Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/911f77e8-510d-3259-8442-db780469d50a.roa
File:                     911f77e8-510d-3259-8442-db780469d50a.roa (raw, json)
Hash identifier:          Zjf/0RkTcrmwRgcxz1uxz6tRCGvGCZjMub1ATDBFsjU=
Subject key identifier:   27:FB:49:72:6B:F9:6D:5A:BB:A4:79:DD:9A:DB:BA:D5:48:92:58:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9728B4C2D01E1F1A8A980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/911f77e8-510d-3259-8442-db780469d50a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7015
IP address blocks:        96.109.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:72:8b:4c:2d:01:e1:f1:a8:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=45e008da-b7ae-4bc7-9281-bde07e44b042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:c6:0b:de:3f:39:a3:fa:9a:f2:23:67:e1:
                    a9:1a:33:71:8f:84:72:be:80:3f:f8:bb:cb:3c:db:
                    69:7e:64:97:d1:a0:99:73:eb:3a:41:a4:a2:c4:f1:
                    bb:f7:10:19:cb:33:ce:7f:77:48:fc:03:55:26:71:
                    73:48:ec:2b:da:01:28:2b:eb:b2:d1:0f:f5:62:2f:
                    9e:f6:06:9a:c8:88:b3:18:be:03:db:db:8b:01:a3:
                    6f:4b:d1:b0:73:28:1e:3f:ff:11:6d:c2:3b:52:af:
                    3b:c9:f5:f6:c0:3f:5e:ad:fd:6e:a9:f5:14:1f:fb:
                    24:4d:37:64:63:e1:69:b4:fc:8b:6a:5a:2f:3a:e6:
                    b7:a0:77:1a:e4:d0:40:ac:41:13:61:1f:42:dd:85:
                    a5:90:48:e4:e2:50:cc:e3:72:3e:11:c3:2b:c1:4f:
                    25:ce:e9:f2:e0:61:a7:c6:99:fc:bc:27:1a:23:06:
                    b6:c6:45:c1:ce:73:09:8d:a3:e1:a8:3e:8b:1b:7d:
                    75:27:95:04:f9:e1:9f:9b:38:80:48:7f:20:f1:16:
                    90:70:78:6b:e1:bf:82:55:7c:03:00:eb:54:4d:37:
                    08:c8:82:bc:1d:f6:51:68:06:fd:cb:18:98:d9:12:
                    bb:4e:b5:0f:af:83:ea:c4:8d:d5:79:57:76:07:ea:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FB:49:72:6B:F9:6D:5A:BB:A4:79:DD:9A:DB:BA:D5:48:92:58:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/911f77e8-510d-3259-8442-db780469d50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:be:b7:81:99:f1:88:1d:6e:d3:71:21:4c:a1:97:7e:1b:61:
         2c:10:76:5b:1a:2f:5d:16:2e:60:d9:eb:3f:7f:73:2b:c5:e4:
         e4:1e:9d:19:87:d5:da:c3:5e:40:58:87:7d:44:b4:ca:e8:d0:
         bc:62:2e:01:71:06:12:79:a6:d6:c6:ff:1a:19:ba:3e:0f:e7:
         17:b2:b1:2e:89:e6:61:84:75:a4:f9:65:a9:8d:ab:91:9e:e7:
         17:3a:48:cb:b8:7a:fe:72:f8:48:4d:70:7f:b7:d0:c8:a0:58:
         47:a4:d5:fd:0f:93:0e:c9:f5:cc:f5:70:66:e3:1d:b9:ec:89:
         f0:69:95:94:c4:47:fe:ea:ef:c7:a6:51:67:71:d7:36:9f:3c:
         a2:63:9e:c4:c0:90:7b:ef:b8:ac:7a:9c:d3:ae:c1:a7:ee:4a:
         e4:70:4c:4a:82:94:d7:db:03:4e:1e:31:8f:7d:a6:d2:ff:ae:
         d9:7b:1b:68:c6:55:d4:bf:f0:f9:d2:f7:de:61:e5:88:48:f9:
         b4:b9:0f:5f:75:00:24:8f:17:e5:37:01:96:98:72:99:b1:cd:
         4f:b2:bc:b9:80:e4:59:8c:ff:5e:ec:cb:70:48:7a:93:18:81:
         d1:13:5f:bb:97:9b:fa:6f:f7:13:a7:e9:e3:9f:21:c2:aa:b1:
         1a:d4:d9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:24 2025 by rpki-client