Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ee7e0e5-b050-3a55-ae98-086d9199ec34.roa
File:                     9ee7e0e5-b050-3a55-ae98-086d9199ec34.roa (raw, json)
Hash identifier:          5Aly7Q1InloVN0On+tv0Ccgh3oDtyAt7K91bqZaOhOs=
Subject key identifier:   E2:EB:0E:DC:1F:D8:47:DC:E3:B0:C5:39:27:31:F6:68:62:E7:22:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD0DB29EC8117078FBF600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ee7e0e5-b050-3a55-ae98-086d9199ec34.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     13367
IP address blocks:        66.41.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:0d:b2:9e:c8:11:70:78:fb:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=5a52c95a-0e21-49e7-ad3d-9de4faa9234c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:74:95:bb:35:39:89:23:7a:6b:48:2e:50:
                    ea:2c:3f:d4:11:e9:4c:95:55:87:69:dc:0e:30:39:
                    e2:a1:04:40:79:e1:4d:8b:bc:7c:f2:db:e9:a3:2e:
                    2d:22:6b:3c:a8:23:a9:19:df:6a:69:8a:c4:72:46:
                    54:c6:f6:3e:fd:88:17:2b:d9:a3:f7:5e:e2:b7:7b:
                    be:a5:f3:0c:1c:a9:00:e2:48:aa:e0:2a:e9:16:21:
                    34:38:a9:72:fd:f8:80:d6:7a:96:ce:c2:6a:9a:ec:
                    27:4b:0c:1c:99:a9:58:9d:0a:1b:f5:c4:23:23:5a:
                    58:cf:61:9a:0e:92:f8:da:ea:a0:c7:78:9c:84:0f:
                    a0:88:8c:3f:56:2a:da:79:99:c9:19:91:9e:7a:f9:
                    19:de:d8:13:33:5a:aa:da:71:57:3f:33:0a:22:53:
                    ca:21:a0:e9:8c:6d:bb:d9:b3:1c:8d:2e:78:d0:ed:
                    f0:42:39:6e:05:90:f5:67:58:38:5c:e6:20:1b:38:
                    5f:06:f6:35:55:32:61:6f:11:ed:11:29:bc:87:4d:
                    e7:1b:c7:90:75:81:55:31:ad:e6:90:08:5a:a4:0b:
                    c2:d6:2b:fa:eb:75:f9:2c:d3:a1:3a:1b:40:a2:fd:
                    1e:81:65:fe:63:fa:86:72:3d:8a:e4:29:37:10:4e:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EB:0E:DC:1F:D8:47:DC:E3:B0:C5:39:27:31:F6:68:62:E7:22:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ee7e0e5-b050-3a55-ae98-086d9199ec34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:bb:42:81:ae:96:e6:de:1b:12:1a:95:a2:06:2c:55:12:e8:
         e6:27:4c:0f:15:a4:98:c9:9c:78:73:6d:5e:3e:19:20:87:1c:
         06:89:56:d8:bb:71:f7:34:9f:43:6d:ab:73:bd:e2:92:74:25:
         96:5f:a7:4f:9e:1d:27:df:f2:b0:9b:53:1f:34:eb:66:d3:07:
         01:ed:74:6a:5f:79:8e:96:63:e7:c0:a1:95:64:5c:14:67:b8:
         36:ea:21:29:27:6c:d6:1c:19:5f:7a:55:6d:00:8e:31:02:a5:
         a9:ac:5a:dc:4e:11:70:34:44:48:58:b4:a9:e9:14:69:e6:86:
         41:8e:aa:1e:43:d9:4a:fe:70:47:83:9a:19:4e:62:03:ea:59:
         e4:39:b8:60:ee:33:b9:fe:af:3d:72:fe:6b:c9:e2:91:1a:11:
         6e:81:c5:d7:2a:ed:9d:d6:c9:79:52:13:2f:9d:cc:bc:05:1a:
         08:62:2c:39:a5:8b:1d:06:90:b6:c8:3f:38:7c:f2:1e:db:03:
         59:40:bd:88:de:cb:45:d8:e4:f6:7e:6a:88:85:84:42:d8:5c:
         61:c4:0b:29:e1:fa:01:76:2a:df:85:8e:2a:38:bb:2c:ec:3a:
         d2:06:0c:36:98:c3:ea:4c:2c:f6:ff:cd:60:71:01:ae:b4:0d:
         8a:ae:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:13:02 2025 by rpki-client