Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47dd35cb-fe3a-3aea-b14a-952a99eabf19.roa
File:                     47dd35cb-fe3a-3aea-b14a-952a99eabf19.roa (raw, json)
Hash identifier:          SY3qaqY1HWbOaYIrrHYLeqRPvk/TwgDHH3NmEDzdC4o=
Subject key identifier:   A8:A3:B3:B1:C7:71:88:BB:30:FF:5A:35:E7:1B:42:6B:86:02:01:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD10B8274C87BD65CAB2A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47dd35cb-fe3a-3aea-b14a-952a99eabf19.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        69.246.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:10:b8:27:4c:87:bd:65:ca:b2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=4c6c15f0-0c8a-41c3-a1f2-79b43abd9116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:50:6a:da:b8:2f:9a:19:66:2b:e5:68:63:
                    3a:f2:08:4c:e1:72:82:0b:6c:d0:91:75:07:f1:c0:
                    be:e6:75:4a:1a:a1:d5:6e:27:6b:93:d5:73:73:43:
                    96:0e:8d:cd:b1:63:8d:75:0d:28:be:bd:ac:b5:fb:
                    30:54:02:0a:0d:d6:8d:61:75:39:f1:19:14:27:04:
                    c7:c1:61:bc:6e:9b:bf:b6:e6:59:41:09:9f:fd:f8:
                    df:6f:cd:fa:72:db:80:61:c8:83:46:3a:1a:b6:59:
                    1b:fa:a4:3f:39:65:48:e4:b0:bc:c3:ac:d7:4b:f0:
                    15:7d:30:db:1a:ec:b4:56:05:b0:44:39:0f:63:30:
                    b8:42:87:f8:11:a2:63:4b:fa:53:fa:67:5f:66:75:
                    c4:e1:90:fc:45:42:84:7c:e4:e3:89:65:c3:86:f5:
                    06:1c:a5:e2:07:2e:3a:0c:31:ed:0e:47:f5:c7:ce:
                    75:68:90:de:6d:61:18:27:58:09:ab:f7:c9:42:59:
                    58:8e:11:34:d2:ef:b0:cf:5a:a4:e8:41:c4:52:ce:
                    93:ee:89:30:eb:c1:47:ee:06:f8:f7:58:b2:36:d9:
                    11:fc:39:8e:81:bb:a0:d8:90:9e:ec:90:59:22:27:
                    7b:61:48:d6:db:9e:09:37:5f:0c:f0:e3:4f:a4:f4:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A3:B3:B1:C7:71:88:BB:30:FF:5A:35:E7:1B:42:6B:86:02:01:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47dd35cb-fe3a-3aea-b14a-952a99eabf19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:ba:5e:b4:24:58:1f:1a:af:ec:00:33:2e:9d:70:2d:cd:
         ad:9f:77:ed:3f:22:07:1d:d7:85:1d:42:f6:23:75:b5:44:60:
         a0:f5:e8:d8:d5:e3:e6:53:b4:7e:ed:ec:0e:39:2e:1c:3d:3c:
         cd:18:9e:4c:1d:65:ab:4a:2b:29:44:3e:c0:64:d2:a6:f0:aa:
         ca:4e:ab:3a:fc:11:53:05:83:61:c1:91:ab:de:b5:12:c9:e6:
         8b:9b:76:3e:e8:58:e1:74:4e:10:e3:f1:c0:ca:95:93:6f:b1:
         61:09:44:8f:b2:11:31:22:75:34:3a:ac:9a:a9:df:4e:fb:66:
         da:19:a5:79:f4:84:19:8c:f9:cf:ee:b3:89:cf:b7:63:2d:33:
         b5:ce:f5:04:db:5e:03:40:25:73:82:06:74:ef:9b:5c:47:20:
         41:67:2d:71:22:05:5e:49:c8:8a:af:af:0a:cf:ad:6d:e3:78:
         1d:7e:04:c4:25:ea:fa:9c:6d:9b:d4:6f:03:09:75:f4:9e:ba:
         d8:af:68:5b:f4:7d:d9:dd:83:56:e5:a9:2d:ac:3f:1b:c7:89:
         05:3a:ef:7d:96:4b:8e:c9:48:73:d6:1e:f7:61:5c:7e:08:ae:
         f3:d7:9c:e5:f3:f5:9f:e0:1f:31:f4:fc:2a:95:13:73:19:a5:
         68:80:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:33:10 2025 by rpki-client