Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90303c65-08a2-30b0-86b2-a4885604f6d5.roa
File:                     90303c65-08a2-30b0-86b2-a4885604f6d5.roa (raw, json)
Hash identifier:          DHSeI9dexTy+rLjPShSdRVSjpzEJBGumvYTCkb+00hg=
Subject key identifier:   C7:96:4E:7B:75:FE:22:4F:C9:2E:41:94:09:92:5B:EE:FE:26:07:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED8AAE53CA255F4B8C1D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90303c65-08a2-30b0-86b2-a4885604f6d5.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        174.169.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:8a:ae:53:ca:25:5f:4b:8c:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9d3aafdf-1fbb-4ee9-9df5-e2952974d40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:06:c9:a7:b7:ea:54:10:87:b4:3b:37:a3:34:
                    fb:9b:ac:e1:31:ee:37:b9:09:ea:25:35:c4:91:90:
                    36:fc:96:f8:09:a9:0c:4a:bc:04:42:34:2d:29:4c:
                    d6:7d:6b:05:72:d3:f5:29:a7:22:00:a1:36:bc:8f:
                    6b:b2:de:63:29:b6:73:96:45:61:60:fa:c5:25:6a:
                    7c:32:dd:c5:a9:7a:ee:da:29:c4:5b:45:95:f0:ed:
                    90:06:cd:87:2e:e8:32:e4:92:be:e6:51:78:28:e1:
                    6f:87:c6:eb:a8:6f:2f:d3:22:e7:b0:29:47:87:56:
                    f1:91:b8:78:f3:93:ab:50:75:24:44:b4:b8:52:5b:
                    bb:de:a8:5b:3e:18:87:6b:65:0c:0e:ee:e4:a9:41:
                    ed:1f:b9:ab:60:91:e4:94:f7:f8:74:cc:ec:f9:fe:
                    52:e2:7e:48:7a:83:be:af:52:04:a1:27:58:36:3c:
                    27:74:6d:7c:7a:25:2c:cd:79:f4:c8:ca:c2:e1:47:
                    51:5d:3a:7a:b6:0f:14:d6:35:38:bd:db:97:7c:fe:
                    4d:4f:35:7f:02:81:66:09:0b:6e:e4:b6:c7:e0:07:
                    f2:22:5a:96:c8:9b:29:6e:7d:8c:d4:b2:85:f6:fc:
                    c6:5f:98:53:5d:06:79:7d:31:52:e9:c9:c7:e6:25:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:96:4E:7B:75:FE:22:4F:C9:2E:41:94:09:92:5B:EE:FE:26:07:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90303c65-08a2-30b0-86b2-a4885604f6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.169.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:6f:21:8b:3a:df:87:a6:20:db:4e:55:48:a2:31:fc:ea:
         6d:ed:27:ae:73:5a:05:2f:0b:6f:2d:c2:5c:4a:4c:a1:3f:43:
         a7:6a:f6:f4:8a:05:06:ee:83:d4:ee:8b:02:54:8d:65:d0:a6:
         01:7f:9d:c3:3b:7c:8f:4a:ac:37:e2:c3:59:08:15:dd:36:dc:
         46:6a:a3:f7:3c:3f:b6:75:9d:e3:71:a9:95:8e:98:66:86:a2:
         38:a8:8f:8d:c4:fa:5c:d6:12:1f:49:bf:2c:1a:0c:9d:34:54:
         db:a2:8e:08:4c:26:c9:5c:60:40:c8:c8:83:ac:b6:8c:c6:3f:
         7e:5f:8d:0f:12:e0:db:6c:e6:cf:4f:1a:8d:07:5f:81:0b:d1:
         cb:99:0e:1b:d8:89:2c:46:81:cd:a5:ee:55:5b:6c:4a:96:37:
         d7:72:ec:ce:2c:c6:db:29:7a:05:8b:7b:ef:65:2a:b1:52:7f:
         0d:62:80:bd:02:76:03:86:c0:2e:33:93:bb:b7:e0:18:bf:b9:
         37:97:e0:6c:6d:bc:14:3d:ee:bb:3e:0c:b1:4e:6c:92:23:e5:
         01:9c:75:94:79:bb:c2:0b:aa:4f:77:5b:3f:0f:d3:39:49:52:
         3d:e3:2b:9d:3d:e8:7f:10:d6:3a:f4:fd:2f:98:91:32:76:c2:
         1d:b3:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:12 2025 by rpki-client