Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/827de45d-86b0-349c-9d78-f898483c7a57.roa
File:                     827de45d-86b0-349c-9d78-f898483c7a57.roa (raw, json)
Hash identifier:          /fJPyg0cWPZfJMJVA/1bTYqH0tZVroTw0RAN5wTn09k=
Subject key identifier:   21:91:E9:07:D0:85:F7:9F:20:42:41:D9:B7:A2:7C:B0:E9:EE:32:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7308393590BF70DDEB960
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/827de45d-86b0-349c-9d78-f898483c7a57.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        76.23.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:30:83:93:59:0b:f7:0d:de:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=281b117c-3556-4ab2-89df-f2bfbf81d62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:39:98:10:46:7d:06:11:bc:fe:1a:f3:9e:
                    b8:ab:93:9d:2b:fa:23:ad:ff:02:af:fd:28:35:d0:
                    ce:f6:05:b3:c0:93:04:cf:0f:93:ee:63:c2:ca:62:
                    93:3b:8b:1f:b6:d6:75:40:57:cf:b0:ae:c1:62:e0:
                    81:5e:1d:44:f7:f0:55:9f:37:81:76:5a:8c:8d:b3:
                    ca:a9:17:9f:2e:ab:6c:be:2c:e5:e9:24:2c:82:e4:
                    ba:4d:a7:3d:15:cf:f9:b3:6e:a0:d2:af:c5:ce:28:
                    88:21:21:90:b4:77:6b:b0:e5:9c:24:52:cc:a7:d9:
                    f7:ea:d9:d1:0f:ae:a1:66:5e:8e:35:1a:20:7a:e8:
                    9f:24:7d:59:3b:bf:5c:81:a0:02:9a:f9:d4:32:dc:
                    eb:e5:76:13:7c:18:47:86:58:ea:e3:ab:bf:12:f9:
                    22:56:3d:a0:61:0e:b4:92:fd:fd:c6:af:0c:61:4b:
                    15:c4:68:17:45:4c:0d:c7:b3:61:0d:1f:b6:f8:49:
                    b9:ab:67:58:78:0d:59:27:1d:a8:31:9a:ab:b3:c0:
                    3d:b4:4a:5b:b0:cd:fa:2d:00:a5:e5:60:b3:f0:97:
                    85:d8:03:5d:e7:e6:45:13:30:50:5a:c4:98:4a:cd:
                    80:82:db:53:30:8d:d1:11:62:b7:e7:a7:20:d1:b2:
                    aa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:E9:07:D0:85:F7:9F:20:42:41:D9:B7:A2:7C:B0:E9:EE:32:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/827de45d-86b0-349c-9d78-f898483c7a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.23.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:23:7a:a6:ed:4c:46:d8:88:b7:4a:4b:30:5d:83:bd:e6:4c:
         af:80:72:8e:08:c1:83:91:15:bb:65:28:fe:de:c7:5b:d2:5d:
         f5:a3:b8:a2:15:d5:47:c0:41:1c:3b:67:0b:63:7e:54:dc:95:
         f2:04:c0:1d:50:72:ad:94:29:8d:20:5d:6a:b0:cf:ae:d5:79:
         0b:34:6d:23:db:f1:78:8b:39:f1:1f:a3:b3:45:78:62:12:32:
         c8:b8:a4:b6:54:9f:9e:95:3d:f6:41:b5:e9:f6:a8:f5:57:9a:
         a8:28:9f:af:34:6e:7d:f2:6a:01:8e:2c:1b:64:0f:1f:6c:23:
         a3:c9:4d:99:f1:61:ac:ac:7c:c1:d2:fb:1b:57:01:95:8d:17:
         40:9a:3f:fd:f9:05:18:a6:c2:71:eb:f9:fb:e3:31:f4:ac:cc:
         92:00:c4:6a:99:fa:ae:2a:f9:fc:9f:19:56:d5:57:59:c1:ed:
         b4:87:72:8a:28:17:c4:aa:44:e5:8c:f9:ec:c5:8a:ee:29:97:
         80:04:4d:97:aa:2d:43:2e:87:cf:f4:25:c9:56:6b:49:a9:ff:
         5b:35:2c:6a:19:69:02:fb:e6:08:dc:c0:21:13:cd:7a:f9:82:
         99:84:13:85:ba:78:e4:cd:8c:49:9d:9a:f8:0c:c8:e8:83:c5:
         59:33:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:20:54 2025 by rpki-client