-3f65-8442-083934687440.roa (raw, json)
Hash identifier:          vqTP95TnwVTQr/WMJ10B5vikTJm1MDi5me9evYDKdAU=
Subject key identifier:   27:71:E8:01:AC:C7:C8:08:DB:C6:28:0D:A6:12:85:D6:F0:B5:F6:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8CDEC640D0F5363E09280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06136422-c0d1-3f65-8442-083934687440.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        76.114.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:cd:ec:64:0d:0f:53:63:e0:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=9a78b002-2516-4e09-83ff-a7b00cd9c5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:24:fa:ed:86:0e:e0:c3:a5:7f:6b:83:dd:b6:
                    45:1a:d7:1b:80:b4:59:1a:34:67:6e:33:cf:78:e6:
                    88:a1:fc:c8:5b:b5:5d:ee:c2:ee:0f:ec:76:fd:ad:
                    18:5c:e9:0d:eb:b9:f0:dd:98:63:82:98:fc:80:d7:
                    2b:89:77:47:00:77:d0:e1:e8:ce:3b:57:e0:43:16:
                    c1:95:27:5c:6a:fc:37:63:4a:52:13:9d:6e:a4:94:
                    96:87:58:31:87:44:0d:b4:43:d3:17:9d:b8:cc:5b:
                    2a:24:4e:d6:e8:4f:af:79:28:c0:d4:04:ea:c7:9d:
                    df:12:a6:a4:4d:fa:2f:21:d3:bc:ea:34:30:bb:d9:
                    82:e7:f2:3d:90:1c:12:4e:fb:e5:0d:fa:87:26:7b:
                    72:59:1d:b7:37:0c:ef:c9:e5:ae:2e:92:7e:00:b8:
                    d1:dc:84:4f:3c:a3:71:c0:06:6e:0a:91:a9:3d:8c:
                    91:ed:18:40:b0:a8:82:f9:f4:7c:e1:1a:ae:16:b2:
                    fe:d6:33:0c:d2:e6:01:32:97:c0:56:f3:ca:e6:a9:
                    c9:31:66:e7:17:0c:61:f5:fe:7c:dc:c9:52:a4:e7:
                    aa:24:0f:a6:44:79:27:80:77:b5:44:c5:d8:13:97:
                    43:a7:ac:3c:f4:4e:09:86:a8:23:64:6c:0b:ef:7e:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:71:E8:01:AC:C7:C8:08:DB:C6:28:0D:A6:12:85:D6:F0:B5:F6:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06136422-c0d1-3f65-8442-083934687440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.114.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:74:ea:f5:2f:00:79:6a:35:2b:d1:26:3f:9f:59:88:51:59:
         88:f8:af:ee:1c:84:a5:99:81:d5:5f:38:b9:9c:4d:b4:31:c0:
         ea:a5:1f:6f:7d:fb:52:c1:58:92:52:da:bd:ba:ac:d8:17:e3:
         a2:3e:0b:94:e3:d4:44:79:ed:9e:9f:c6:db:84:45:26:78:f3:
         1e:8b:1a:6b:e7:fc:5e:cf:96:cd:5e:da:b2:bf:2a:39:f8:e8:
         49:f0:a5:8a:f0:78:84:cd:f4:7e:b8:03:58:90:85:aa:b4:4e:
         d3:5c:52:1c:66:3d:64:c3:30:df:41:5d:97:35:96:c1:48:17:
         f8:57:8f:cc:36:98:9c:a9:be:e5:b0:c5:a6:ba:53:73:9d:e9:
         ea:3f:a1:f8:28:3c:9a:ed:ac:7f:e7:28:21:9e:bc:1d:0e:10:
         e1:f8:31:d4:7c:fc:65:91:9a:20:62:65:77:46:8e:26:29:f3:
         f8:d8:e4:59:85:5c:39:d1:80:2e:28:77:75:f1:8c:9a:7a:a9:
         b6:e2:b3:66:35:b6:ee:3f:ac:36:30:af:ba:d6:29:d0:90:13:
         00:c8:03:21:cd:64:e9:f0:f4:29:56:92:ec:17:76:48:8d:ec:
         66:b7:84:70:d2:b1:fd:ce:07:40:1e:46:ac:34:48:bd:c8:b7:
         18:c7:58:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uM3sZA0PU2PgkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
OWE3OGIwMDItMjUxNi00ZTA5LTgzZmYtYTdiMDBjZDljNWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlST67YYO4MOlf2uD3bZFGtcbgLRZGjRnbjPP
eOaIofzIW7Vd7sLuD+x2/a0YXOkN67nw3Zhjgpj8gNcriXdHAHfQ4ejOO1fgQxbB
lSdcavw3Y0pSE51upJSWh1gxh0QNtEPTF524zFsqJE7W6E+veSjA1ATqx53fEqak
TfovIdO86jQwu9mC5/I9kBwSTvvlDfqHJntyWR23NwzvyeWuLpJ+ALjR3IRPPKNx
wAZuCpGpPYyR7RhAsKiC+fR84RquFrL+1jMM0uYBMpfAVvPK5qnJMWbnFwxh9f58
3MlSpOeqJA+mRHkngHe1RMXYE5dDp6w89E4JhqgjZGwL734gywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdx6AGsx8gI28YoDaYShdbwtfYRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDYxMzY0MjItYzBkMS0z
ZjY1LTg0NDItMDgzOTM0Njg3NDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHJuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACN06vUvAHlqNSvRJj+fWYhRWYj4r+4chKWZgdVfOLmcTbQxwOqlH299
+1LBWJJS2r26rNgX46I+C5Tj1ER57Z6fxtuERSZ48x6LGmvn/F7Pls1e2rK/Kjn4
6EnwpYrweITN9H64A1iQhaq0TtNcUhxmPWTDMN9BXZc1lsFIF/hXj8w2mJypvuWw
xaa6U3Od6eo/ofgoPJrtrH/nKCGevB0OEOH4MdR8/GWRmiBiZXdGjiYp8/jY5FmF
XDnRgC4od3XxjJp6qbbis2Y1tu4/rDYwr7rWKdCQEwDIAyHNZOnw9ClWkuwXdkiN
7Ga3hHDSsf3OB0AeRqw0SL3ItxjHWD0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:03:02 2025 by rpki-client