Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/421f721c-b5af-3793-98df-3386171c9433.roa
File:                     421f721c-b5af-3793-98df-3386171c9433.roa (raw, json)
Hash identifier:          veyHmZ8YYlCy0CLSXu4OgYgBqyhdKb9CdQwP4D6qFJg=
Subject key identifier:   D2:39:56:C8:F5:CD:8F:3E:D3:00:50:7A:6A:16:12:89:2A:7E:BB:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031E9F7E84663CB4F88EB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/421f721c-b5af-3793-98df-3386171c9433.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        76.122.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:e9:f7:e8:46:63:cb:4f:88:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=cbf1cb61-b64d-4642-92de-b9dbc324c288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a5:35:2b:44:c0:6c:a0:3c:8c:1a:8f:e0:1b:
                    38:5e:8d:3e:c6:7e:27:1e:fc:fd:a3:bc:57:92:45:
                    41:da:43:00:6d:1c:c9:30:46:3e:67:db:5e:65:33:
                    11:30:ae:96:16:d9:37:63:11:ac:e7:65:fc:38:5e:
                    29:76:1d:d1:7b:f7:54:b6:52:53:c6:a1:b1:4e:07:
                    a2:f8:19:42:12:3f:4a:6b:32:15:c9:c0:58:96:af:
                    7d:dc:ec:d5:cb:8c:d3:34:c6:02:0d:10:07:5f:e0:
                    5f:8b:6b:02:1d:93:d8:30:99:0d:d8:c5:65:ae:86:
                    ff:ad:92:58:56:84:68:6b:40:af:ef:11:c5:d3:ec:
                    c4:1b:72:9e:c7:bd:67:b7:2e:37:14:f7:e3:18:dc:
                    44:d6:00:f3:7f:7c:a5:d3:b4:e6:17:5b:7d:51:55:
                    f4:d0:1a:80:c0:dd:70:ff:ff:1f:f3:b3:b1:0f:17:
                    fe:99:d5:a9:45:b8:05:f0:08:3d:32:82:cb:e9:75:
                    a4:5b:42:7c:87:68:32:9e:5b:bc:6b:54:44:61:57:
                    8d:be:16:6f:79:b4:e5:6e:1c:e5:58:c9:35:ba:6e:
                    fd:e2:f5:99:ef:d7:d3:7f:d9:bc:cd:a3:3a:46:07:
                    e3:d3:90:5f:7f:23:00:21:fc:36:f8:4e:19:de:65:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:56:C8:F5:CD:8F:3E:D3:00:50:7A:6A:16:12:89:2A:7E:BB:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/421f721c-b5af-3793-98df-3386171c9433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.122.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:77:05:a9:d8:1c:f9:30:cf:d6:c5:20:5b:a7:f4:53:00:45:
         17:25:09:f7:0a:3e:b4:ab:f9:83:e7:55:3a:ca:dd:03:a4:49:
         b3:f8:9e:f0:53:87:e0:58:61:63:c4:13:f1:40:ca:33:4c:3a:
         5d:fa:ec:21:4f:81:53:6f:2a:04:e3:da:b2:1f:f4:28:2f:75:
         fe:f3:84:00:c0:6d:32:cb:88:33:98:9e:53:bd:75:cf:d5:fe:
         d8:e7:72:e5:72:9c:8d:0b:ac:35:0e:2f:9e:5c:06:d8:07:f3:
         a1:16:f4:7c:46:9d:1d:0f:56:68:6e:32:59:b7:47:3e:27:cf:
         7f:6c:8a:94:b2:30:ab:48:c5:10:68:77:fe:96:14:30:2a:35:
         e1:4b:7a:8d:55:ec:bd:eb:71:fb:14:87:32:7e:fe:07:30:a2:
         88:58:5e:42:a7:8d:66:cf:5d:51:1c:41:24:09:a5:a6:6c:52:
         e4:2f:b3:ba:9e:4d:38:78:ca:82:a2:1c:e2:3f:5d:f6:42:09:
         ff:43:9d:a7:2d:7c:05:de:24:43:f5:6f:bf:a8:51:1d:a1:af:
         e8:8f:98:60:5b:ea:92:4e:b1:70:c7:52:8d:38:4c:e8:ef:c7:
         c3:c4:aa:af:78:a9:b1:d3:4f:22:c0:5d:0c:3f:0b:6e:e1:c2:
         f2:11:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:53:33 2025 by rpki-client