Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a5a871c-c7f0-395f-b1f4-bd670ef9014c.roa
File:                     0a5a871c-c7f0-395f-b1f4-bd670ef9014c.roa (raw, json)
Hash identifier:          devmls1r6QuT2RZq7YED3z9o9wpZ2Ws9Q2gOI/5R65I=
Subject key identifier:   1C:47:EC:21:07:EF:A3:9F:A7:C1:67:98:A7:78:83:D6:03:0B:C5:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8CA9B70389170A313EEC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a5a871c-c7f0-395f-b1f4-bd670ef9014c.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        76.18.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:ca:9b:70:38:91:70:a3:13:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=e00302ba-1247-4992-bb02-24ef7ae56d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:8e:fa:b3:74:0e:75:f1:6d:84:dd:c2:0c:
                    14:3f:78:f4:39:08:43:87:e3:e3:df:2c:06:12:29:
                    65:7f:92:62:3e:25:5c:5a:00:69:c2:3b:7b:a6:2a:
                    64:c1:79:68:ca:06:f3:3d:cf:2b:ba:69:54:f6:ae:
                    40:6d:01:47:78:02:80:41:75:b0:7d:e3:49:76:62:
                    40:7b:ff:0c:db:ea:00:e1:50:1a:8f:18:19:b4:5f:
                    84:05:cd:38:c2:68:e5:02:87:55:73:af:ce:9d:77:
                    39:aa:0f:ad:45:30:62:3e:fe:b5:9c:cc:a4:85:4e:
                    ae:a0:45:85:84:b4:fa:5e:cd:cd:ff:e0:02:a0:a2:
                    df:c9:28:95:4f:96:5e:1b:42:88:53:da:ed:c0:7e:
                    c7:7e:e9:be:17:db:fd:cc:51:45:5e:00:d2:40:9c:
                    b9:a8:54:a4:ae:b1:02:45:8b:1f:fb:b2:e8:e7:2e:
                    43:65:53:74:cd:a8:51:70:46:71:11:a1:66:1a:0a:
                    ec:75:24:03:38:2b:5d:ec:34:4b:eb:10:6b:5a:b4:
                    c5:43:29:a3:33:b3:db:52:cf:60:6a:8d:6b:7c:e4:
                    e2:4b:05:b1:94:f8:43:01:1a:ff:60:4e:96:ee:d4:
                    3c:4d:d9:41:66:fc:22:a3:bb:a3:34:70:a6:cd:d0:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:47:EC:21:07:EF:A3:9F:A7:C1:67:98:A7:78:83:D6:03:0B:C5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a5a871c-c7f0-395f-b1f4-bd670ef9014c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.18.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:52:96:66:72:ac:d9:75:ce:91:a1:ec:cd:fd:d6:d6:a9:83:
         ef:10:ca:06:d3:43:8b:92:63:1d:74:08:70:a3:e6:4e:fd:11:
         df:30:49:65:3b:b9:50:01:4a:88:98:24:5b:2c:11:58:d6:cb:
         fa:50:15:67:a2:4e:4d:55:5e:fa:cc:28:9f:67:9a:a3:45:57:
         ab:49:03:20:6d:86:f0:74:f8:0e:18:07:1f:05:27:39:a7:e9:
         0f:b6:15:23:ea:35:ff:69:3c:da:8c:5f:9a:1d:d2:3e:35:98:
         49:d1:ba:d9:9f:f9:b2:86:57:ac:2c:05:5d:9c:2b:f6:0d:92:
         5c:e6:96:5e:54:1d:5b:a3:1d:9d:b8:6c:79:42:27:30:f1:ee:
         9c:9c:80:92:8d:7d:d9:8f:8a:ce:1f:14:30:15:a7:f4:9b:8c:
         11:b8:91:ec:db:7a:ed:13:87:6b:5f:ff:d1:6e:55:70:0c:2b:
         7a:1c:a3:ed:71:68:27:59:cd:1e:3a:0b:02:31:67:c1:51:fd:
         ff:63:43:6c:d9:5c:84:cb:0c:85:71:90:3d:96:a0:33:d4:14:
         f2:3c:c1:62:6e:30:df:a7:07:69:f6:d2:7d:00:15:3d:27:bd:
         19:e6:36:a7:8e:f9:da:1a:02:75:9b:56:be:4a:20:63:82:27:
         b8:f4:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:16:15 2025 by rpki-client