Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c88da511-a57e-3b7e-8220-0b498ddc2bc6.roa
File:                     c88da511-a57e-3b7e-8220-0b498ddc2bc6.roa (raw, json)
Hash identifier:          FweecTFra/hCTqKtX6a37LGUi9bbIns9PI5zkdogNj4=
Subject key identifier:   14:81:0F:DF:AE:E1:BA:12:72:35:FF:8E:0F:5E:DE:21:FE:EB:DC:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8B7542878FBBBEA913B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c88da511-a57e-3b7e-8220-0b498ddc2bc6.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        71.228.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:b7:54:28:78:fb:bb:ea:91:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=80c809e4-92c9-4a72-adf2-a9ea0b2e3df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:49:a0:6e:bc:66:67:94:be:94:f7:9f:f9:
                    9c:9a:29:32:c3:e2:1c:81:ea:11:a8:7c:a5:a3:b0:
                    41:bf:96:02:a7:03:b7:de:92:ed:c5:e9:4f:43:7c:
                    74:ef:00:ef:73:e7:76:6c:96:e6:77:37:79:30:b2:
                    89:41:3b:44:42:00:16:83:41:f7:ab:40:bd:c0:f4:
                    59:70:8e:f1:80:e5:8e:61:d6:e0:05:f8:2d:46:33:
                    82:65:5d:57:ee:42:7d:50:e4:7b:f9:d0:4a:e6:8b:
                    8d:f6:5d:db:fa:a9:17:14:e8:f0:89:5f:9b:f3:64:
                    de:9e:50:61:10:8c:f8:38:5f:2d:9b:ba:8f:98:6c:
                    03:41:01:9c:42:74:ed:bf:27:6c:96:cb:61:2e:d0:
                    1f:5c:12:3d:33:fd:84:88:5f:16:d1:bc:27:d1:b2:
                    ad:af:6f:f0:4b:ad:c4:6b:a3:36:a2:27:25:5a:68:
                    aa:d3:66:2c:55:89:f0:87:91:00:c2:f3:df:49:ab:
                    f5:d5:81:ab:9d:b7:cd:00:d5:70:91:c9:29:00:e4:
                    d1:52:e7:c9:93:b1:aa:d2:ed:fa:2d:c0:16:af:b5:
                    2f:7b:eb:b8:28:01:07:ea:b3:d5:bc:0c:c6:61:8b:
                    5c:b7:6f:fe:c2:e1:b1:44:ad:51:4a:71:a8:31:66:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:81:0F:DF:AE:E1:BA:12:72:35:FF:8E:0F:5E:DE:21:FE:EB:DC:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c88da511-a57e-3b7e-8220-0b498ddc2bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:00:73:91:4b:30:e9:50:8c:06:a1:0d:9f:c6:41:99:a5:db:
         df:b8:e5:f9:ce:61:44:c4:63:a3:b8:00:95:5f:53:b3:e5:3e:
         a8:e1:48:08:29:c8:08:60:92:87:7a:ae:0b:8c:0e:01:ee:b2:
         10:ca:ea:41:a5:da:e3:b1:c8:34:19:19:db:08:25:2c:fe:ed:
         0b:fd:1a:09:98:98:83:5c:ed:7a:f1:d6:d5:f2:90:6f:39:a3:
         65:67:4e:fb:62:77:21:6e:c5:28:dc:25:0b:f8:12:fd:e5:22:
         18:54:d9:cb:95:e9:41:48:93:a8:48:70:e6:1f:c2:e9:73:4d:
         ad:97:48:c1:75:a7:93:fe:b4:93:8e:a5:83:51:c5:09:61:e6:
         78:16:55:4a:d6:f8:d1:4f:3b:19:08:12:34:96:87:ce:42:7f:
         48:9b:e5:c9:03:d8:cd:16:7f:fe:69:d3:09:11:5d:f0:75:de:
         4a:10:c0:e5:2d:8f:f9:cf:cd:d4:26:0b:f1:07:4a:d1:89:51:
         47:da:c7:a4:f2:d9:22:e1:c2:36:96:cc:22:6b:0e:b5:2d:d3:
         29:06:c1:a5:79:c6:84:4b:fe:14:27:7d:5b:2a:12:c2:2b:5c:
         58:9b:a0:69:33:b7:be:e1:aa:25:2b:e8:cb:93:72:18:a6:76:
         ed:90:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:23 2025 by rpki-client