Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a6c946b-7d2c-3040-926c-8174f0392f3e.roa
File:                     0a6c946b-7d2c-3040-926c-8174f0392f3e.roa (raw, json)
Hash identifier:          BUbHdjaqds2Vmqherr8VO/NXZvnhCOtr+b7WlCHWXQc=
Subject key identifier:   AA:B1:FB:E9:17:4D:DF:99:20:5A:B4:C0:70:58:F0:73:A8:62:FE:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC253CF665259ED1C5B8210
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a6c946b-7d2c-3040-926c-8174f0392f3e.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.103.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:53:cf:66:52:59:ed:1c:5b:82:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=a18e641d-b297-4258-9d4a-12aa0de29930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:4f:3a:3e:98:9b:a2:eb:9a:eb:bb:ed:f5:
                    62:7c:a8:cd:8b:75:a2:7f:69:d5:39:ac:59:90:01:
                    aa:84:d9:9a:20:78:a1:dc:18:5d:df:32:a6:7d:cc:
                    00:0d:a4:7d:96:70:93:9c:92:04:27:98:81:c2:7d:
                    33:e2:93:a0:e1:f0:81:f7:5e:cc:9e:3c:4c:a3:68:
                    1b:67:d7:af:b5:8d:7b:89:b7:72:c8:24:b5:7c:ef:
                    57:ac:35:d5:c3:09:37:e2:1a:77:88:6c:c7:7b:4e:
                    fd:1a:d7:9d:7e:8c:ae:13:58:b0:a1:95:ba:a1:40:
                    6d:1d:eb:db:44:38:7a:26:e3:29:a4:e1:d2:62:20:
                    e4:d6:73:da:d2:02:e0:5b:6c:78:2d:8e:c6:34:06:
                    db:16:9b:ab:68:d4:94:31:5b:db:ad:c3:a3:8b:02:
                    55:bb:da:44:e9:81:05:f6:39:bf:31:ef:df:f6:41:
                    64:1d:1c:af:0c:4b:4e:76:75:46:17:0c:f1:c1:74:
                    ec:8e:72:3b:9c:9a:3c:d0:fb:06:e2:e5:db:3d:0c:
                    e7:c0:a4:e1:65:f4:7d:a9:aa:50:d8:e1:a4:df:48:
                    51:05:e4:7b:eb:02:7e:c6:fb:11:59:ee:93:e3:15:
                    c8:0c:cd:a9:7a:d5:6e:02:5b:4f:ad:1c:75:04:62:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B1:FB:E9:17:4D:DF:99:20:5A:B4:C0:70:58:F0:73:A8:62:FE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a6c946b-7d2c-3040-926c-8174f0392f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.103.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:6c:da:db:7b:bd:71:28:ac:b0:72:fc:30:78:21:8e:11:ca:
         ed:f7:c9:3c:f7:b2:d3:1d:95:45:ef:58:82:c0:56:c8:e2:2b:
         15:67:85:74:66:2f:0e:6f:75:a6:bc:1b:f0:ca:ae:f4:09:75:
         40:d0:a4:33:81:a8:ba:2d:4d:50:4b:c3:9c:71:47:8d:a3:ff:
         46:4d:a5:c8:22:8c:24:b0:6a:0f:a8:cc:85:e7:a7:9c:03:fe:
         a6:5f:76:8e:af:f0:36:d9:6f:56:a9:5f:80:e9:9e:5a:df:5d:
         a0:a0:8c:d7:80:28:f7:54:d7:de:3f:b2:b4:dc:52:27:c3:78:
         f3:47:b8:b0:a8:ed:03:be:63:d8:67:52:93:63:2d:bb:8a:5e:
         49:e6:77:93:12:76:39:41:44:9e:a5:c0:95:c5:ff:e9:20:cb:
         57:fd:1a:5d:ef:0a:33:d1:cb:84:ac:fb:8b:ab:a6:52:62:3d:
         ed:9c:5e:e5:2b:d5:c7:7d:35:6a:24:a9:89:d3:8a:28:ec:ce:
         77:2e:f4:b4:18:77:d9:57:df:6a:4e:c3:7e:94:e1:9c:b2:fb:
         a5:f8:36:0f:02:84:4d:40:e7:fc:95:cc:ae:17:cd:ab:06:8e:
         6c:7d:0f:e9:89:a4:de:48:88:cf:15:95:db:15:3a:33:1c:1f:
         eb:f3:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:05:53 2025 by rpki-client