Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f69ebeac-9f49-34f5-8b3d-71f265faafb9.roa
File:                     f69ebeac-9f49-34f5-8b3d-71f265faafb9.roa (raw, json)
Hash identifier:          icdnVDFMwavqjLIjlh30qMwF4IfbAmFzc+N98jBWJdo=
Subject key identifier:   C4:23:06:0A:67:FD:6F:51:BD:7B:22:6C:72:FC:BF:5C:2F:49:C8:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB737E3C07DD15E59367F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f69ebeac-9f49-34f5-8b3d-71f265faafb9.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        96.108.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:37:e3:c0:7d:d1:5e:59:36:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=5fab5f1e-0401-4e68-93ea-160cd721ea47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:c0:bb:a9:c7:fe:98:14:48:0a:cb:9c:bd:
                    55:d9:4f:c9:55:90:4a:91:f8:a1:e4:f6:98:8a:92:
                    e2:80:ea:08:f4:43:91:fb:34:65:d0:2a:50:60:2a:
                    86:22:d2:34:8f:37:cf:fd:56:ce:4f:6b:78:64:c2:
                    5e:24:94:2e:f7:58:8f:7b:97:4a:db:f3:cb:32:39:
                    6b:78:d4:e8:e1:ac:bb:32:e1:30:87:07:d2:d7:04:
                    c3:78:78:ed:77:26:48:a2:9c:2d:41:2f:a5:1e:0f:
                    94:8c:e1:9e:ad:c9:ec:81:33:42:2b:79:39:07:f0:
                    2f:42:c2:91:5d:4a:9e:ca:03:c7:e8:7f:67:27:a5:
                    8c:3e:f9:16:78:3e:28:04:e8:85:c9:96:b1:de:12:
                    18:07:30:27:09:5d:fc:6e:c6:af:53:66:07:7a:70:
                    c8:90:5d:2b:86:64:82:2e:1f:5e:db:43:44:b9:a4:
                    05:25:a4:f5:d4:f2:43:31:4d:b1:0b:fc:de:55:6f:
                    87:fa:ea:7c:82:fc:01:8e:63:04:60:0e:74:81:e6:
                    a9:4e:ce:46:8a:4a:42:b5:c5:7a:f1:c1:1c:29:e3:
                    1f:4b:3c:6c:64:b6:98:fd:fb:69:99:e9:2d:20:15:
                    40:2d:28:b5:d8:8a:90:89:12:1f:fc:dd:88:cf:7b:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:23:06:0A:67:FD:6F:51:BD:7B:22:6C:72:FC:BF:5C:2F:49:C8:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f69ebeac-9f49-34f5-8b3d-71f265faafb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:0e:b0:ae:ea:8a:b9:92:5a:2a:36:87:e7:27:c8:99:98:c6:
         49:74:a6:1e:a2:ac:50:37:de:80:1a:b5:fe:3b:3e:78:a7:21:
         54:4e:ca:63:d0:41:00:58:3b:20:9a:39:1c:37:34:6c:ea:2c:
         91:74:54:34:a7:61:53:85:f5:9f:2a:55:83:e0:c3:42:3a:7f:
         7d:0b:1e:59:cc:d7:e2:9b:9c:c1:52:42:e3:25:3e:0e:bc:a1:
         57:49:24:78:d6:6a:33:7a:2a:86:f1:46:3f:ff:7f:2d:05:bd:
         1c:78:1b:90:6c:ce:0d:0d:f9:39:4e:20:fd:75:05:aa:50:e1:
         4b:8a:40:49:e5:3e:10:4f:b7:4f:df:b2:58:d7:4f:8b:78:69:
         e7:87:44:3d:1b:b4:2c:cf:bf:c1:01:d2:da:eb:2a:1a:6d:3d:
         8d:21:58:11:d9:d8:67:8c:cc:7c:6a:7b:f6:30:d6:3d:4a:4b:
         1d:9b:f4:e1:c9:d1:7e:35:3a:3f:30:dd:1d:33:8c:4b:f4:1e:
         01:44:37:ac:ce:db:df:f2:c2:7d:80:73:77:3a:0e:f5:56:a7:
         8d:d0:26:40:1b:39:8c:9b:72:65:04:bd:41:34:7c:5a:27:5b:
         b0:ff:ae:aa:a9:9e:1f:6f:68:e8:15:c4:71:b9:b5:d4:92:7c:
         a1:47:87:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:14:55 2025 by rpki-client