Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/874734be-b210-30d3-8bba-53033b1b81cf.roa
File:                     874734be-b210-30d3-8bba-53033b1b81cf.roa (raw, json)
Hash identifier:          cUbm2gEMO9+7A16iJsT1KtCv8btq0EqmnPe4keCxlQE=
Subject key identifier:   8C:C3:EE:26:58:C5:10:54:E0:C9:D7:DE:B6:19:A9:04:F6:10:E7:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB769024C93D98345BBDAE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/874734be-b210-30d3-8bba-53033b1b81cf.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7725
IP address blocks:        67.191.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:69:02:4c:93:d9:83:45:bb:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=ac053730-84f4-43fc-8954-cd20c356c72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:10:95:2c:5f:44:fe:e1:c2:a2:11:fe:e2:de:
                    07:7d:37:47:58:5f:6c:9c:5a:a1:82:5a:09:bd:31:
                    80:a9:03:a5:c1:b0:2c:13:94:5e:8d:a5:9f:55:90:
                    98:ba:11:b9:f5:01:6e:fc:cd:8c:8e:52:ed:b9:65:
                    76:42:d2:0e:6c:1c:cf:2c:de:a9:da:fd:b5:04:4e:
                    75:90:4f:97:d0:19:46:53:51:c9:5e:88:4f:95:b1:
                    2a:98:a3:55:ba:dc:39:91:86:20:74:e1:4d:43:ee:
                    84:76:26:68:76:da:5c:73:8c:4c:c7:65:cb:92:6e:
                    21:11:2c:ad:43:05:2b:89:db:0b:df:1d:3c:c2:e9:
                    04:98:46:ee:95:19:90:ba:33:5c:a0:c4:29:02:f1:
                    55:c9:cc:9c:42:c2:74:c0:92:4a:ad:a1:b3:dc:41:
                    c1:4b:3e:ec:3f:b0:74:dd:be:fc:1d:d6:3a:95:0c:
                    5d:a4:37:39:ef:f3:4d:8b:b5:66:22:0d:c8:af:f9:
                    55:c9:52:0c:36:00:c6:8d:ba:09:63:f7:9d:c0:82:
                    fc:49:9c:9c:50:36:d4:63:69:07:f1:87:4a:ed:ec:
                    52:b6:ba:23:9a:56:54:4d:2e:b9:d4:c6:7a:ca:5f:
                    63:98:18:37:72:98:92:31:e5:a6:54:ad:c7:77:fd:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:EE:26:58:C5:10:54:E0:C9:D7:DE:B6:19:A9:04:F6:10:E7:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/874734be-b210-30d3-8bba-53033b1b81cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.191.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:59:6a:a9:39:54:15:5e:82:4b:dd:a0:cd:41:42:75:b7:57:
         7e:38:1c:a6:a5:35:32:a8:df:70:3a:b8:db:6e:06:54:10:cc:
         4a:07:ad:15:fa:91:2d:c2:2b:e1:f8:02:e7:53:f4:df:a6:5b:
         69:1f:b1:24:f7:9b:5a:df:a3:92:69:0a:3e:2f:55:90:d0:75:
         60:0c:18:0e:93:70:12:83:af:d4:5b:8c:64:31:11:d0:6d:77:
         75:e0:a4:64:ee:3c:04:2f:11:67:98:c3:96:74:ff:ce:b9:43:
         51:ac:a4:e6:6f:93:d2:59:4d:60:29:d1:4a:41:07:90:ae:30:
         e0:02:5f:3b:98:07:d6:82:34:83:c7:99:bf:13:fe:19:0a:3a:
         34:41:fb:57:ad:16:84:a5:1e:a0:a0:d9:d4:4e:d3:93:4f:55:
         11:12:6a:08:52:cd:0a:c8:59:c5:45:41:be:c8:38:4f:78:92:
         af:c8:0c:5d:66:e3:a3:39:94:84:9a:a2:cd:46:00:b3:06:6e:
         25:cd:c4:c3:21:bf:4c:6c:08:1a:27:d1:df:a7:fc:96:55:61:
         25:2d:a6:db:0e:6a:78:69:7e:5d:22:a8:22:7c:41:11:38:ea:
         33:5a:df:58:f1:18:45:01:f7:21:cb:c0:89:9c:15:ba:f3:a2:
         3e:f7:ad:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t2kCTJPZg0W72uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
YWMwNTM3MzAtODRmNC00M2ZjLTg5NTQtY2QyMGMzNTZjNzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBCVLF9E/uHCohH+4t4HfTdHWF9snFqhgloJ
vTGAqQOlwbAsE5RejaWfVZCYuhG59QFu/M2MjlLtuWV2QtIObBzPLN6p2v21BE51
kE+X0BlGU1HJXohPlbEqmKNVutw5kYYgdOFNQ+6EdiZodtpcc4xMx2XLkm4hESyt
QwUridsL3x08wukEmEbulRmQujNcoMQpAvFVycycQsJ0wJJKraGz3EHBSz7sP7B0
3b78HdY6lQxdpDc57/NNi7VmIg3Ir/lVyVIMNgDGjboJY/edwIL8SZycUDbUY2kH
8YdK7exStrojmlZUTS651MZ6yl9jmBg3cpiSMeWmVK3Hd/0gmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzD7iZYxRBU4MnX3rYZqQT2EOdFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODc0NzM0YmUtYjIxMC0z
MGQzLThiYmEtNTMwMzNiMWI4MWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQ7/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVZaqk5VBVegkvdoM1BQnW3V344HKalNTKo33A6uNtuBlQQzEoHrRX6
kS3CK+H4AudT9N+mW2kfsST3m1rfo5JpCj4vVZDQdWAMGA6TcBKDr9RbjGQxEdBt
d3XgpGTuPAQvEWeYw5Z0/865Q1GspOZvk9JZTWAp0UpBB5CuMOACXzuYB9aCNIPH
mb8T/hkKOjRB+1etFoSlHqCg2dRO05NPVRESaghSzQrIWcVFQb7IOE94kq/IDF1m
46M5lISaos1GALMGbiXNxMMhv0xsCBon0d+n/JZVYSUtptsOanhpfl0iqCJ8QRE4
6jNa31jxGEUB9yHLwImcFbrzoj73rVM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:32 2025 by rpki-client