Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ebb6997-1ea1-3281-b6b7-bc6a11a5dd13.roa
File:                     0ebb6997-1ea1-3281-b6b7-bc6a11a5dd13.roa (raw, json)
Hash identifier:          DJpcT+11rdl8kL5pXNjge6CT5tvt/TXMrrfWqWfnMM8=
Subject key identifier:   25:9F:36:56:53:AC:35:68:BC:89:7E:0A:9A:47:4C:CE:1D:DB:60:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9110C71965E11B19CF800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ebb6997-1ea1-3281-b6b7-bc6a11a5dd13.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     21508
IP address blocks:        73.31.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:11:0c:71:96:5e:11:b1:9c:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=68df7a99-ff5d-4ede-b629-25c1a8f51184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ce:cd:99:13:39:78:73:44:0f:80:d8:3f:d7:
                    42:d1:95:bc:36:60:e7:ec:72:92:2e:cf:18:91:9c:
                    b2:68:17:e0:fb:cd:26:47:da:b7:0a:1b:9e:4e:e7:
                    63:f3:d8:f0:88:69:c5:4e:76:54:8d:a2:69:29:c8:
                    ae:3b:7e:ec:38:41:fd:6b:8b:85:47:f6:d9:8c:46:
                    60:be:15:e5:b3:2a:1f:35:2d:52:df:06:75:f9:2d:
                    47:6f:80:6e:15:1c:0c:f1:4c:b8:d6:b4:b7:cd:2b:
                    ba:f2:bd:05:fb:01:db:f7:4a:ca:e2:17:de:c6:5d:
                    4f:0a:ca:b9:bd:17:5d:c9:dd:02:81:a6:40:74:88:
                    a2:89:49:7d:a9:04:b4:aa:c6:8d:f3:74:58:ee:56:
                    56:76:3b:87:c2:e4:09:3a:a1:15:69:c1:bb:aa:25:
                    77:5b:0b:cb:8f:2a:9a:b2:35:30:c9:43:85:6e:0d:
                    a1:f2:09:ef:71:85:d8:75:a5:c6:86:36:04:6c:ae:
                    24:d9:f9:47:b5:c1:ef:34:c9:ef:0b:80:2b:e1:4b:
                    9d:ee:4d:58:87:a6:1f:73:f5:30:af:ec:4a:ed:a7:
                    ca:d2:83:1f:2e:f9:42:f0:f8:d9:fd:aa:d0:40:14:
                    7e:15:00:d7:64:4b:91:0c:86:03:82:26:54:4b:98:
                    ea:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9F:36:56:53:AC:35:68:BC:89:7E:0A:9A:47:4C:CE:1D:DB:60:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ebb6997-1ea1-3281-b6b7-bc6a11a5dd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:fa:c4:33:f0:dc:2c:84:99:da:b8:8f:be:d8:24:40:11:5f:
         bb:f8:71:eb:8c:34:f6:cb:36:c9:63:05:69:12:de:20:7a:f3:
         3c:60:8f:16:ed:61:66:c0:03:ab:61:ba:48:21:7b:1e:10:fb:
         e1:0b:6c:f1:20:30:d2:bd:4c:83:fe:8d:d4:fd:cc:a8:ac:67:
         e6:a6:aa:2e:1d:f2:2e:5e:37:3b:6d:69:5e:c7:82:45:b8:40:
         c7:5e:11:b2:68:f7:e3:44:36:f7:26:80:5e:92:0f:b3:6e:87:
         4e:46:d3:df:45:10:eb:b5:fe:b9:e2:18:1f:eb:c1:e4:38:77:
         d0:4f:12:e0:48:9e:f6:2f:ef:dd:ef:ad:a7:ba:e7:bb:16:ed:
         af:81:45:7d:23:1c:e9:32:16:8d:93:38:d5:0a:75:84:5b:f8:
         5f:f9:8f:7f:c7:88:8a:8e:72:d8:f2:d5:14:5b:ef:52:17:2a:
         71:81:c0:ba:1f:39:e1:9c:e4:a6:82:5a:e7:2b:e2:c1:5a:a2:
         88:9d:b0:c7:14:a0:75:7a:b1:5d:3a:00:fd:55:87:ab:6a:f4:
         89:dd:d0:ff:c7:06:8b:fd:e4:8b:2b:a7:02:fb:3c:80:10:15:
         55:d1:35:4a:6a:c2:4d:64:da:c2:86:a9:43:bb:4e:75:72:c7:
         4e:dd:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:43 2025 by rpki-client