Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85152b0c-6c62-37b2-9687-1f4146c4960f.roa
File:                     85152b0c-6c62-37b2-9687-1f4146c4960f.roa (raw, json)
Hash identifier:          MNImKcAwO9wh4yWuMzZM5AhNJ67WV1EGYjoY7+AY7IY=
Subject key identifier:   32:11:C3:5A:B4:A6:4C:6D:01:72:9D:AA:D4:0F:28:4E:49:88:34:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE03171D45435FD6ED6A043E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85152b0c-6c62-37b2-9687-1f4146c4960f.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        76.105.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:71:d4:54:35:fd:6e:d6:a0:43:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=d754c890-86ee-40b6-9535-71da724e9660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:29:10:df:ae:a9:44:c6:06:8b:67:c3:72:
                    e9:1b:09:f4:30:66:95:74:05:f7:c5:66:8c:a5:a3:
                    d2:0e:57:56:7e:b7:5a:ca:1e:44:c0:30:1c:6c:65:
                    fb:a7:5f:1f:01:a7:93:e1:4f:18:97:8b:70:58:62:
                    17:ab:a4:a9:2d:4a:03:43:87:d7:22:7b:b9:de:0e:
                    87:fe:9c:81:85:00:68:66:2b:3c:c9:54:36:4b:70:
                    c2:3a:9e:82:77:8b:e8:6d:71:7f:f3:8d:4c:e0:42:
                    37:55:e5:00:89:c9:a5:20:04:f0:cf:58:c3:0e:53:
                    c3:1f:78:57:59:f5:fc:07:43:47:89:78:ef:fb:bc:
                    8f:7a:64:b1:f2:d1:23:7d:2c:e2:d2:4d:2c:8b:fc:
                    a0:b4:d4:45:bd:75:1d:35:68:1e:c0:46:89:14:4c:
                    76:d4:bb:3c:47:74:40:b8:33:71:b3:59:86:98:6f:
                    d7:f1:ea:2e:6d:7e:46:ff:c8:ec:5c:49:17:62:2d:
                    ae:b1:d2:00:18:fa:9f:47:b4:47:a1:0c:fc:dd:6a:
                    7a:bb:b1:34:be:0f:5a:33:60:ff:fe:73:ff:ed:a4:
                    2b:c0:d1:7d:3d:f6:5c:c5:46:10:fe:48:63:d5:2c:
                    6d:ba:17:5f:d5:02:a4:da:ee:8e:74:98:12:df:4e:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:11:C3:5A:B4:A6:4C:6D:01:72:9D:AA:D4:0F:28:4E:49:88:34:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85152b0c-6c62-37b2-9687-1f4146c4960f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.105.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:6a:96:e5:48:56:b0:8d:b7:4e:ad:60:48:5d:69:19:09:
         cb:b4:01:6d:2b:92:c4:df:31:45:c3:aa:9e:48:7e:5b:a8:17:
         2d:11:16:da:8f:65:fc:50:53:7a:ef:0e:d3:c8:2d:e6:72:5e:
         e9:83:cf:b0:84:74:7a:a1:5e:f4:b1:de:c4:02:5b:93:dd:b9:
         aa:a9:a6:a8:76:49:be:3c:6a:2d:dd:6e:62:f4:cd:52:a4:1f:
         70:aa:92:d9:5a:ed:0e:13:83:ab:da:3d:fd:04:40:59:e4:f8:
         e2:9c:49:a2:be:ca:2f:c1:64:64:d6:31:b5:5b:32:cc:04:c3:
         8c:bd:58:88:0d:a1:80:31:44:50:62:0c:9f:bf:8c:1a:1c:8a:
         97:1d:57:71:6a:f8:ad:cf:d0:f4:55:7f:9b:6f:67:78:47:70:
         0a:f7:fd:41:a9:60:07:8f:23:e2:af:ba:15:e9:8a:75:f2:aa:
         17:1a:76:35:81:b6:5d:8e:59:57:68:bf:2d:7d:d4:b9:20:b4:
         ce:14:4b:12:fc:ec:ac:4b:94:f7:b4:94:32:e2:cc:24:ee:d0:
         89:30:7b:d7:b0:5a:c1:6f:2f:eb:e6:ef:06:8e:45:d7:fc:f6:
         63:c2:e1:4e:6a:90:f6:5d:83:c0:72:c0:69:e6:a9:0f:92:10:
         1f:1a:91:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:36:10 2025 by rpki-client