Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/816bc3d5-f37f-3976-89d6-fc33d678dd72.roa
File:                     816bc3d5-f37f-3976-89d6-fc33d678dd72.roa (raw, json)
Hash identifier:          diYsnymgzlapUhg+yOmQChcqp8skh420eOwSvPt8IS4=
Subject key identifier:   66:BA:6E:22:72:70:9A:F3:64:18:40:FC:E1:84:C0:52:B0:CD:5C:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD34A4606704198A038D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/816bc3d5-f37f-3976-89d6-fc33d678dd72.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        76.138.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:34:a4:60:67:04:19:8a:03:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=1b745c1a-f46c-400e-9273-80b90dd3b231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:1f:e2:ed:8d:ec:9b:fc:f8:93:b5:c8:9a:
                    2d:3a:ac:47:6a:06:d5:3f:f2:06:37:31:25:40:c6:
                    26:03:a4:c2:16:36:2a:94:a1:f6:9c:db:b1:30:ea:
                    cb:52:b6:dc:58:b0:3f:ef:71:a1:6e:c4:40:1e:d2:
                    ba:1f:d0:c5:19:d8:d5:b2:69:53:7f:ee:32:87:87:
                    18:49:37:f5:a4:b6:5a:aa:a8:22:62:3b:4f:8c:1b:
                    e1:13:95:66:2e:e7:60:d3:02:19:4b:3d:8c:ab:70:
                    53:36:70:1f:0a:19:66:f7:1a:ee:e1:8e:92:dc:07:
                    db:7b:5c:dd:29:74:7d:45:da:59:76:d8:fc:80:e8:
                    c8:c2:38:e3:30:f7:22:d4:ff:00:ce:b9:f0:5b:2f:
                    2a:34:21:2b:e7:c5:a7:12:f8:20:f5:91:06:66:b7:
                    87:0c:53:b5:ca:2d:ef:07:4c:ce:8d:d2:26:bb:c2:
                    ed:a1:26:cd:63:93:b6:b6:20:95:7d:92:db:78:6c:
                    4e:fe:83:d1:19:2f:36:d2:8f:c2:ec:ac:bc:05:c3:
                    42:fc:4c:b2:20:2f:0c:b6:72:ce:2b:8f:30:96:94:
                    73:8d:45:5f:c2:e9:e2:aa:69:c8:14:cc:ab:49:b8:
                    a2:57:f6:ad:f6:a1:0b:12:44:13:d2:65:64:5a:3a:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BA:6E:22:72:70:9A:F3:64:18:40:FC:E1:84:C0:52:B0:CD:5C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/816bc3d5-f37f-3976-89d6-fc33d678dd72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:46:65:97:42:bd:70:6f:be:16:33:cd:b6:b8:18:70:a5:53:
         36:ca:e4:7e:b8:7c:78:29:d8:33:ef:8f:ec:c2:fc:8f:99:41:
         26:fd:45:1e:97:55:0c:7c:f2:27:6c:38:f2:9c:7a:fb:5a:7a:
         87:52:f4:08:04:a6:9a:87:09:e8:b4:2c:6c:d9:30:75:22:ab:
         55:5b:06:1a:fb:44:4e:1f:71:59:f8:bc:2d:5f:2f:41:8b:6e:
         d4:ed:a9:ca:92:57:6a:dd:b3:44:34:52:b0:88:6c:7f:29:47:
         0b:ea:56:23:ae:a2:79:22:6e:83:cd:27:80:ed:d2:6c:87:53:
         f6:cd:1c:26:d0:b8:84:3b:df:d1:02:54:89:1d:d7:92:9d:70:
         f0:0c:4d:7b:15:01:b0:d6:69:ff:1f:26:fb:7b:1a:43:92:88:
         78:68:9d:57:07:09:ec:2a:5e:c4:af:af:50:bc:f4:0c:4e:73:
         78:39:11:b2:ce:59:9a:b2:ad:f2:cf:8d:90:da:38:cf:9a:67:
         2f:d9:9b:46:e7:ed:61:3f:73:40:ae:32:57:fb:0d:19:4e:99:
         52:87:1c:35:ce:d1:76:99:d0:c2:aa:e2:19:80:30:38:dd:cb:
         88:73:91:4a:78:5c:b8:2a:53:8c:ad:31:a2:22:57:d2:ec:69:
         ea:4e:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:19 2025 by rpki-client