Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea0081f-9f4b-3384-acae-666fa577e62c.roa
File:                     0ea0081f-9f4b-3384-acae-666fa577e62c.roa (raw, json)
Hash identifier:          yp98buSXOnOqHjbhMzBqcT0Ubc4LsmKh14aFwVIRq6o=
Subject key identifier:   63:D2:85:F5:ED:EC:CA:F6:AE:3C:E0:69:AB:FD:05:95:5F:66:87:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1F22166BDCCD20B13BC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea0081f-9f4b-3384-acae-666fa577e62c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        73.233.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:f2:21:66:bd:cc:d2:0b:13:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=d7c3e95b-581a-4420-a1da-8dd2abc1041c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:3e:28:42:f7:6a:69:de:1f:4f:83:08:83:
                    90:64:b7:34:f8:e1:ca:5e:c9:e8:ed:58:12:06:5a:
                    be:5f:f6:56:c6:49:51:5c:16:28:1d:d0:2e:89:e8:
                    71:d0:f5:98:19:f5:9c:a2:a0:f1:33:89:ab:4f:e9:
                    75:1b:38:21:55:0f:c5:d7:33:14:6b:cd:80:1e:ac:
                    74:4c:15:d0:dd:ea:05:3d:d8:32:b7:4a:0b:be:4a:
                    7e:77:32:b6:c7:c6:38:77:41:d6:04:58:a3:0c:69:
                    0d:c2:70:31:12:31:e7:c3:f6:d3:9a:ca:ee:5b:4d:
                    58:bb:9b:a3:40:2e:65:b4:c0:04:65:d6:ee:d9:d8:
                    f5:24:c1:8c:d1:47:6a:2c:3a:f7:0c:81:f3:f7:21:
                    6b:72:d3:af:07:b6:78:aa:f4:d4:8e:81:d4:00:cb:
                    95:71:6e:94:fb:12:87:e4:16:e2:35:54:d2:20:bc:
                    97:1d:b8:6a:ba:2e:0c:f4:55:1d:cc:b3:bd:a4:0c:
                    6a:53:bd:ab:45:d7:73:89:76:91:2c:80:34:bd:2d:
                    bb:bc:3f:c6:81:ba:e8:89:cb:6a:f0:c1:41:74:63:
                    3f:87:d2:11:5e:46:8f:9c:e6:2a:95:7e:b3:03:c6:
                    83:92:3a:d2:be:90:c4:55:be:11:06:5d:f4:d1:b0:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D2:85:F5:ED:EC:CA:F6:AE:3C:E0:69:AB:FD:05:95:5F:66:87:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea0081f-9f4b-3384-acae-666fa577e62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.233.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:72:a7:80:c1:07:1d:aa:08:43:fd:36:63:9c:5b:d4:b6:f1:
         f2:c1:72:dd:a9:eb:1f:be:0a:45:5c:c7:0f:ad:f8:1f:87:03:
         35:fa:a1:a7:52:ba:2a:92:2d:b6:ad:79:84:4f:1a:ac:ab:57:
         92:72:03:21:ca:ad:17:73:71:7b:e3:d9:8e:5b:50:93:7e:8f:
         c9:07:90:45:aa:06:9f:d4:be:27:6c:7e:88:49:a8:fb:b6:00:
         e8:a8:45:0d:a2:f6:63:71:af:53:35:d6:28:1b:d8:74:02:ca:
         c3:1b:20:04:ed:49:6c:b3:fb:d6:fd:61:bf:1a:d1:43:ad:15:
         33:4c:db:6e:db:07:9c:d6:54:8c:24:3f:b9:6c:9b:0c:1d:0c:
         9f:11:95:db:57:d7:a4:ad:eb:18:71:4e:54:fc:d3:07:6f:4b:
         2f:e4:db:d2:09:17:96:9e:77:84:d2:73:b8:37:77:cf:97:8b:
         8e:c1:91:13:d9:c4:65:dd:ab:be:1c:9a:b8:27:6f:81:19:0d:
         0f:47:01:6a:ce:79:bb:d5:be:03:96:d4:53:b1:df:61:eb:da:
         b1:e7:3a:6a:d6:02:4d:c0:44:49:30:f5:a7:44:ef:3d:df:c3:
         7d:9e:c6:31:d9:36:7d:6b:d6:f5:6a:9d:58:6a:b6:36:78:cd:
         46:76:2c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:57:06 2025 by rpki-client