Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95ff2e78-1f8f-3137-a1b3-82b8cb37e6df.roa
File:                     95ff2e78-1f8f-3137-a1b3-82b8cb37e6df.roa (raw, json)
Hash identifier:          6LVcJtz9GcsvKVO9RY0RjvtcZN89VVzwCbi5WX7GYz8=
Subject key identifier:   80:23:EE:11:E7:0D:FE:50:28:0E:2B:65:3D:23:B9:28:FD:1D:67:F2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584BA39D20D1804800C78394EA70
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95ff2e78-1f8f-3137-a1b3-82b8cb37e6df.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     22513
IP address blocks:        76.58.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:20:d1:80:48:00:c7:83:94:ea:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=448fd603-fcb1-42d3-9576-e7154fc577f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:89:a6:52:59:02:36:41:f5:06:ff:10:d9:
                    c6:4e:74:a7:1a:a7:85:32:44:2d:cc:a0:74:ca:92:
                    bb:e1:37:4a:6c:c3:df:51:cd:da:ba:6d:ed:0d:1c:
                    68:39:02:12:3a:88:1e:24:ea:31:f3:29:3e:5d:8b:
                    2b:70:44:b3:8a:88:6c:cf:f2:5f:9a:93:2b:8b:92:
                    92:31:04:b5:d9:1f:29:82:ba:fc:26:18:17:df:f0:
                    b5:65:2c:6a:2a:75:cf:84:87:fd:a3:78:5b:65:b8:
                    15:1c:ee:dd:78:e2:c0:0a:52:7b:d4:d9:e8:81:4e:
                    83:9f:9d:e5:f4:1f:98:25:37:e0:c5:31:26:7e:22:
                    69:fc:1f:f2:38:93:8e:e8:6c:86:33:8e:a3:6b:ab:
                    0a:62:00:17:6a:2c:62:c9:8d:e4:12:36:fd:d3:e2:
                    f9:09:87:57:4b:37:cd:84:61:52:25:8c:e3:a8:86:
                    ba:ef:f0:a7:3d:31:8a:0b:fa:48:fe:af:8b:21:c0:
                    48:d9:dd:ec:ca:b9:44:dd:1d:b0:bd:a7:2b:c7:ec:
                    2d:31:e6:2e:78:8d:6e:63:eb:ac:45:2c:23:09:d3:
                    ea:3f:db:06:91:32:1b:e0:fc:b0:59:ed:5b:63:cf:
                    c2:aa:f7:4d:5e:fc:70:c1:f3:0f:b1:ee:97:05:40:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:23:EE:11:E7:0D:FE:50:28:0E:2B:65:3D:23:B9:28:FD:1D:67:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95ff2e78-1f8f-3137-a1b3-82b8cb37e6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.58.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ec:5c:8e:04:d9:84:f8:88:dd:fc:f6:67:55:23:94:1a:c1:
         fe:50:63:09:b5:4d:9c:77:22:e5:bb:ec:4e:36:64:bd:cc:48:
         dc:8b:3d:ca:a8:e5:05:78:8c:e9:a1:2c:b6:ca:47:0c:2e:73:
         a3:6d:e3:11:83:43:4b:c9:03:db:04:62:76:6d:cb:f4:ca:48:
         2b:b0:16:37:16:88:4f:5b:59:cf:20:52:2e:05:ba:da:b0:5b:
         70:94:95:74:96:c4:ba:ba:ca:42:0a:10:8b:23:45:0b:8c:18:
         23:c1:2c:8f:f9:1a:4c:db:05:95:cc:bf:dc:9c:82:28:df:92:
         39:fc:67:21:e2:40:10:79:b6:a7:ef:b0:88:76:65:cd:0a:fa:
         ea:71:cc:06:31:5b:5f:34:db:f7:f2:22:33:55:3f:19:e4:7c:
         8a:58:f7:e1:a0:3c:c2:a8:17:ac:4c:07:cd:cb:48:7d:be:dc:
         bb:87:a8:fb:31:8a:59:1d:32:a5:26:a6:4f:c3:d1:fa:33:60:
         64:b4:2e:5f:2b:72:02:53:2c:00:47:19:61:a0:9b:ab:1b:7d:
         18:62:a0:7d:5b:4c:db:38:63:d3:d5:f7:ae:fb:36:b7:52:72:
         08:ba:11:c2:a7:18:28:85:c6:e5:46:f6:d2:a6:0e:05:a1:a1:
         f0:05:90:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:14:59 2025 by rpki-client