Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38db80c-300c-3be3-bfb3-4cdbe07efa86.roa
File:                     a38db80c-300c-3be3-bfb3-4cdbe07efa86.roa (raw, json)
Hash identifier:          VcSelIVKGeIrv3eyVzdXVqsTiUtEkJh0lirmKBamtts=
Subject key identifier:   65:FC:A1:F9:91:B4:C4:25:AD:71:C6:D9:B9:4B:78:18:78:99:DC:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8CDFDB24693F342D16F90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38db80c-300c-3be3-bfb3-4cdbe07efa86.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        76.114.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:cd:fd:b2:46:93:f3:42:d1:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=9b5913b0-c20a-46e6-a385-b9d39cbab62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:72:bd:5e:d6:f3:79:01:44:83:1a:a0:c0:9e:
                    79:ae:51:2a:2b:6e:65:ea:58:ae:3c:75:d0:fa:e9:
                    f7:1e:29:3e:bd:32:e1:ba:cd:76:26:11:6e:2d:29:
                    8e:f0:8b:26:37:23:1b:90:b0:44:45:1c:f5:29:67:
                    05:63:a1:db:61:8b:ed:bb:22:00:07:e8:04:30:07:
                    66:0d:31:3b:b0:96:4e:96:01:d5:7a:5d:b5:dd:29:
                    e4:cc:57:80:08:b6:61:6f:12:bf:47:48:16:91:ff:
                    ba:09:10:85:f5:05:da:d5:e2:9d:cd:60:c8:9b:85:
                    66:8a:6a:67:fe:6f:97:ce:0d:4d:a6:7c:0a:21:be:
                    ab:e6:b3:f4:c7:0a:76:d1:98:47:35:35:8e:08:c8:
                    c5:1e:ec:b0:cb:34:1c:5e:75:4d:db:73:d7:7a:d3:
                    74:59:b0:60:c3:da:37:c9:d3:af:91:ff:b2:a9:a1:
                    67:16:4a:09:52:7e:c3:4a:ea:a0:4a:f7:32:bb:dd:
                    39:3b:df:90:95:01:d3:5c:22:a6:cb:3e:d7:4a:38:
                    ee:18:81:0f:6d:b1:69:88:39:8d:6a:b2:d2:a3:aa:
                    bc:3b:65:2a:85:9b:e1:05:7c:4e:d6:62:a3:3a:98:
                    d1:b5:2f:18:0b:5d:87:d7:ff:be:81:67:c2:fa:aa:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FC:A1:F9:91:B4:C4:25:AD:71:C6:D9:B9:4B:78:18:78:99:DC:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38db80c-300c-3be3-bfb3-4cdbe07efa86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.114.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:45:7f:da:a9:b4:67:74:82:1a:21:1d:cc:1e:4f:74:18:5a:
         71:2d:c7:58:c3:15:17:c9:44:03:de:a3:14:6a:48:a7:bd:18:
         ce:b0:d7:3d:d7:1a:3c:32:b7:67:5a:10:92:a4:bd:d8:c4:e9:
         6a:7a:af:6d:a9:14:c8:6d:59:99:d5:4c:37:6f:32:e5:48:ed:
         3b:3a:d1:a4:8c:a0:ef:7e:af:08:ae:af:16:6c:b4:93:ee:05:
         5e:38:ea:ba:19:0c:57:1e:a1:96:f4:8f:87:ba:87:aa:fa:64:
         60:7e:4c:5f:1f:06:e9:80:55:b1:18:78:3c:22:43:63:c4:67:
         cf:0b:70:39:68:18:46:c0:f2:f9:b9:8e:a5:a5:8f:72:57:3c:
         78:b2:07:48:02:ca:c5:42:2a:27:e3:66:82:cb:5a:7f:fc:21:
         8d:78:7d:26:9b:72:34:00:fd:89:d0:52:56:aa:64:fc:f4:77:
         7c:f7:85:92:ce:2b:b3:ab:c1:ec:cc:59:51:7f:00:89:f8:9c:
         4a:c9:3a:e9:fb:91:da:55:c2:ad:45:a0:54:95:20:bf:62:60:
         d8:05:93:cb:b9:64:5d:65:a9:dd:06:17:d3:b5:81:43:43:fc:
         68:d6:f9:14:c9:ca:ed:98:4c:aa:f7:aa:7d:dd:2e:f0:d1:95:
         cf:9f:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:12:04 2025 by rpki-client