Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5b22f93-daf0-353e-aff4-4960f64d8075.roa
File:                     a5b22f93-daf0-353e-aff4-4960f64d8075.roa (raw, json)
Hash identifier:          xKACM5ocE8CxSi5DpqmUkapOnY0YlCA1NXjhPVWMm5I=
Subject key identifier:   8F:DF:0E:B0:B4:62:0F:1E:96:EF:52:2A:E1:71:04:09:38:F4:23:3F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B5141E79E8A42B27C8913C7E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5b22f93-daf0-353e-aff4-4960f64d8075.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        96.115.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:e7:9e:8a:42:b2:7c:89:13:c7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=5e5aac62-1ad1-45d7-b9ed-6beabd84090f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:62:f2:62:63:73:d4:f7:2e:9d:a3:ad:3e:a1:
                    66:81:58:78:2a:ac:cc:d7:d7:bd:aa:ad:62:87:ac:
                    4e:51:aa:59:46:cd:5b:91:96:00:eb:5e:a7:bb:bf:
                    29:05:3d:ae:ce:5b:6c:80:2f:42:8a:7e:e4:c0:0e:
                    48:23:74:6f:ec:5e:5c:56:70:68:6c:29:ca:54:31:
                    6d:3d:fe:43:aa:21:99:ac:bf:f9:5a:a4:d0:57:b9:
                    38:95:26:e9:d3:81:c7:aa:7c:47:17:a6:c3:26:0a:
                    1e:ad:f2:15:41:59:4b:0d:d6:c8:6c:0f:06:39:1b:
                    4e:0c:68:32:7f:48:02:ad:e1:08:ef:30:f1:7f:60:
                    35:78:42:2b:4a:1c:6a:87:ab:e5:f9:76:48:ff:e1:
                    16:99:e3:cf:1b:10:cb:35:97:d7:a9:b8:ba:cf:49:
                    b0:db:dd:94:92:3c:d1:2e:5d:b6:34:7c:9d:39:2a:
                    24:a9:51:83:9a:0d:03:a6:16:44:77:a8:8d:85:39:
                    99:f7:54:9e:71:30:7a:17:f0:ed:21:bc:99:1e:e1:
                    2d:1c:40:10:c6:9b:64:35:6f:76:71:5c:4b:0f:bf:
                    13:01:e8:88:44:9f:9c:9e:d0:ee:30:f1:49:eb:18:
                    df:d5:c3:21:09:ad:ba:24:38:c5:d6:ff:c8:be:43:
                    0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DF:0E:B0:B4:62:0F:1E:96:EF:52:2A:E1:71:04:09:38:F4:23:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5b22f93-daf0-353e-aff4-4960f64d8075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.115.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:92:ae:9d:c8:3d:61:81:a8:2f:4f:24:d9:6b:28:b6:1c:
         24:3c:c3:1e:1a:c3:7f:99:b5:5b:d6:f2:9f:84:74:62:19:63:
         02:1e:13:c2:cc:a4:e8:c0:d8:5c:2d:7c:4e:4e:86:c4:04:8e:
         1d:24:79:2c:50:55:f4:9a:fe:09:21:b3:95:49:71:eb:aa:c6:
         42:67:a0:5a:d5:9c:7a:71:af:00:84:35:39:93:85:b4:e9:60:
         d6:bb:2f:9b:ab:17:04:79:4f:95:3f:54:5e:7e:53:41:85:74:
         3e:d9:06:91:d5:cd:a5:48:bf:e6:e5:f9:21:12:23:86:0c:15:
         cc:22:72:0d:1e:38:99:c5:66:f1:2d:31:7a:18:fb:c3:d1:cb:
         cd:89:35:46:ea:89:72:6b:3b:ef:b5:c4:40:bf:a5:7f:a6:81:
         4a:cf:9f:ce:4d:32:dc:bb:f1:da:67:38:a8:d9:20:6b:41:87:
         81:84:f0:2c:4e:60:a7:e3:bc:56:69:ea:a9:24:9c:3c:16:85:
         cc:68:73:67:29:0c:34:86:8d:66:e9:a3:5e:96:3c:5e:42:bf:
         c9:da:71:13:58:d5:a0:63:e2:0d:da:95:bb:64:e2:f6:65:7f:
         2d:5e:48:0a:0a:78:ef:2e:62:b9:18:9c:6a:c5:68:a8:d6:90:
         c8:7d:52:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:32 2025 by rpki-client