Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2525e6-4c51-35e5-ac5d-54ff4b7d6cf8.roa
File:                     6f2525e6-4c51-35e5-ac5d-54ff4b7d6cf8.roa (raw, json)
Hash identifier:          zLdxNLH19JSDv3N+CvQukLlz3EoHChUQ3tcTzFxA/sQ=
Subject key identifier:   B7:10:C0:B6:B5:D8:18:A3:48:A6:74:67:96:B1:49:6D:2B:89:44:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD2EDCFD4A194289481100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2525e6-4c51-35e5-ac5d-54ff4b7d6cf8.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        76.107.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:2e:dc:fd:4a:19:42:89:48:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=73ed9282-4a36-4f19-b038-15b3c7967ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:ef:a5:4b:33:80:f0:cc:78:5a:7f:25:b6:
                    e3:8d:37:0e:1f:c9:4b:7f:b4:4f:5d:84:70:e8:95:
                    eb:bd:9b:01:da:96:0e:43:99:d2:ee:7d:8a:d5:74:
                    95:14:58:eb:68:78:7c:37:77:87:fc:a2:c0:f5:0c:
                    70:16:36:e4:ed:59:62:1a:79:ca:f3:a8:99:5e:7d:
                    6b:35:6a:2d:ac:e6:14:67:e1:df:1b:c8:f5:d2:7d:
                    88:a1:13:c9:df:6e:89:cf:83:0d:7d:3d:f5:8c:e7:
                    ce:45:97:f6:8a:15:92:26:ae:91:9d:c9:2d:ef:2a:
                    c9:b3:6e:9a:8f:c0:d5:26:6e:fe:82:6c:8e:d1:41:
                    88:32:bc:fb:2a:9b:2a:c3:8b:fb:e4:86:bd:72:21:
                    36:9d:cb:1c:4f:eb:f3:e0:a7:1c:82:b1:17:c0:95:
                    62:4d:90:b1:aa:5e:aa:a7:b6:a4:4c:6f:0d:ac:6c:
                    fe:8a:31:57:81:e8:49:33:fe:29:47:45:9b:44:5f:
                    0b:91:e8:2c:54:8b:4b:6f:75:ba:5f:b1:e1:b3:e6:
                    87:14:c0:cf:49:7f:90:10:2a:db:d1:3b:38:4f:74:
                    dc:41:4b:d2:83:a9:22:3a:cb:ab:04:db:11:6e:10:
                    90:5a:f3:01:4d:2c:48:cc:d9:54:e5:31:a7:3b:b5:
                    e0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:10:C0:B6:B5:D8:18:A3:48:A6:74:67:96:B1:49:6D:2B:89:44:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2525e6-4c51-35e5-ac5d-54ff4b7d6cf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.107.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:22:6e:27:9e:73:31:0f:c9:1e:70:14:bd:e4:35:1a:f2:f4:
         3e:e9:2d:0f:79:f1:5b:79:75:9a:6f:8a:b3:b1:01:40:3d:12:
         fd:bd:c4:1a:38:5e:af:36:9b:67:31:3b:9a:49:3f:ae:7f:ea:
         17:0d:3f:0b:e3:d5:27:f1:5c:61:8f:cf:84:f3:a6:a1:37:dc:
         37:e4:2b:3e:3e:3f:93:66:b8:4e:37:a8:00:df:74:09:db:a9:
         bb:6c:06:66:f6:65:e0:0c:98:4d:48:44:5b:f1:ba:f6:fc:23:
         bf:32:24:f4:3b:1a:a7:43:59:3e:c4:b2:ba:9b:3f:df:c0:03:
         ff:be:78:6e:32:1e:92:f1:a5:76:c8:42:87:e1:de:31:56:cb:
         7b:0d:14:77:5a:db:98:bd:3e:c2:92:f2:cb:eb:56:d4:f3:cc:
         f0:93:84:cd:a9:bd:ba:d2:b9:be:86:54:5a:93:24:61:d4:a9:
         b2:f9:78:91:87:b0:e3:df:c0:dd:5c:7f:68:c4:1c:ac:9f:25:
         e4:86:90:31:91:2b:06:c4:49:83:fd:d6:ae:51:c9:2c:91:44:
         9d:ac:8c:22:77:bf:1e:1c:1c:11:2c:f4:ef:3d:01:c6:db:06:
         c1:b1:c2:65:5b:4e:c1:86:ee:d8:57:d0:7a:d7:6c:43:d3:96:
         09:bb:47:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:02:59 2025 by rpki-client