Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f0f1cfa-71ea-340b-9b76-2496385f0ce1.roa
File:                     4f0f1cfa-71ea-340b-9b76-2496385f0ce1.roa (raw, json)
Hash identifier:          Q4bIjw0Ua7GLjJdaBPVGw5boJiZSiOwmHKuBSmmxnsc=
Subject key identifier:   F0:DE:62:54:F3:BB:6B:35:3B:67:46:DC:03:87:63:48:94:7B:0D:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EED54AF7FDEB1343B75E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f0f1cfa-71ea-340b-9b76-2496385f0ce1.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        76.31.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:d5:4a:f7:fd:eb:13:43:b7:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=93ff71b1-9e0d-4212-98e9-e21658d2ada3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:73:1a:5e:65:54:ec:50:db:f0:dd:c3:25:
                    57:c6:90:ed:b7:31:1d:be:10:dd:ee:c1:68:ee:e1:
                    ed:eb:68:7b:bd:ad:ca:81:9b:c0:d8:d8:23:31:45:
                    b1:c9:47:c0:b5:97:d5:43:7e:66:28:bd:07:35:14:
                    9e:ba:00:e6:50:e9:b2:41:be:68:a0:d0:a0:6f:fd:
                    d8:1a:43:b8:fc:96:82:47:08:bf:56:20:42:e7:bc:
                    23:c6:55:a9:12:49:8b:a2:36:42:d7:40:2f:8c:d4:
                    e9:8e:90:f3:37:61:23:d8:cb:c5:47:2b:8f:b9:57:
                    dd:c3:84:fe:55:bb:40:54:26:1e:ef:e9:c2:cd:97:
                    40:0a:c9:72:67:40:99:7e:4e:36:a1:1c:eb:51:49:
                    fe:38:ae:ad:dd:ef:d3:ab:5e:f3:f7:ba:80:55:a4:
                    56:b5:45:aa:c7:9a:cb:8a:66:65:5c:ca:a5:9e:ad:
                    38:78:50:88:34:08:e7:7b:4a:a7:ef:38:f7:27:eb:
                    e2:7e:30:e3:cb:24:f7:73:a5:29:5f:60:14:ff:52:
                    89:26:4b:cf:f4:eb:40:56:5e:26:fe:2b:c4:49:06:
                    a8:7a:e4:0b:a6:5d:80:50:aa:7f:36:77:e0:0f:2f:
                    be:a1:f4:b6:04:b9:d8:6b:65:ef:f9:ca:90:ec:c3:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DE:62:54:F3:BB:6B:35:3B:67:46:DC:03:87:63:48:94:7B:0D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f0f1cfa-71ea-340b-9b76-2496385f0ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:65:c1:32:79:1e:fa:97:3a:92:7b:45:aa:20:4a:7e:83:03:
         0f:42:76:f5:ac:f7:b3:28:13:09:35:7a:0d:13:ba:32:cb:35:
         0d:58:f8:27:b8:b5:84:c8:55:fc:b7:9d:08:16:c1:09:5b:14:
         3d:e8:7e:39:2b:c9:1e:8f:a5:ce:8d:fd:b2:8c:ec:23:0e:cb:
         0c:33:74:df:19:87:e0:70:f4:1d:07:53:65:17:fd:51:77:27:
         78:00:71:e4:45:ed:f9:4d:4d:93:20:7e:aa:64:55:bc:6e:06:
         76:c1:03:a6:cd:04:7d:5a:18:90:07:ec:3a:43:e0:a1:80:84:
         c5:b3:6c:e7:04:48:ff:f6:04:08:de:75:33:e6:df:52:e0:ef:
         c1:9d:b2:71:29:87:33:ec:dc:46:39:63:3b:a8:f7:5f:3f:ef:
         a1:18:73:5a:70:a0:bd:1b:f4:d8:80:c4:be:fb:8c:df:8a:ca:
         79:03:88:6e:08:50:ec:63:ee:16:b4:f8:26:63:4a:b6:9b:8d:
         c4:a3:4c:32:72:e7:35:b8:ac:7f:de:6b:87:08:9b:7c:39:28:
         59:e0:96:b2:e4:d3:1e:44:57:03:82:17:be:52:5f:36:d7:20:
         fd:f6:c3:2c:4a:d4:f0:6e:71:16:11:8f:cd:b2:54:0f:0d:51:
         51:14:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:33 2025 by rpki-client