Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02153fbb-2608-35de-9c9b-ef2c37c95ee9.roa
File:                     02153fbb-2608-35de-9c9b-ef2c37c95ee9.roa (raw, json)
Hash identifier:          15T0ZO9M4IyddHzhxOrhoH1/DuPZ/jwZoxlf3Bod7L0=
Subject key identifier:   5E:43:21:96:AB:E4:4B:E2:B3:23:1D:F2:F8:A4:75:B4:C4:A5:01:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB809C5916F9BB5313CF980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02153fbb-2608-35de-9c9b-ef2c37c95ee9.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        73.88.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:09:c5:91:6f:9b:b5:31:3c:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6fba26e6-acf7-415c-8ccc-95a71828556a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:89:66:e5:18:b8:0b:50:cf:00:4f:00:34:
                    42:a2:cd:a8:ad:f9:29:e1:50:45:18:89:b4:61:89:
                    83:cf:cf:54:e3:66:e1:80:cc:a1:6b:62:94:37:91:
                    b2:e0:3e:d4:81:30:f9:1d:a7:bb:c1:ae:76:1e:77:
                    42:4b:73:4b:0f:80:c2:f0:37:4f:a6:e8:ff:d2:6a:
                    27:7a:55:a7:69:0a:c6:04:5e:79:d3:b2:69:04:7c:
                    36:ca:d8:76:8f:12:81:41:d3:11:ae:66:9a:a7:52:
                    e4:af:43:1d:38:20:46:bf:84:b4:63:ff:6a:9c:ac:
                    d4:ee:52:5d:88:e8:95:29:d7:aa:12:1c:80:2f:26:
                    d5:bf:00:33:23:cc:cc:5c:57:16:61:ec:f8:14:9a:
                    98:be:1b:a5:9e:b3:51:d8:a5:0c:22:2e:ca:3e:6e:
                    6b:4b:7c:6a:56:f8:6b:0a:52:1e:4b:02:09:92:c1:
                    74:15:b6:c5:1c:8f:2b:0b:b4:40:ee:61:9e:d2:38:
                    4c:c6:ca:1a:b3:ec:3a:9f:b3:47:3e:b9:be:cf:70:
                    bc:ef:61:b9:bd:08:de:81:80:a9:66:60:1b:87:a6:
                    ae:6d:d6:63:eb:b6:53:81:67:91:b4:f2:db:b5:f1:
                    f0:e9:f8:3c:e0:5c:3a:18:dc:33:83:f5:95:47:0a:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:43:21:96:AB:E4:4B:E2:B3:23:1D:F2:F8:A4:75:B4:C4:A5:01:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02153fbb-2608-35de-9c9b-ef2c37c95ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.88.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:42:ab:ee:c0:55:b8:6a:dd:f3:bb:76:61:f5:94:37:16:d5:
         3c:2f:4d:d7:22:7e:02:ba:08:55:b4:b0:16:47:05:a6:69:6b:
         d5:7f:36:5f:5b:0c:f0:03:ae:e2:fc:35:2f:79:26:da:35:76:
         46:73:2b:ac:f8:09:40:19:cb:bd:a7:eb:9c:ef:ff:91:61:70:
         ed:74:a7:40:db:62:b7:33:d3:64:cd:f4:10:75:f7:b3:0a:27:
         8f:94:54:d9:f1:05:0c:89:d5:94:b9:c3:2b:a2:7e:1a:79:83:
         be:f3:1e:f2:1a:e6:05:51:35:92:91:10:eb:07:de:61:2d:e1:
         40:bf:ba:59:ce:ee:29:6d:6c:51:e9:56:b9:ba:29:5d:6c:c1:
         61:52:05:87:70:9a:f3:3c:8c:e8:ad:3a:58:4a:50:56:9e:ea:
         80:96:23:fc:0e:a2:85:d5:b4:34:15:3b:1c:e7:a2:61:01:fa:
         fa:06:72:fc:58:a9:66:f0:86:83:5d:fe:5b:81:9a:cb:65:d5:
         1a:70:91:91:56:59:7d:58:70:80:7d:c0:92:45:bf:ad:9c:42:
         7c:29:a5:59:42:a6:99:7d:5f:9a:00:fb:3a:a6:be:97:5c:d2:
         37:57:7a:d9:f3:cf:fd:a3:01:25:77:e6:cd:4f:04:b2:82:b3:
         31:88:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:57:08 2025 by rpki-client