Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4d4db1b-2d63-3f49-9796-a3140af53b8d.roa
File:                     d4d4db1b-2d63-3f49-9796-a3140af53b8d.roa (raw, json)
Hash identifier:          zN60Y/s67IKGMG9BDpQrDh72doV14h+0erOc7uiS/oY=
Subject key identifier:   A6:FC:CA:34:B2:8F:01:B4:15:26:A6:93:A0:AA:13:35:FE:6B:54:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB82012F1B95189F4390A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4d4db1b-2d63-3f49-9796-a3140af53b8d.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        107.4.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:20:12:f1:b9:51:89:f4:39:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=dbe3fcd1-b176-4cc1-a8c0-2953f11caa37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:4a:90:ad:80:e3:42:72:25:61:40:36:a8:
                    cb:eb:d2:d1:5c:3f:d7:ff:3b:a5:1c:4c:54:8f:91:
                    41:ac:fc:ef:5e:a4:ab:39:5c:03:f3:de:5a:52:0f:
                    02:73:0c:51:df:f8:ef:75:b8:4e:d1:87:4b:2e:26:
                    09:61:af:a5:a2:91:9e:5e:71:7f:c9:ae:08:a0:ec:
                    22:83:1f:c7:67:b2:3a:e3:49:58:9b:10:9d:f9:f5:
                    c6:5d:0c:ef:94:a1:d3:75:20:ed:58:44:8a:e9:02:
                    7e:b9:5a:16:48:4b:5a:ac:91:7d:ab:18:cc:28:b5:
                    5e:ff:fb:9c:84:90:44:60:fe:8b:28:64:b2:21:f2:
                    b6:f6:97:26:18:a4:6a:c5:f6:54:d3:55:4a:f5:c8:
                    ee:a0:36:53:bb:98:e7:19:de:ac:aa:e6:5c:55:6d:
                    2c:28:f2:36:df:96:89:ee:6d:db:ba:97:dc:ff:65:
                    2f:3f:9c:23:26:ad:b1:c9:bb:7c:35:65:b2:76:e4:
                    07:b7:32:04:34:ae:4d:a4:02:1a:84:84:76:00:45:
                    2a:2a:17:73:83:bf:0b:40:a4:01:af:61:18:28:82:
                    14:86:03:ea:0f:74:f1:91:af:57:51:bc:f9:ab:09:
                    13:48:cf:7a:46:21:9c:75:d2:e5:0b:92:67:74:71:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FC:CA:34:B2:8F:01:B4:15:26:A6:93:A0:AA:13:35:FE:6B:54:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4d4db1b-2d63-3f49-9796-a3140af53b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:48:58:0b:dc:88:a8:6d:08:d4:54:c8:84:da:e9:a7:85:ba:
         b9:1e:94:14:1b:86:ba:71:42:5e:97:34:86:ad:8b:de:ad:d2:
         20:92:9c:0b:eb:2f:95:78:33:26:7d:62:50:42:b2:0f:9d:66:
         f1:5e:0a:08:6d:00:4f:d7:4e:bb:c9:95:df:d2:ec:ca:4c:0c:
         df:52:f6:c9:00:50:06:a6:49:90:7c:76:f1:8c:72:e7:26:82:
         5b:b5:28:ed:25:e5:63:51:f3:b9:26:13:a7:2c:26:94:8c:dd:
         58:47:b3:4f:8f:d3:20:c7:41:de:82:1a:9f:9a:9b:9b:65:51:
         e8:dd:5a:51:5a:ce:c0:0c:af:57:c0:2f:68:19:ad:c1:bd:18:
         c4:aa:82:29:c9:75:15:ce:6b:12:42:b8:28:7e:0e:46:5d:49:
         78:84:3c:35:b2:8e:e1:e9:85:9a:94:3d:37:3e:6b:4a:a8:ac:
         ea:4b:20:c3:f3:d2:9f:68:50:f2:a5:e9:09:24:ca:d3:11:66:
         84:d1:63:03:56:e1:c8:fb:47:d1:3c:01:18:00:6a:13:50:a3:
         50:06:19:1a:80:35:5d:3d:aa:c6:53:b7:5d:ba:e8:7b:8e:78:
         1e:da:02:31:a1:ba:3d:65:68:d8:18:82:9f:04:ea:a0:ba:d0:
         c9:ad:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:24:59 2025 by rpki-client